Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
File: AS213060.roa (raw, json)
Hash identifier: fAmro1a73QM/3CgAY/bCVIcMPpAZ6ElvPQaohBk2guE=
Subject key identifier: DF:20:6D:81:38:07:26:60:9B:CB:41:76:16:24:44:92:FF:EB:7A:59
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 02CAA4AE8ED511C9F2B8EE548E3027FEFF780FCB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
Signing time: Fri 28 Aug 2026 03:28:46 +0000
ROA not before: Fri 28 Aug 2026 03:23:46 +0000
ROA not after: Fri 27 Aug 2027 03:28:46 +0000
asID: 213060
IP address blocks: 45.231.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ca:a4:ae:8e:d5:11:c9:f2:b8:ee:54:8e:30:27:fe:ff:78:0f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 28 03:23:46 2026 GMT
Not After : Aug 27 03:28:46 2027 GMT
Subject: CN=DF206D81380726609BCB417616244492FFEB7A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:43:ae:96:1e:83:19:d7:93:0b:ab:10:4e:
9f:22:7c:01:97:e2:bf:d1:f7:d1:ef:03:d4:cf:22:
06:b8:98:3e:06:e0:f2:cb:01:97:bd:ed:10:dd:8b:
ca:12:01:94:83:26:dd:db:86:97:75:04:5c:2b:e0:
fc:ff:5f:16:38:3e:01:e5:8b:c5:84:43:82:e6:30:
50:ff:5e:9b:ba:50:8a:f5:d2:86:f7:8a:86:03:ab:
48:d7:7e:f4:a2:8e:f0:45:10:f0:06:aa:91:cf:cb:
74:ef:f0:45:73:76:dd:66:de:dd:80:4a:65:f7:7e:
2b:5b:8b:aa:1e:5e:6d:00:97:27:4c:13:45:25:cf:
ea:f3:ee:f0:4f:67:9f:05:c3:f2:a8:69:4a:01:97:
44:03:7e:61:93:fc:51:32:d3:b0:7d:6d:3f:a1:a1:
83:b7:db:5c:ab:5e:f1:3e:1b:e1:46:d2:6e:d1:fd:
c9:53:74:4e:41:fc:78:a3:c0:c3:6d:ff:11:f3:39:
e2:9c:e0:57:a4:38:7e:25:59:02:e4:9d:ff:7a:c0:
ec:34:40:c4:07:b6:fe:f0:5e:56:2a:8d:e7:03:b1:
62:5c:04:86:e4:58:f6:84:30:95:1d:53:6f:79:8e:
0e:5a:87:bb:b5:82:34:42:11:a2:da:ae:d6:37:27:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:6D:81:38:07:26:60:9B:CB:41:76:16:24:44:92:FF:EB:7A:59
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213060.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.206.0/24
Signature Algorithm: sha256WithRSAEncryption
65:eb:81:bb:f9:35:f9:01:31:5d:ea:64:e2:9f:20:e7:7c:b9:
36:d2:09:0c:19:8f:57:eb:76:16:d0:d1:73:c9:d9:63:f0:f4:
07:2a:08:9c:bf:4c:7b:b1:d5:ad:12:7e:fc:76:e6:b7:25:5e:
5f:d5:54:f5:57:1f:50:29:56:f0:73:94:1a:5e:6b:d5:0e:7c:
7b:c0:f5:45:7b:57:d8:92:13:94:c9:e5:a7:33:9e:d4:5c:63:
3c:eb:92:1b:44:44:6b:15:a0:1c:ef:a6:17:76:81:cb:0e:0e:
81:db:f0:c5:ab:9d:d4:b1:d8:36:e7:8e:da:b4:54:b1:cc:5b:
20:a9:a0:83:8a:5f:b4:01:ca:fe:fb:cc:a1:da:fd:5e:7c:a9:
bd:67:81:af:2b:2b:e1:55:0a:2d:50:86:d0:ec:92:84:60:b6:
79:63:b6:8e:60:f6:20:0a:ab:6d:7c:b1:a1:03:02:f8:9c:0e:
be:c7:73:bd:67:81:b3:62:f7:e2:e3:da:db:24:be:91:18:84:
3f:5b:e7:01:31:cc:4b:04:6b:08:be:78:2f:99:06:36:fb:b6:
74:4e:20:ab:a3:3f:94:74:ea:12:a2:09:0b:ad:0c:0f:73:e9:
72:82:36:63:68:ca:3c:8c:bc:4c:6e:5c:ab:b9:23:02:49:21:
e8:aa:66:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:35:59 2026 by rpki-client