Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213460.roa
File: AS213460.roa (raw, json)
Hash identifier: dVp3f6/t6HyLu4jaQf18powU8ruFZv8d8+uRJNexg8I=
Subject key identifier: D4:D8:BB:B8:26:91:19:24:96:91:54:A6:C1:49:DF:58:9B:85:D7:83
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04748A8416C895C71E0F52CAC57101F88085D22A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213460.roa
Signing time: Wed 30 Sep 2026 21:48:17 +0000
ROA not before: Wed 30 Sep 2026 21:43:17 +0000
ROA not after: Wed 29 Sep 2027 21:48:17 +0000
asID: 213460
IP address blocks: 168.222.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:74:8a:84:16:c8:95:c7:1e:0f:52:ca:c5:71:01:f8:80:85:d2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 30 21:43:17 2026 GMT
Not After : Sep 29 21:48:17 2027 GMT
Subject: CN=D4D8BBB826911924969154A6C149DF589B85D783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:58:e9:b9:a9:83:2c:a0:38:a4:54:9b:70:
8a:a7:b6:3f:92:24:d3:8d:99:34:e7:1f:61:db:31:
63:eb:d7:da:eb:d2:91:07:d2:2e:78:e6:a2:df:40:
50:3f:6c:f9:d0:6e:6b:4a:6e:86:90:63:b3:bf:e7:
e0:2c:5a:29:cc:44:45:2b:97:89:35:34:75:30:72:
a6:e9:4a:a5:3b:33:a6:b6:bb:d6:3c:b4:d2:59:f1:
74:88:91:9c:e4:b2:b2:d3:60:e6:7b:d1:9b:f6:59:
8d:e2:3b:37:5c:59:dc:17:01:bf:dd:94:46:50:71:
1a:07:40:db:35:1a:2b:d3:0c:1d:73:66:60:bb:fb:
49:f0:e9:4a:2f:fd:e5:4c:e6:2a:bd:87:8b:e2:2a:
8c:25:0c:02:5b:95:41:0d:5e:55:3e:9c:d2:6e:18:
2d:d4:d3:95:a4:0b:98:fe:bd:2a:05:ab:c3:33:86:
38:c6:19:ce:3c:3b:a2:61:bb:72:3b:32:3e:69:9f:
7c:ce:d4:74:c9:b4:75:04:52:78:50:5f:b5:30:49:
bf:73:52:61:58:86:36:f6:33:13:c1:a5:47:27:9b:
1c:9b:b3:27:14:69:be:85:46:a8:e4:e7:ec:de:d7:
ee:96:a5:1d:4d:4e:19:7a:2c:be:90:38:f9:5b:a3:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:BB:B8:26:91:19:24:96:91:54:A6:C1:49:DF:58:9B:85:D7:83
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213460.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.62.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d5:46:c2:04:2a:7e:7b:65:1b:80:45:21:6c:20:74:b9:7a:
7d:1e:5c:49:f5:32:73:28:03:18:90:7f:f8:e6:be:49:37:e5:
06:d6:8c:5c:24:c1:96:37:7c:c9:5a:74:2a:77:c2:9b:57:70:
72:b7:64:a8:2c:4a:f8:e1:31:b9:f3:88:9f:61:00:2c:b0:70:
53:ff:8b:e7:45:8f:cb:2b:4f:8b:fb:ed:98:74:7c:0c:ea:45:
57:5b:28:1c:18:0f:99:62:ad:d8:3d:f9:6f:9f:47:b7:ce:d9:
a8:e5:fb:e6:b6:46:26:9c:25:1d:66:58:bc:b7:04:37:82:48:
02:c5:ad:5b:98:66:00:38:d0:92:41:ec:88:14:4a:b6:38:85:
81:2d:a6:1c:34:a3:d2:20:77:20:15:7d:25:52:64:39:d3:39:
86:63:a7:77:d7:1b:10:c7:70:b9:3e:71:f4:80:f6:d9:d3:8b:
d9:97:57:a1:04:ee:1e:f8:1e:25:a8:af:28:d0:32:d1:66:db:
d7:cf:05:15:ed:73:0c:fe:8d:e3:15:e0:97:75:9d:6b:b4:8a:
bb:9f:c5:ad:48:65:44:bb:ee:9b:00:3c:33:08:fb:7e:81:2e:
98:a4:2d:1b:1a:08:5f:09:e1:a5:cb:50:a7:6f:e9:f1:ac:20:
38:d9:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:34:01 2026 by rpki-client