Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216145.roa
File: AS216145.roa (raw, json)
Hash identifier: ISlz9BK82/XYO7czZbDKD9RXV5+xoibyJbTgg54N3YU=
Subject key identifier: 7A:5C:63:A9:76:57:DA:B1:AD:7F:F0:14:48:C7:8F:1B:F7:65:C6:30
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0DA5F26AF594B2A9C55D4E4AD5C7AD6EBB6F0717
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216145.roa
Signing time: Sat 20 Sep 2025 15:18:43 +0000
ROA not before: Sat 20 Sep 2025 15:13:43 +0000
ROA not after: Sat 19 Sep 2026 15:18:43 +0000
asID: 216145
IP address blocks: 141.11.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a5:f2:6a:f5:94:b2:a9:c5:5d:4e:4a:d5:c7:ad:6e:bb:6f:07:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 20 15:13:43 2025 GMT
Not After : Sep 19 15:18:43 2026 GMT
Subject: CN=7A5C63A97657DAB1AD7FF01448C78F1BF765C630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:34:62:a3:64:8d:38:d0:1f:41:c3:0c:20:
21:99:fd:da:ec:45:43:28:46:83:23:4e:de:43:bd:
15:2b:76:b3:30:84:15:01:56:76:9b:5e:af:8f:42:
ff:33:cc:c6:be:f3:da:ad:d2:5d:2d:dd:80:c1:2d:
e1:a8:7c:ee:5b:b9:19:e7:08:46:8b:36:80:ff:15:
39:1b:57:89:6a:38:1b:5b:41:5c:48:7f:32:2e:47:
23:ac:89:31:a5:9b:8f:07:c9:d9:7d:17:a6:34:a2:
37:7b:66:4c:90:1b:5a:ef:64:51:17:47:5d:94:38:
04:89:ee:70:f1:a2:1a:db:87:98:8b:b3:bb:35:1b:
96:39:32:d4:74:20:b5:38:c8:be:56:a3:a9:31:72:
67:02:09:75:84:53:78:e6:cd:9a:f2:7c:c0:a0:4c:
1a:3f:0a:fb:e4:80:3d:d1:13:85:cc:89:19:bb:b1:
8d:0d:01:13:16:67:a3:4a:d0:4e:d0:d3:e0:16:e7:
53:ae:5e:91:ad:f6:0a:5b:af:15:e9:25:4a:fc:bf:
a7:bc:46:f0:e2:0c:02:d1:12:f9:77:aa:3a:f9:06:
63:ae:d1:3a:c1:c4:30:40:b2:e4:5f:44:28:af:70:
c9:f5:65:66:58:64:ea:f8:b1:7f:0d:00:73:73:e2:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:63:A9:76:57:DA:B1:AD:7F:F0:14:48:C7:8F:1B:F7:65:C6:30
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216145.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.181.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:52:5e:71:d2:b3:23:e7:c0:13:83:f2:6a:d4:d5:51:12:99:
b1:93:62:d4:24:6c:6c:d2:a0:ab:0d:a3:17:1e:17:e1:a6:49:
99:51:aa:99:32:1a:14:5b:bf:82:2b:0c:f7:47:75:8a:25:d6:
21:96:52:2e:fc:94:b1:65:19:d0:bf:48:5b:0c:76:21:98:57:
74:ea:64:c3:bc:b1:a1:23:59:e6:0e:de:e0:19:62:df:0b:e5:
0f:7e:d4:12:6a:30:63:fc:1e:69:ec:9b:a7:c1:82:1d:23:23:
55:bc:bd:f8:70:8d:10:d6:70:d5:6b:ba:b6:b3:40:b3:ae:9b:
25:f3:e2:47:56:3a:66:60:fc:f0:3f:dd:ce:9e:30:cb:ed:67:
7e:0e:88:55:00:3d:a4:9e:1a:9c:8b:00:05:a3:f2:51:85:5a:
34:65:cf:e8:ba:28:ce:8a:10:2a:0c:8f:d3:04:d3:5a:4b:05:
9b:3a:28:db:ce:c5:40:ef:64:b9:77:e0:9d:b7:3e:70:83:21:
e3:df:cc:b7:e9:86:bd:e9:c2:15:94:fa:9b:02:d1:97:f7:2b:
51:b2:32:af:79:fd:90:4c:df:be:d4:35:a1:31:cb:85:75:ab:
88:bc:ee:8e:d8:55:c8:2d:79:29:78:49:60:1c:8b:f8:2f:a7:
63:47:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:13 2025 by rpki-client