Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213690.roa
File: AS213690.roa (raw, json)
Hash identifier: Pvy/+sx+J2seAinIt8cCb6SnQQG0pvavGpzkuiCxEWM=
Subject key identifier: F2:3F:43:75:3E:47:7D:79:35:10:16:0E:8D:9D:D0:83:07:D5:FA:E0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6CC3F79C01502F2A4E2F73C50E108D5C961A2D1A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213690.roa
Signing time: Mon 10 Aug 2026 12:57:05 +0000
ROA not before: Mon 10 Aug 2026 12:52:05 +0000
ROA not after: Mon 09 Aug 2027 12:57:05 +0000
asID: 213690
IP address blocks: 146.103.34.0/24 maxlen: 24
168.222.81.0/24 maxlen: 24
168.222.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c3:f7:9c:01:50:2f:2a:4e:2f:73:c5:0e:10:8d:5c:96:1a:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 10 12:52:05 2026 GMT
Not After : Aug 9 12:57:05 2027 GMT
Subject: CN=F23F43753E477D793510160E8D9DD08307D5FAE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:97:f4:4b:15:be:02:a3:39:6d:89:19:0e:
6f:61:6e:36:fb:48:61:25:fa:25:9a:9e:e0:0c:e1:
ac:f6:05:ac:3d:24:e0:74:bd:01:cd:74:12:58:fc:
3f:63:69:f6:71:d8:2f:95:f3:30:c9:4d:1d:3f:9f:
71:b3:01:fd:b7:5c:2b:78:58:1c:14:11:47:19:ab:
fc:04:dd:2b:a2:62:68:09:0b:c3:76:d2:48:f3:1a:
11:b3:94:61:54:61:ab:1b:74:fd:58:cd:3a:67:fd:
2b:6d:6c:56:c4:02:4c:a1:37:c1:a2:a6:70:5a:35:
0c:2b:03:2d:1d:73:40:3d:76:95:c4:0c:fa:1c:32:
b1:eb:90:be:24:02:0a:30:aa:26:aa:55:99:a9:cb:
c2:bc:21:f6:83:f9:1b:bd:e7:68:f0:fc:7a:4e:41:
1c:b5:97:94:98:8d:6b:6a:97:53:4d:bc:c8:72:19:
af:b7:a5:f9:2c:e9:6f:bb:c4:bd:de:93:7a:38:23:
d0:02:55:40:0b:4f:a7:08:70:10:2f:d1:d7:04:31:
e7:23:a2:37:3e:3f:57:20:0d:a7:46:39:5e:19:03:
20:59:cc:79:4b:3a:15:7a:49:9d:95:c5:2f:f0:7d:
22:d6:99:8c:1a:27:2a:bd:5d:4f:2b:27:a1:80:21:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:43:75:3E:47:7D:79:35:10:16:0E:8D:9D:D0:83:07:D5:FA:E0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.34.0/24
168.222.81.0/24
168.222.83.0/24
Signature Algorithm: sha256WithRSAEncryption
38:05:68:bf:00:91:02:cd:b4:71:39:a2:f3:d6:13:15:ad:3f:
41:97:7f:74:e7:2f:44:3c:63:8c:7c:29:29:e0:27:f6:b7:9c:
1d:d7:f2:fb:29:3c:8f:db:04:fa:d5:e5:15:e6:69:7b:1e:e4:
a2:9a:7b:b6:cf:ce:78:d2:1f:68:cc:f2:0b:fa:57:bb:24:38:
a9:3d:eb:12:ef:b3:bc:ce:36:2f:a1:69:fe:0c:21:07:bd:b9:
08:1a:6e:43:4a:70:11:c4:c7:41:79:59:f7:04:b8:69:f8:8f:
0b:dc:be:41:08:bc:0d:e7:80:06:6a:fa:45:7b:3b:76:ca:54:
18:d9:43:36:d1:12:e3:f8:d5:44:fd:69:f9:d9:8b:c1:a7:f1:
23:46:cf:a5:33:36:d8:05:a8:8b:da:84:f5:c7:76:6b:34:28:
ef:a9:7f:27:67:14:7e:4e:22:15:77:04:48:ff:6e:70:72:1e:
b2:59:29:a9:4b:58:fa:51:60:a5:99:94:a8:fb:41:19:6d:10:
3e:96:7c:2b:8e:ff:c0:c9:b9:32:9a:ed:a0:b4:87:a4:09:22:
90:ed:14:a3:61:90:af:51:b0:82:9e:42:5f:a4:f6:fb:20:08:
fe:f3:9c:ce:58:27:97:bd:88:63:2e:ed:cb:19:3d:63:80:7e:
1d:f1:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:11:53 2026 by rpki-client