Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213058.roa
File: AS213058.roa (raw, json)
Hash identifier: i9GrrW96CK9kL8trit7dUi7AOAxd+EZnVU74bV9zJPI=
Subject key identifier: C2:E5:53:7E:F7:4A:B1:39:A0:50:6D:C4:49:FA:49:9F:44:35:05:5E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1A34B74A107D610810CD72634C5DDCCDE58DFDD2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213058.roa
Signing time: Wed 13 May 2026 06:26:35 +0000
ROA not before: Wed 13 May 2026 06:21:35 +0000
ROA not after: Wed 12 May 2027 06:26:35 +0000
asID: 213058
IP address blocks: 155.117.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:34:b7:4a:10:7d:61:08:10:cd:72:63:4c:5d:dc:cd:e5:8d:fd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 13 06:21:35 2026 GMT
Not After : May 12 06:26:35 2027 GMT
Subject: CN=C2E5537EF74AB139A0506DC449FA499F4435055E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:e2:fe:8e:65:3c:7c:ae:32:b7:20:18:c6:
4c:35:b4:c3:9d:af:d9:33:8a:74:7b:8e:6e:14:25:
43:2e:6d:2a:f1:1f:ff:b8:e1:35:42:1c:af:1c:60:
52:25:7c:7b:55:a1:a2:91:2b:d3:4a:a0:af:7c:c5:
0f:22:ba:a1:6a:ba:a2:61:93:be:ee:06:d7:47:55:
5c:4a:42:f1:d4:6e:e0:db:fe:d6:95:fe:ce:87:6c:
67:ae:13:f6:93:d4:6f:92:68:60:46:82:f8:ec:4b:
2f:12:1a:ae:d8:a8:a4:6b:39:86:64:8c:c3:ce:f8:
77:09:10:40:09:90:91:0a:d7:da:62:92:8a:b8:58:
c8:f0:c5:d2:0c:96:35:e4:b1:3c:10:0e:4d:56:b3:
95:21:35:82:02:63:12:38:ed:cb:29:69:db:f5:66:
c7:76:f4:b9:f6:d8:e1:89:22:58:5e:29:03:5b:6c:
09:c6:5c:c4:94:b7:f7:82:2c:75:0b:05:db:d2:6c:
52:70:ac:f4:be:fc:b1:87:1f:6b:01:43:1b:af:50:
55:69:f8:5e:0f:0d:3f:90:26:c4:51:8f:80:c7:b7:
1a:24:8a:be:cd:df:c1:14:fa:7b:11:7c:5c:45:61:
f9:d4:da:cf:b9:3d:2e:dd:20:8d:24:50:d3:12:db:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:53:7E:F7:4A:B1:39:A0:50:6D:C4:49:FA:49:9F:44:35:05:5E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b3:5a:6f:02:73:c7:f0:93:f6:17:36:8a:60:60:34:e9:f9:
e3:45:7a:72:7d:fb:c9:04:07:4b:c3:1a:6a:c7:67:fa:62:41:
14:77:15:fe:f8:83:fb:eb:46:5b:db:81:2a:2b:e8:0f:1d:42:
ca:f2:4c:87:59:59:72:78:22:87:e1:0f:aa:e5:32:e4:92:2e:
7b:60:79:bd:a6:86:a0:d3:0d:1b:29:7b:3e:b6:0e:f8:72:34:
be:4b:e6:cd:18:b8:49:99:58:33:ec:9c:31:cb:28:a5:a5:03:
1f:0d:c0:59:ec:4e:93:0e:59:c4:80:d8:0b:d8:bf:a2:6f:10:
21:74:25:da:3c:50:21:fc:1a:55:44:1d:b2:df:0c:3c:d4:f5:
62:aa:8d:8c:0c:be:67:56:bc:ac:94:13:3f:62:78:c5:8d:9c:
77:a0:13:0a:7b:fd:74:95:ea:f3:03:50:38:87:02:3e:0f:29:
a8:e5:bb:a9:47:90:46:f9:fd:8c:b1:4b:2f:dc:13:43:75:64:
76:5b:26:be:0c:e6:7b:06:d5:14:38:7e:35:0a:71:73:d8:16:
33:b7:1d:cf:60:e4:80:9b:19:f6:66:db:72:b9:d8:93:85:0a:
22:20:6a:48:71:a7:7d:f8:e6:27:09:6d:b6:13:91:62:42:b3:
f0:6e:28:d4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGjS3ShB9YQgQzXJjTF3czeWN/dIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA1MTMwNjIxMzVaFw0yNzA1MTIwNjI2MzVaMDMxMTAvBgNV
BAMTKEMyRTU1MzdFRjc0QUIxMzlBMDUwNkRDNDQ5RkE0OTlGNDQzNTA1NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOeL+jmU8fK4ytyAYxkw1tMOd
r9kzinR7jm4UJUMubSrxH/+44TVCHK8cYFIlfHtVoaKRK9NKoK98xQ8iuqFquqJh
k77uBtdHVVxKQvHUbuDb/taV/s6HbGeuE/aT1G+SaGBGgvjsSy8SGq7YqKRrOYZk
jMPO+HcJEEAJkJEK19pikoq4WMjwxdIMljXksTwQDk1Ws5UhNYICYxI47cspadv1
Zsd29Ln22OGJIlheKQNbbAnGXMSUt/eCLHULBdvSbFJwrPS+/LGHH2sBQxuvUFVp
+F4PDT+QJsRRj4DHtxokir7N38EU+nsRfFxFYfnU2s+5PS7dII0kUNMS20anAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUwuVTfvdKsTmgUG3ESfpJn0Q1BV4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEzMDU4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3Wd
MA0GCSqGSIb3DQEBCwUAA4IBAQAbs1pvAnPH8JP2FzaKYGA06fnjRXpyffvJBAdL
wxpqx2f6YkEUdxX++IP760Zb24EqK+gPHULK8kyHWVlyeCKH4Q+q5TLkki57YHm9
poag0w0bKXs+tg74cjS+S+bNGLhJmVgz7JwxyyilpQMfDcBZ7E6TDlnEgNgL2L+i
bxAhdCXaPFAh/BpVRB2y3ww81PViqo2MDL5nVryslBM/YnjFjZx3oBMKe/10lerz
A1A4hwI+Dymo5bupR5BG+f2MsUsv3BNDdWR2Wya+DOZ7BtUUOH41CnFz2BYztx3P
YOSAmxn2ZttyudiThQoiIGpIcad9+OYnCW22E5FiQrPwbijU
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:16 2026 by rpki-client