Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213772.roa
File: AS213772.roa (raw, json)
Hash identifier: nl2EBSTC6TIbWKI373CUOTsJ8FGm3hFrCdgm7Eld7CM=
Subject key identifier: B9:A1:86:2A:E8:B8:23:C7:17:0C:6C:8C:AF:98:4B:17:D7:2A:F7:68
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 300168154F97FE3ECDF3D62733087B8CCF19CBAE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213772.roa
Signing time: Wed 07 Oct 2026 08:36:33 +0000
ROA not before: Wed 07 Oct 2026 08:31:33 +0000
ROA not after: Wed 06 Oct 2027 08:36:33 +0000
asID: 213772
IP address blocks: 146.103.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:01:68:15:4f:97:fe:3e:cd:f3:d6:27:33:08:7b:8c:cf:19:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 7 08:31:33 2026 GMT
Not After : Oct 6 08:36:33 2027 GMT
Subject: CN=B9A1862AE8B823C7170C6C8CAF984B17D72AF768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:e5:d2:df:1f:97:02:98:7b:e3:45:37:c5:
0a:e7:2f:98:11:52:f0:80:21:c7:d6:86:1b:a3:66:
33:49:e2:2b:cd:ce:53:93:a6:53:64:c2:ea:c8:f9:
a6:7b:2a:c8:6f:b5:ba:b2:0a:80:6b:73:ac:fc:c0:
55:54:43:5b:fa:20:d3:a2:a8:c0:95:38:70:b3:91:
3e:b3:63:47:c6:ee:c2:5f:10:b0:80:11:af:fd:b6:
6e:73:d8:e1:b8:63:5c:af:9c:0a:ed:4e:64:82:62:
6b:c6:31:b7:e8:13:64:2e:cc:d6:4b:e0:f9:44:92:
3a:b2:53:da:ee:64:2c:a2:c7:c5:c9:a8:85:67:ed:
d6:93:0c:61:9a:3d:38:37:ce:85:4c:73:71:6a:66:
e5:62:06:16:87:04:55:43:f2:fe:5e:58:60:de:f8:
53:ca:c4:63:7d:b8:54:0c:92:52:f2:7e:28:65:d2:
f9:5c:db:74:4e:c6:2a:40:d1:dc:17:36:01:3f:02:
8c:a2:6b:43:24:8b:08:99:09:f7:26:90:02:ef:e7:
43:24:6c:3d:fc:6f:02:cd:68:b7:4a:f8:6c:56:f6:
2e:33:26:e9:8c:ef:78:b5:15:ed:6c:b2:0e:3c:e8:
56:12:c1:40:b9:f5:1f:4c:26:fb:4b:cb:0a:28:aa:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:86:2A:E8:B8:23:C7:17:0C:6C:8C:AF:98:4B:17:D7:2A:F7:68
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.38.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6d:cf:cb:3e:23:d2:ef:38:75:2c:ec:3a:e6:d7:c6:0c:c0:
f6:d2:c1:fa:0f:7c:e0:ee:c8:5e:b9:ba:ca:d4:28:57:4e:a1:
51:2d:51:95:11:18:9f:08:50:d2:85:a8:4a:8a:df:e3:49:71:
15:76:97:65:08:32:20:9f:65:0b:8d:9f:bb:8d:f9:73:bf:83:
ae:17:fe:07:a6:9b:14:ca:23:be:29:61:fc:fc:bb:a0:8d:45:
e6:63:a7:1b:cd:9f:9d:61:9c:c6:8a:fd:22:cf:db:6c:2e:ea:
18:c6:36:6e:67:de:b8:2b:ca:4b:64:92:11:09:55:45:02:b5:
86:b7:42:25:3d:29:ef:6c:57:5a:5c:6a:95:84:27:2d:4b:39:
19:e9:79:94:08:3b:88:06:42:b7:22:db:e4:88:be:76:ce:33:
ad:a2:cc:1c:be:af:f8:13:4a:9f:09:cc:9f:66:34:e3:58:50:
03:e3:3d:6e:d5:7c:b9:81:f3:52:e2:f0:df:61:68:2a:82:ae:
b4:56:30:27:5e:18:01:23:8b:65:9a:e7:7c:fc:7c:1a:93:67:
21:e7:1c:d9:ed:c2:6a:41:8a:d2:bc:07:d4:c0:6a:0e:2b:ed:
26:dd:73:d2:5a:b0:4e:30:d2:7b:93:96:c2:93:33:1a:5f:db:
26:53:e3:9d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMAFoFU+X/j7N89YnMwh7jM8Zy64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjEwMDcwODMxMzNaFw0yNzEwMDYwODM2MzNaMDMxMTAvBgNV
BAMTKEI5QTE4NjJBRThCODIzQzcxNzBDNkM4Q0FGOTg0QjE3RDcyQUY3NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrruXS3x+XAph740U3xQrnL5gR
UvCAIcfWhhujZjNJ4ivNzlOTplNkwurI+aZ7KshvtbqyCoBrc6z8wFVUQ1v6INOi
qMCVOHCzkT6zY0fG7sJfELCAEa/9tm5z2OG4Y1yvnArtTmSCYmvGMbfoE2QuzNZL
4PlEkjqyU9ruZCyix8XJqIVn7daTDGGaPTg3zoVMc3FqZuViBhaHBFVD8v5eWGDe
+FPKxGN9uFQMklLyfihl0vlc23ROxipA0dwXNgE/Aoyia0MkiwiZCfcmkALv50Mk
bD38bwLNaLdK+GxW9i4zJumM73i1Fe1ssg486FYSwUC59R9MJvtLywooqiVhAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUuaGGKui4I8cXDGyMr5hLF9cq92gwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEzNzcyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkmcm
MA0GCSqGSIb3DQEBCwUAA4IBAQA3bc/LPiPS7zh1LOw65tfGDMD20sH6D3zg7she
ubrK1ChXTqFRLVGVERifCFDShahKit/jSXEVdpdlCDIgn2ULjZ+7jflzv4OuF/4H
ppsUyiO+KWH8/LugjUXmY6cbzZ+dYZzGiv0iz9tsLuoYxjZuZ964K8pLZJIRCVVF
ArWGt0IlPSnvbFdaXGqVhCctSzkZ6XmUCDuIBkK3ItvkiL52zjOtoswcvq/4E0qf
CcyfZjTjWFAD4z1u1Xy5gfNS4vDfYWgqgq60VjAnXhgBI4tlmud8/Hwak2ch5xzZ
7cJqQYrSvAfUwGoOK+0m3XPSWrBOMNJ7k5bCkzMaX9smU+Od
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:14:10 2026 by rpki-client