Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213001.roa
File: AS213001.roa (raw, json)
Hash identifier: Y8rHcjbVyUw7b2Vl1nnbDAcxchegrPaevACkbIJQwnE=
Subject key identifier: C8:6B:03:14:48:A9:2C:50:E0:43:87:6F:57:2C:2D:C5:3E:AD:F8:80
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 42C519E238B4602EF0A59EBCACD54465C92D4A48
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213001.roa
Signing time: Fri 19 Jun 2026 07:26:45 +0000
ROA not before: Fri 19 Jun 2026 07:21:45 +0000
ROA not after: Fri 18 Jun 2027 07:26:45 +0000
asID: 213001
IP address blocks: 45.137.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c5:19:e2:38:b4:60:2e:f0:a5:9e:bc:ac:d5:44:65:c9:2d:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 19 07:21:45 2026 GMT
Not After : Jun 18 07:26:45 2027 GMT
Subject: CN=C86B031448A92C50E043876F572C2DC53EADF880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:01:e0:f1:c5:7b:b8:69:0e:ef:e4:c9:da:
6a:fc:ba:28:b8:ac:e5:87:e0:22:c5:2c:4f:50:0b:
6b:1c:1e:b1:36:3a:11:f6:46:e5:e5:0e:e6:33:59:
23:92:8d:dc:8c:e3:ab:33:59:f0:42:8d:76:a3:1c:
c4:35:5d:61:67:f3:a8:a9:14:ae:f2:c1:35:fb:0c:
b8:1b:46:90:c8:58:ba:86:d6:ac:42:5f:4e:d3:46:
02:bd:20:e1:3f:5a:fd:14:1c:12:f8:ba:88:b1:3d:
e6:aa:9c:26:82:71:9a:e1:60:ee:c4:4a:9d:7b:6e:
e7:dd:77:44:32:76:71:ee:ad:89:de:9a:e4:0d:5c:
b7:b1:5d:ad:a0:4e:07:20:29:3e:6b:bf:69:e4:e7:
1e:97:e0:a8:78:de:31:fb:74:1f:9c:3e:45:e8:5e:
bf:27:e2:5e:f8:c1:78:74:4b:77:b5:ba:cd:54:0c:
65:b1:23:c3:0a:ee:b5:56:ac:2a:91:70:a9:9b:ab:
ce:cc:05:9a:13:77:3c:0c:fa:0e:11:32:62:e0:71:
94:0d:41:d0:8e:35:90:3a:4d:16:af:52:54:38:ff:
17:e7:55:ab:99:32:7f:50:49:c8:6a:e3:10:43:ce:
2e:ff:31:b8:38:8c:1d:10:49:39:8b:c7:24:3e:a6:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6B:03:14:48:A9:2C:50:E0:43:87:6F:57:2C:2D:C5:3E:AD:F8:80
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:12:62:77:ce:e7:c9:2b:58:91:94:df:94:df:a6:3a:3d:f9:
5f:2b:b2:11:a4:8b:7f:af:95:06:a6:e1:cc:15:4e:20:0b:3d:
82:58:87:3d:06:34:0b:4c:56:d1:11:a9:90:8a:45:a7:eb:3d:
a7:47:0b:df:4b:14:55:e4:90:72:38:5d:8b:1a:a5:97:2f:e8:
35:17:5c:57:e3:d3:53:60:77:a1:36:e3:42:31:54:e3:07:8c:
17:54:ee:23:25:02:85:5c:6b:1d:6b:cd:ce:30:4e:3a:83:38:
7b:8b:79:62:93:95:73:66:b3:6c:ce:ec:fc:db:bd:7d:65:9d:
73:00:5b:63:95:8f:88:35:1f:ad:d1:67:19:79:ef:dc:37:d2:
2d:8e:8e:11:88:c3:65:1b:59:3a:5c:c5:e4:ec:cb:34:ed:15:
79:bd:ac:c3:88:a7:54:53:0c:7c:d5:ee:a0:4c:3c:60:b3:af:
81:3c:b3:67:9e:35:05:96:0c:de:59:d4:23:31:d9:02:66:8b:
ff:70:36:37:85:45:9e:9c:18:00:b7:c4:6e:9b:c2:96:cf:d2:
7f:02:ff:56:56:a8:56:d3:4c:db:48:cb:e0:f8:c4:24:ca:5d:
72:32:89:9c:25:41:0f:79:f0:b7:53:00:a8:dd:c3:9c:c1:76:
73:21:8d:7c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUQsUZ4ji0YC7wpZ68rNVEZcktSkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA2MTkwNzIxNDVaFw0yNzA2MTgwNzI2NDVaMDMxMTAvBgNV
BAMTKEM4NkIwMzE0NDhBOTJDNTBFMDQzODc2RjU3MkMyREM1M0VBREY4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrAHg8cV7uGkO7+TJ2mr8uii4
rOWH4CLFLE9QC2scHrE2OhH2RuXlDuYzWSOSjdyM46szWfBCjXajHMQ1XWFn86ip
FK7ywTX7DLgbRpDIWLqG1qxCX07TRgK9IOE/Wv0UHBL4uoixPeaqnCaCcZrhYO7E
Sp17bufdd0QydnHurYnemuQNXLexXa2gTgcgKT5rv2nk5x6X4Kh43jH7dB+cPkXo
Xr8n4l74wXh0S3e1us1UDGWxI8MK7rVWrCqRcKmbq87MBZoTdzwM+g4RMmLgcZQN
QdCONZA6TRavUlQ4/xfnVauZMn9QSchq4xBDzi7/Mbg4jB0QSTmLxyQ+pqi/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUyGsDFEipLFDgQ4dvVywtxT6t+IAwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEzMDAxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYl1
MA0GCSqGSIb3DQEBCwUAA4IBAQALEmJ3zufJK1iRlN+U36Y6PflfK7IRpIt/r5UG
puHMFU4gCz2CWIc9BjQLTFbREamQikWn6z2nRwvfSxRV5JByOF2LGqWXL+g1F1xX
49NTYHehNuNCMVTjB4wXVO4jJQKFXGsda83OME46gzh7i3lik5VzZrNszuz82719
ZZ1zAFtjlY+INR+t0WcZee/cN9Itjo4RiMNlG1k6XMXk7Ms07RV5vazDiKdUUwx8
1e6gTDxgs6+BPLNnnjUFlgzeWdQjMdkCZov/cDY3hUWenBgAt8Rum8KWz9J/Av9W
VqhW00zbSMvg+MQkyl1yMomcJUEPefC3UwCo3cOcwXZzIY18
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:58:18 2026 by rpki-client