Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213784.roa
File: AS213784.roa (raw, json)
Hash identifier: Kj5ge8bp+Z05V+gSfYYY0Id5el1/531UU2YTwAqezhs=
Subject key identifier: 82:3D:98:24:0A:DC:9A:2A:D6:99:83:03:A7:F8:89:E1:AB:94:49:3A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0E42431635F6856F52A9E159EE6C5692887293A3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213784.roa
Signing time: Mon 28 Sep 2026 00:06:19 +0000
ROA not before: Mon 28 Sep 2026 00:01:19 +0000
ROA not after: Mon 27 Sep 2027 00:06:19 +0000
asID: 213784
IP address blocks: 51.241.28.0/22 maxlen: 24
51.241.36.0/22 maxlen: 24
51.241.68.0/22 maxlen: 24
94.192.192.0/22 maxlen: 24
94.192.208.0/22 maxlen: 24
94.192.232.0/22 maxlen: 24
188.220.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:42:43:16:35:f6:85:6f:52:a9:e1:59:ee:6c:56:92:88:72:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 28 00:01:19 2026 GMT
Not After : Sep 27 00:06:19 2027 GMT
Subject: CN=823D98240ADC9A2AD6998303A7F889E1AB94493A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:37:f4:29:dd:4e:34:4d:c3:ac:6d:c8:e6:
61:72:fa:60:5c:b8:e9:c5:95:f3:26:78:e7:89:8d:
64:00:36:ba:a8:9f:4e:4d:7d:23:9d:fb:f6:36:61:
d1:d6:f3:61:dd:71:77:9a:31:49:9c:66:b1:1f:9a:
cd:94:d6:0c:3e:ce:c0:0e:c6:f4:f3:4f:3e:37:e8:
ab:0e:79:6c:5d:49:a8:9f:59:63:77:2c:8a:d0:ad:
ad:74:f4:3d:48:09:ee:94:73:a5:8d:88:fa:9b:43:
2b:4f:f8:cb:da:04:49:56:f5:8d:f3:54:01:36:b0:
56:f0:a3:df:0f:94:ce:1d:b5:f5:39:a1:79:5a:06:
0f:45:07:35:30:23:6a:0b:e7:bf:48:38:55:a7:56:
86:e9:3c:2d:77:f4:ff:fb:08:c8:5a:b9:d3:70:bf:
ff:56:18:90:38:d8:47:b4:35:ac:99:17:1a:a3:d6:
8d:5c:46:87:6a:31:b6:55:b5:39:23:5e:e8:d5:0c:
a0:90:4b:2e:8b:e8:50:40:b2:bb:80:ff:24:6c:b9:
16:84:24:2d:e4:af:63:18:fc:5e:fc:9f:d9:ff:b0:
0f:b3:a5:13:7c:16:36:12:4b:cd:a6:c0:b9:b5:6e:
e8:55:38:af:30:2e:dc:34:c8:41:f8:dc:bc:8d:26:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3D:98:24:0A:DC:9A:2A:D6:99:83:03:A7:F8:89:E1:AB:94:49:3A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213784.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.28.0/22
51.241.36.0/22
51.241.68.0/22
94.192.192.0/22
94.192.208.0/22
94.192.232.0/22
188.220.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5b:b9:19:bf:f4:fc:12:5d:c9:9a:56:0a:5a:cc:36:af:58:
a3:3e:fe:23:a0:f4:54:1e:0b:98:7d:ce:6a:46:b2:06:9a:da:
e4:c3:0e:82:9d:5d:b0:5a:38:de:cd:b7:c2:c3:00:01:40:ae:
26:40:b5:a5:71:c7:7a:49:ae:5e:e9:1e:b7:c7:4f:42:d6:7c:
e4:84:d7:01:aa:d4:ab:aa:1a:b1:63:86:6b:fa:94:32:bc:88:
f4:63:7e:4c:e3:46:d3:d5:77:11:8f:d9:ec:7a:9f:c2:fb:27:
07:0a:07:94:ae:01:a8:fc:71:23:c7:46:08:ba:ff:6e:9f:f3:
09:be:06:28:8a:2c:09:a6:b5:ec:de:2b:b3:f7:e3:9b:ba:ae:
da:32:11:a8:c0:1e:f1:d9:20:ad:c1:e0:a1:76:fd:cc:48:ab:
bf:31:a0:42:f6:5f:7c:f6:ac:4e:c4:e7:de:87:96:28:88:43:
96:b8:7d:88:f2:4e:7a:93:f2:ad:be:49:20:54:4e:b0:ef:27:
0d:a0:29:e7:3a:d0:ad:cb:31:36:75:0b:d6:8b:6b:a0:d2:34:
5e:dd:c2:4f:86:7f:cd:15:b5:7e:bd:83:88:7e:07:cf:c5:cb:
d2:17:6a:3b:2b:57:3f:83:ab:f1:1a:cf:71:ab:87:c0:a9:ce:
0c:6a:e4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:41:36 2026 by rpki-client