Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213001.roa
File: AS213001.roa (raw, json)
Hash identifier: 5ytxRPlBWbn44piGdtOV7F0+4njLP/Um6faHOR1hh8c=
Subject key identifier: F7:5C:3E:51:0A:C5:60:ED:64:C7:2F:F5:8E:9A:6E:E6:31:AE:29:B7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 78CC015D3B4AF6D92B74DDA62A946FDDD364CE86
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213001.roa
Signing time: Mon 28 Sep 2026 23:53:52 +0000
ROA not before: Mon 28 Sep 2026 23:48:52 +0000
ROA not after: Mon 27 Sep 2027 23:53:52 +0000
asID: 213001
IP address blocks: 146.103.7.0/24 maxlen: 24
146.103.20.0/24 maxlen: 24
146.103.21.0/24 maxlen: 24
146.103.23.0/24 maxlen: 24
168.222.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cc:01:5d:3b:4a:f6:d9:2b:74:dd:a6:2a:94:6f:dd:d3:64:ce:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 28 23:48:52 2026 GMT
Not After : Sep 27 23:53:52 2027 GMT
Subject: CN=F75C3E510AC560ED64C72FF58E9A6EE631AE29B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:78:5a:22:33:7d:b5:be:d1:97:89:1c:ae:
3d:70:a9:91:10:39:aa:3d:25:2d:d3:b4:40:53:d5:
c0:77:bc:3f:5f:36:a7:fd:57:8e:df:98:f4:e3:8c:
d4:22:04:39:ed:51:00:87:1a:d6:3d:2e:31:c0:28:
0f:84:93:ca:8a:96:21:e2:73:cf:57:d5:24:9b:44:
c2:74:db:c3:6b:63:b5:4d:82:c1:6b:11:65:a5:bc:
22:40:1e:c5:09:ff:aa:cf:41:e6:e7:91:64:ec:f8:
7d:3c:98:28:20:67:94:90:68:d2:0f:56:8b:ce:7b:
1f:3f:06:6f:25:e4:2a:9f:87:57:2c:df:f0:36:75:
4e:c4:5f:6e:fe:01:3e:fb:e6:34:ea:49:80:02:1a:
8f:07:66:0f:ec:71:60:2b:fd:14:36:c7:35:22:f1:
dd:9b:98:37:b1:4b:aa:14:77:c1:e5:7d:02:5e:20:
97:48:46:71:5e:15:be:21:44:29:ae:cf:e5:c1:86:
41:5d:47:7b:69:a0:6d:25:6f:61:9f:50:fd:60:75:
12:63:0a:ed:55:dc:ba:46:77:38:62:70:e6:30:a7:
22:34:4c:42:2a:d4:68:c9:74:cf:22:ce:de:ef:23:
0c:9f:80:e4:31:8b:c6:55:10:b5:53:35:62:cc:7d:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5C:3E:51:0A:C5:60:ED:64:C7:2F:F5:8E:9A:6E:E6:31:AE:29:B7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.7.0/24
146.103.20.0/23
146.103.23.0/24
168.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c5:e0:75:8b:ad:46:57:f0:15:67:f9:a9:f5:ae:51:1b:21:
94:34:fb:80:00:8b:fa:ec:45:34:52:2f:f7:b1:2d:5b:36:9c:
f5:cf:53:17:93:60:e3:61:dc:f2:31:90:e8:ff:96:91:62:b6:
a0:3c:a1:2f:89:2d:4e:bc:bd:70:08:85:30:b5:77:19:bd:1f:
8b:f5:60:7f:bc:32:0f:33:c5:95:b7:84:f2:12:1d:f8:ae:80:
ff:f8:d3:ac:93:0d:5d:57:f7:c8:fe:f3:c5:eb:7d:23:ee:63:
d9:a8:f3:f8:c6:b6:2d:5a:b4:a9:d1:aa:15:c1:3d:b5:da:f2:
03:19:f5:23:52:cd:77:16:a7:00:12:58:22:cb:a6:15:96:a1:
2d:48:29:cd:99:fa:f0:1b:9c:3e:5b:28:1b:dc:70:22:ce:37:
a2:d8:cd:0b:d8:61:74:59:ae:b1:e2:d1:ad:04:2f:ac:b6:e2:
51:ad:82:bd:27:3f:20:ec:b7:1d:3d:24:ff:47:9d:bf:84:f4:
5c:68:42:6e:7f:a5:0b:a3:73:eb:3f:80:be:b2:e2:fe:90:30:
4c:58:76:92:72:0e:0a:96:34:5f:08:f0:77:71:42:ab:bd:4d:
71:18:60:5a:bc:a0:1c:e5:29:d3:23:b1:6f:fa:dc:18:7d:a4:
cd:b7:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 04:39:53 2026 by rpki-client