Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: XVBg6NcjG5Ru/AddkyXbafR0xVcN8DFfs04I6UNZ+Xc=
Subject key identifier: 29:80:9F:79:E6:D8:7E:9B:5A:B2:14:31:88:43:78:4B:15:F4:F3:B7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 37831AA272C3AA58FE0B9AC89CB51370FE759A33
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213476.roa
Signing time: Thu 09 Jul 2026 06:23:37 +0000
ROA not before: Thu 09 Jul 2026 06:18:37 +0000
ROA not after: Thu 08 Jul 2027 06:23:37 +0000
asID: 213476
IP address blocks: 140.233.182.0/24 maxlen: 24
140.233.187.0/24 maxlen: 24
143.14.150.0/24 maxlen: 24
143.14.166.0/24 maxlen: 24
143.14.170.0/24 maxlen: 24
143.14.193.0/24 maxlen: 24
143.14.199.0/24 maxlen: 24
143.14.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:83:1a:a2:72:c3:aa:58:fe:0b:9a:c8:9c:b5:13:70:fe:75:9a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 9 06:18:37 2026 GMT
Not After : Jul 8 06:23:37 2027 GMT
Subject: CN=29809F79E6D87E9B5AB214318843784B15F4F3B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:7d:f3:d9:ac:f9:2a:57:1b:fb:bb:04:f8:
0b:cf:d7:dd:25:36:2f:da:4f:58:71:31:df:bc:4b:
42:be:9e:f6:bd:1f:2e:dc:94:11:ec:0c:1d:9e:a5:
9b:39:d5:aa:3e:a3:7b:0d:80:e7:21:d0:2b:0b:ad:
e0:75:5b:0a:db:2b:0c:6e:d3:c5:a5:b4:4f:04:0d:
fe:f6:19:0e:36:0f:fb:90:b3:f2:40:8b:bb:f3:50:
e5:2a:24:65:df:c5:51:f2:08:10:00:66:c0:bf:ad:
e7:15:19:df:11:62:df:ea:7e:35:8a:f6:cf:08:45:
e6:2a:39:61:d7:23:f4:77:5b:2c:9c:43:e9:d4:58:
6d:6e:4f:c9:f9:88:5a:5d:e2:7c:ba:50:3b:c9:01:
cb:aa:30:3e:98:eb:1e:a7:46:19:e0:39:99:de:e7:
e9:c0:4b:d9:6e:16:db:11:de:10:65:89:95:60:3e:
f7:af:dd:f4:c7:6c:4a:3f:5a:1d:ef:bb:e6:9b:31:
b6:5a:79:67:e9:8b:d0:88:13:a0:2b:3f:33:98:2d:
98:b8:df:47:9d:e2:f4:5e:f9:56:73:e1:ff:30:47:
0e:5e:f4:85:29:f4:cb:8f:9e:b5:a1:52:70:81:ee:
5b:cf:c4:d8:72:0b:ed:2d:aa:5b:0d:38:9b:82:e2:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:9F:79:E6:D8:7E:9B:5A:B2:14:31:88:43:78:4B:15:F4:F3:B7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.182.0/24
140.233.187.0/24
143.14.150.0/24
143.14.166.0/24
143.14.170.0/24
143.14.193.0/24
143.14.199.0/24
143.14.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:47:86:df:18:c6:ab:c6:bd:ce:44:68:dc:24:ff:88:0a:f5:
e8:dc:24:c7:0d:64:df:0a:61:b0:07:fd:98:37:b5:d1:e6:28:
6e:bf:1c:bf:f4:24:51:3a:7a:49:5f:ce:0e:0b:75:20:d0:78:
eb:a1:d8:bf:f0:fd:20:45:03:76:08:4c:66:b7:40:f0:66:23:
f2:40:02:01:57:91:52:b0:c4:70:5a:19:36:a5:3e:a7:d9:3c:
40:bb:18:bb:12:a2:3a:15:1d:60:5f:d0:44:9e:df:f8:8b:4d:
87:96:fe:0a:29:ae:fd:08:57:dd:d4:45:09:54:ca:e8:6f:fb:
b7:a9:dc:a8:c8:56:d2:1e:67:db:ee:cf:31:4d:b3:0c:27:f5:
5c:a9:25:1d:d7:dd:d6:4f:8d:3b:29:a8:c0:31:22:49:c7:31:
ff:e6:2d:f6:c4:12:02:c6:8c:5e:fb:7f:38:27:ba:40:04:c6:
9a:21:5e:04:41:f1:cf:18:15:54:6e:01:e4:bb:65:ac:08:f7:
8d:57:09:17:f9:a1:9d:ce:ae:77:8d:08:f9:0f:70:c6:e8:d3:
e1:61:0e:0f:7d:b5:85:1b:aa:62:a5:51:bb:be:c3:b0:ae:69:
4a:6d:14:f4:96:50:fa:bf:74:55:04:32:4c:98:46:33:f5:8a:
97:bc:1a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 08:44:18 2026 by rpki-client