Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213784.roa
File: AS213784.roa (raw, json)
Hash identifier: H2ZfXEjTBB52Z9saBs8K0lEQZfFdSONAIqpbS6y4Qp4=
Subject key identifier: 19:AD:66:9B:61:4C:99:BF:79:54:C4:C7:EA:A5:09:BF:25:9B:E1:B6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 531C115C4302A81E7B7E255558E402336B1BE10F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213784.roa
Signing time: Fri 19 Sep 2025 13:28:51 +0000
ROA not before: Fri 19 Sep 2025 13:23:51 +0000
ROA not after: Fri 18 Sep 2026 13:28:51 +0000
asID: 213784
IP address blocks: 91.124.84.0/22 maxlen: 22
91.124.92.0/22 maxlen: 22
91.124.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1c:11:5c:43:02:a8:1e:7b:7e:25:55:58:e4:02:33:6b:1b:e1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 19 13:23:51 2025 GMT
Not After : Sep 18 13:28:51 2026 GMT
Subject: CN=19AD669B614C99BF7954C4C7EAA509BF259BE1B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:05:58:b7:fd:1a:09:e1:08:97:95:d6:e3:
f9:33:7f:8b:b0:c3:d8:8c:68:82:ec:c2:1f:00:03:
f9:dd:12:8d:6a:6f:1d:b0:8c:2a:c8:22:c1:0a:69:
ae:d3:8d:dc:97:63:0c:7f:d0:84:43:73:d8:b9:38:
5e:23:b5:92:db:35:98:21:7a:19:5b:c9:09:ce:fc:
20:d8:d3:e8:56:e3:50:64:24:05:6f:88:c6:d1:5f:
53:96:fd:3f:c4:29:c0:8b:6e:dc:1a:10:42:53:21:
9e:d6:b0:03:c1:c3:0e:ee:94:7f:20:78:4b:ff:bc:
0f:5d:cd:b7:87:34:8d:39:fa:e3:00:55:8a:13:30:
1c:c8:47:37:b2:37:18:9a:54:34:28:74:45:33:7f:
11:f6:51:11:4c:7c:15:bd:38:bb:d9:2b:be:97:64:
35:2e:94:b3:e0:b2:04:7a:f6:07:41:e4:e3:48:fa:
14:90:43:e7:4b:ea:dd:31:8e:e5:d0:3e:35:79:24:
67:9e:a4:a3:5b:8a:5b:8e:91:f5:cc:83:8a:53:60:
6f:4b:72:e7:d3:ad:0e:d9:a0:22:62:f7:ad:76:6a:
01:9b:a1:16:f9:ad:7c:55:b3:04:a3:6a:07:df:8b:
48:ef:fd:f3:b5:85:ec:06:a8:3a:37:8d:e6:ec:9b:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:66:9B:61:4C:99:BF:79:54:C4:C7:EA:A5:09:BF:25:9B:E1:B6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213784.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.84.0/22
91.124.92.0-91.124.99.255
Signature Algorithm: sha256WithRSAEncryption
ab:57:cf:3b:25:84:ba:9f:bf:a2:f9:32:8f:2c:1e:35:76:d5:
f1:78:ee:ab:37:c6:a2:d9:7c:a7:15:63:ca:4e:0b:43:8a:d3:
2a:0d:10:e3:fc:9d:9d:a0:70:3c:0c:3a:e5:47:28:02:6e:d3:
f4:36:2b:dd:92:a1:3b:83:1b:91:ef:67:34:28:83:0a:ef:93:
1f:c3:10:b9:f2:0f:33:7e:a2:e4:5a:46:34:65:8a:5b:54:40:
d8:97:58:cd:b6:a3:0c:07:10:53:9a:b5:a8:57:20:a3:d9:98:
df:68:e5:41:95:54:24:f6:b7:7f:2d:a6:e0:d1:29:a3:50:40:
86:5d:de:a8:d2:ae:56:21:46:f3:8c:6f:6d:65:d5:20:35:30:
fd:a4:90:2b:2c:2d:d9:c4:00:bc:6f:be:bc:ae:cb:60:53:83:
ca:e9:d3:99:0b:ca:55:05:bd:4f:33:52:15:ee:6a:3d:29:6f:
5c:54:80:d8:19:fd:87:b5:87:d7:a8:1b:86:12:41:26:09:b2:
58:99:a1:8e:ba:07:ff:9e:55:7a:41:2b:32:1c:20:eb:2e:6a:
49:48:44:81:61:ab:a0:a1:f8:d3:25:46:c1:d8:ad:62:e4:05:
6b:15:6d:3e:ae:0f:2a:dd:90:1d:8f:11:56:fb:88:e7:c2:89:
e5:be:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:36:43 2025 by rpki-client