Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213990.roa
File: AS213990.roa (raw, json)
Hash identifier: XKIXv3cwoZrtGsRqflUjMmGiOOWK6fqyJNrGF36oM3M=
Subject key identifier: 7A:8A:57:3D:AC:2E:7A:0D:2F:94:CD:2E:52:23:20:AD:6E:EE:75:F7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 23BF37FBCB4487B65149743E4B456CF15475B1E5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213990.roa
Signing time: Wed 12 Aug 2026 12:56:38 +0000
ROA not before: Wed 12 Aug 2026 12:51:38 +0000
ROA not after: Wed 11 Aug 2027 12:56:38 +0000
asID: 213990
IP address blocks: 168.222.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:bf:37:fb:cb:44:87:b6:51:49:74:3e:4b:45:6c:f1:54:75:b1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 12 12:51:38 2026 GMT
Not After : Aug 11 12:56:38 2027 GMT
Subject: CN=7A8A573DAC2E7A0D2F94CD2E522320AD6EEE75F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:11:f4:77:ec:83:89:29:a5:0a:e8:be:89:
c4:a8:94:b1:df:46:01:66:a4:7f:a7:2e:c6:b1:6b:
7e:3d:1c:66:a4:60:bc:a4:04:9f:33:b4:35:97:3f:
75:86:a6:58:36:31:cb:18:58:b9:0e:55:5f:44:59:
49:22:db:e2:cd:c1:80:d7:60:f8:bd:67:01:ed:2c:
7f:5b:27:51:1d:f9:c5:8b:66:e3:ff:7d:fc:23:71:
81:1b:6e:cf:35:8d:38:d8:a0:d3:2f:00:e1:a4:60:
8c:f1:86:86:83:4b:51:fc:ed:a1:b3:1a:d1:02:53:
ae:d5:f2:e5:a6:03:ef:76:f7:dc:08:78:2f:57:22:
db:cf:87:51:ce:cd:e0:8a:64:64:ef:3c:6f:40:a6:
c3:9b:9b:4d:5d:e5:b8:10:8d:60:bf:fa:10:6a:61:
4d:2a:07:25:e7:dc:69:5a:28:f4:23:2b:2b:5a:0b:
e7:75:7d:12:0c:97:5c:6d:51:61:b0:06:64:70:f2:
4a:2b:fa:e5:3a:2f:fd:4f:e8:12:fb:94:d5:a8:bb:
1f:c9:e5:2b:88:00:f5:96:e7:f9:42:0d:ce:d3:79:
db:9c:77:19:a0:1d:57:10:af:4f:c3:70:8e:f0:0a:
db:24:91:c7:96:dd:7e:ba:d0:36:0e:39:eb:de:f7:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:57:3D:AC:2E:7A:0D:2F:94:CD:2E:52:23:20:AD:6E:EE:75:F7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213990.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.107.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e1:77:5f:e6:30:17:10:2d:3f:e6:1f:98:6d:3f:38:a8:49:
6f:05:02:2c:5c:6f:79:fd:86:c3:c9:ff:52:58:93:1a:d0:96:
0e:fd:cc:eb:e4:6a:ee:0d:37:7c:07:7c:82:94:72:f4:49:17:
2c:69:31:90:00:95:90:a3:b5:23:8d:66:e3:1f:0d:da:4c:7b:
69:43:86:30:d6:84:69:f1:51:bc:1f:90:65:e3:fb:6c:29:4a:
60:77:93:db:4a:f4:3a:f6:ac:22:e9:48:9d:5d:be:5a:d8:c6:
54:13:b4:f9:bd:78:9f:e0:8e:9e:99:1f:8e:4d:91:c4:4e:ec:
5e:10:23:22:2f:70:c7:7e:fe:86:21:01:22:f5:2b:f0:d5:fd:
6b:7c:95:49:5b:00:1c:2b:ee:ce:b9:54:12:51:6a:a3:d7:0d:
af:f8:5c:a7:d2:dc:71:33:be:28:88:68:09:04:9c:af:73:ec:
ab:57:fe:6a:c2:31:2b:1c:c4:1b:0d:81:1b:6d:60:a5:a4:30:
60:53:a6:84:d2:8a:4e:6a:65:48:2b:10:f9:69:90:f2:d4:9a:
44:39:fb:df:17:9d:f5:0a:f9:cd:f0:52:4b:57:51:70:c0:65:
e2:c1:23:e9:38:b6:75:bf:88:4a:b6:83:6e:80:7d:3c:9d:44:
66:7f:e6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:11:51 2026 by rpki-client