Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213035.roa
File: AS213035.roa (raw, json)
Hash identifier: RoKRn+c58ojQpzhUVkBXbOE2ivhfTpsTyk0PhJd+dIY=
Subject key identifier: 71:4E:74:9A:C4:48:72:0D:7F:87:A4:F2:FD:AA:65:89:2E:CD:24:D3
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3A84B6D1D7282AA1B19163E472EC1111D39EC252
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213035.roa
Signing time: Wed 12 Aug 2026 14:05:08 +0000
ROA not before: Wed 12 Aug 2026 14:00:08 +0000
ROA not after: Wed 11 Aug 2027 14:05:08 +0000
asID: 213035
IP address blocks: 91.198.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:84:b6:d1:d7:28:2a:a1:b1:91:63:e4:72:ec:11:11:d3:9e:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 12 14:00:08 2026 GMT
Not After : Aug 11 14:05:08 2027 GMT
Subject: CN=714E749AC448720D7F87A4F2FDAA65892ECD24D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:ba:3c:1e:d8:50:ff:9e:ec:dc:73:44:56:
c8:ac:9e:f3:9d:d9:06:21:6b:9e:d1:0e:be:a6:01:
05:dd:cf:6d:a7:f8:e0:6c:a9:43:29:54:89:1b:b6:
8a:3b:83:32:20:61:1c:53:3a:50:c4:68:7b:06:ec:
35:29:6a:2a:3c:fc:5e:9f:d2:8e:e4:da:44:87:68:
09:3c:c4:72:be:16:17:13:38:48:b6:d1:4c:e6:e8:
f6:0f:98:bb:c3:7f:d3:06:a2:a0:cf:e3:39:5e:e9:
df:62:71:e1:e7:ab:7f:45:36:e3:da:d3:66:1a:0a:
4f:d3:c5:55:1b:b7:73:f5:55:38:10:0d:e1:29:81:
bf:f5:ae:c3:cb:9b:02:e2:ce:a3:06:86:5d:06:09:
4d:b8:2c:ec:4c:9d:b6:d3:fa:f3:6c:31:47:6a:fa:
df:88:b9:d5:67:d7:a2:c1:19:d1:0f:7c:26:f1:86:
a9:95:ac:5c:09:95:ba:be:a6:6b:ae:52:30:a5:6a:
87:4e:58:96:74:68:d4:87:23:b5:79:eb:68:ad:32:
a9:9e:a0:6f:74:dd:5f:53:39:9a:41:71:98:8a:f4:
ca:ac:6b:bd:a3:1e:0d:2d:b2:6b:3d:11:74:65:cc:
03:d2:bb:f7:7c:28:14:1d:e8:5d:5b:85:01:73:b7:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:74:9A:C4:48:72:0D:7F:87:A4:F2:FD:AA:65:89:2E:CD:24:D3
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.123.0/24
Signature Algorithm: sha256WithRSAEncryption
61:78:ac:7b:2b:cf:ab:09:b6:c5:7b:3f:46:f5:3f:26:95:80:
98:53:10:0e:e1:0a:9f:e0:c0:8f:fc:1e:c5:48:5e:f2:0a:bd:
45:44:76:87:3c:2f:f2:a3:08:a5:54:94:5a:61:99:38:0e:49:
c5:80:4a:1d:75:db:c2:72:50:6c:c4:b2:4f:cf:a2:c0:87:db:
e5:fd:24:59:ed:5e:22:99:7b:5c:db:9e:3d:99:0b:16:71:db:
21:b4:30:1c:6a:65:8c:95:84:59:0b:5a:fa:21:ec:ee:56:c5:
22:f8:de:a2:b2:e3:b5:cf:2f:20:64:9b:92:eb:b7:96:48:f7:
f6:ea:84:22:63:58:b0:81:7a:93:14:0e:fb:e7:9f:18:47:8d:
b0:39:1c:3a:23:08:9f:d2:8a:6a:e2:e6:bf:dc:53:2d:05:f1:
c7:06:86:35:e6:e5:fa:f5:09:c3:d8:10:53:92:37:9d:d3:bb:
6e:1a:ef:0b:cd:9d:30:a7:0f:cd:70:5a:79:f3:76:70:d9:df:
c4:6a:ad:45:39:65:e0:03:52:36:3d:f6:38:66:e6:68:a1:fa:
61:2a:e5:ef:a1:8c:38:7d:41:69:39:60:57:73:16:c1:43:88:
49:90:8c:43:91:2f:4d:ea:8b:b0:de:bc:37:23:a7:2f:7a:8c:
91:d1:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:12:56 2026 by rpki-client