Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213711.roa
File: AS213711.roa (raw, json)
Hash identifier: 57I0oD0ZvKtOfm3do3Nm1Cgae/tAxf2dOeoxqLACIfM=
Subject key identifier: 1E:07:5E:C3:56:CB:3D:B3:4F:B1:F1:82:B7:18:D9:E7:90:31:74:F3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0571DDE83307DF263C4BA4F540541B4B5D50460E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213711.roa
Signing time: Mon 12 Oct 2026 13:49:36 +0000
ROA not before: Mon 12 Oct 2026 13:44:36 +0000
ROA not after: Mon 11 Oct 2027 13:49:36 +0000
asID: 213711
IP address blocks: 2a13:9500:78::/48 maxlen: 48
2a13:9500:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:71:dd:e8:33:07:df:26:3c:4b:a4:f5:40:54:1b:4b:5d:50:46:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 12 13:44:36 2026 GMT
Not After : Oct 11 13:49:36 2027 GMT
Subject: CN=1E075EC356CB3DB34FB1F182B718D9E7903174F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:e3:a3:de:e9:76:76:29:45:e2:49:3a:fe:
8a:3e:12:49:83:10:c8:36:4d:80:08:72:42:ca:a1:
6a:41:c4:0b:b7:6d:11:3b:d8:d3:f6:e7:65:cc:22:
18:38:c6:1e:0f:9e:44:4f:40:77:b3:31:67:28:50:
cb:b7:7a:61:40:6a:aa:4e:37:58:c3:62:ad:aa:8e:
72:e3:db:9f:5b:87:40:44:e7:0b:a3:e8:3f:ee:33:
a1:86:ff:99:1a:d8:6e:05:cc:9b:2d:fe:00:61:05:
74:80:c1:dd:f1:54:37:42:87:2f:ea:d8:a0:79:99:
b6:4a:52:a3:48:b6:ba:5d:38:c7:43:b6:e3:05:06:
f5:88:05:52:0a:b4:fd:58:15:96:2b:a5:68:c3:a3:
55:70:b9:52:fe:a3:93:b8:17:c3:18:e9:86:fd:c2:
f4:57:e1:c0:60:4d:e3:89:f8:a8:c1:4a:80:76:14:
72:08:d9:8f:8d:8d:c7:d5:df:c4:37:4c:ea:6c:49:
f5:27:4c:85:82:e5:83:42:ab:88:e1:ff:64:7a:01:
74:b9:59:eb:8f:cf:e6:9f:1a:d2:00:00:cf:79:d1:
34:64:af:02:5f:3a:86:fc:9a:80:b1:58:0e:bc:66:
7e:2a:16:10:1c:e2:85:ab:3b:30:e7:d8:b2:d2:e0:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:07:5E:C3:56:CB:3D:B3:4F:B1:F1:82:B7:18:D9:E7:90:31:74:F3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:78::/48
2a13:9500:106::/48
Signature Algorithm: sha256WithRSAEncryption
43:1c:0f:28:fe:2f:a3:63:bf:75:17:07:9d:09:1c:07:78:db:
06:ed:b8:46:d8:84:f2:14:f1:c5:bd:26:0c:09:d8:1b:24:f8:
af:29:59:3c:35:ac:e5:39:cc:46:5d:c3:6c:91:e8:6e:3e:e9:
6f:4d:0e:6b:1e:1c:ef:aa:96:81:34:ef:dc:9a:70:1c:54:cc:
7d:e6:d5:6d:f4:99:d2:5f:83:23:09:ce:55:92:a6:7e:8b:92:
e0:26:20:e6:c8:05:a4:34:8b:a1:3f:74:1e:40:cf:cc:ae:8e:
ae:bb:22:1f:ca:b5:de:2f:70:c9:0b:a0:35:38:c8:f9:76:cf:
83:1c:c5:1f:bb:1f:00:4f:3d:94:b9:bb:8c:5d:b6:8f:cd:ff:
f9:d4:8b:1b:02:3f:9e:0c:b8:ae:9b:1f:d2:d6:84:23:42:8a:
4f:a8:31:e6:46:bb:a0:fe:06:72:45:95:f2:b2:01:3f:8a:34:
aa:0b:81:11:5c:24:e8:0a:53:01:25:d0:40:5c:ff:69:86:ba:
ba:65:ce:f9:7c:15:c5:c9:36:33:30:a7:c9:8d:8b:d9:b4:7b:
df:41:d1:78:a7:df:0f:ed:a8:70:ae:89:34:c1:d3:17:80:b8:
3b:81:75:14:6e:2a:d7:8b:0a:4e:77:0d:bc:2c:08:fb:cc:83:
05:a3:d1:4e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUBXHd6DMH3yY8S6T1QFQbS11QRg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMTIxMzQ0MzZaFw0yNzEwMTExMzQ5MzZaMDMxMTAvBgNV
BAMTKDFFMDc1RUMzNTZDQjNEQjM0RkIxRjE4MkI3MThEOUU3OTAzMTc0RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5u+Oj3ul2dilF4kk6/oo+EkmD
EMg2TYAIckLKoWpBxAu3bRE72NP252XMIhg4xh4PnkRPQHezMWcoUMu3emFAaqpO
N1jDYq2qjnLj259bh0BE5wuj6D/uM6GG/5ka2G4FzJst/gBhBXSAwd3xVDdChy/q
2KB5mbZKUqNItrpdOMdDtuMFBvWIBVIKtP1YFZYrpWjDo1VwuVL+o5O4F8MY6Yb9
wvRX4cBgTeOJ+KjBSoB2FHII2Y+NjcfV38Q3TOpsSfUnTIWC5YNCq4jh/2R6AXS5
WeuPz+afGtIAAM950TRkrwJfOob8moCxWA68Zn4qFhAc4oWrOzDn2LLS4GkfAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUHgdew1bLPbNPsfGCtxjZ55AxdPMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNzExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhOV
AAB4AwcAKhOVAAEGMA0GCSqGSIb3DQEBCwUAA4IBAQBDHA8o/i+jY791FwedCRwH
eNsG7bhG2ITyFPHFvSYMCdgbJPivKVk8NazlOcxGXcNskehuPulvTQ5rHhzvqpaB
NO/cmnAcVMx95tVt9JnSX4MjCc5VkqZ+i5LgJiDmyAWkNIuhP3QeQM/Mro6uuyIf
yrXeL3DJC6A1OMj5ds+DHMUfux8ATz2UubuMXbaPzf/51IsbAj+eDLiumx/S1oQj
QopPqDHmRrug/gZyRZXysgE/ijSqC4ERXCToClMBJdBAXP9phrq6Zc75fBXFyTYz
MKfJjYvZtHvfQdF4p98P7ahwrok0wdMXgLg7gXUUbirXiwpOdw28LAj7zIMFo9FO
-----END CERTIFICATE-----
Generated at Sat Oct 17 07:01:47 2026 by rpki-client