Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213618.roa
File: AS213618.roa (raw, json)
Hash identifier: dDpqkMA26Tqk+35lqMwKEZ14gicQg7wftMeGeFdlfeM=
Subject key identifier: 8A:92:99:A5:6C:32:68:C8:38:F6:05:FB:6D:92:10:A2:BE:31:BF:93
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6551520D9A715CF9D1106D38B0D34A843D693805
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213618.roa
Signing time: Thu 12 Mar 2026 07:38:14 +0000
ROA not before: Thu 12 Mar 2026 07:33:14 +0000
ROA not after: Thu 11 Mar 2027 07:38:14 +0000
asID: 213618
IP address blocks: 2a03:fbc0::/29 maxlen: 48
2a0e:1c00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:51:52:0d:9a:71:5c:f9:d1:10:6d:38:b0:d3:4a:84:3d:69:38:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 12 07:33:14 2026 GMT
Not After : Mar 11 07:38:14 2027 GMT
Subject: CN=8A9299A56C3268C838F605FB6D9210A2BE31BF93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:31:54:7a:54:61:51:52:fa:7a:7e:cb:75:
72:4a:85:b6:39:50:d1:c3:8a:05:e7:0f:51:8f:37:
70:00:12:fd:57:33:d9:c4:cd:71:f0:d6:ad:ee:91:
4c:78:f5:b0:63:81:8d:57:13:ea:ca:1c:78:48:af:
82:14:5a:40:7c:af:43:d3:d2:ff:a8:ed:2e:0c:bc:
c8:b8:bf:4d:3a:f7:08:2e:53:f0:d2:5e:78:fc:ce:
35:a4:c5:87:80:46:fd:d1:c6:ff:38:e5:7b:bc:70:
ac:81:79:9f:6b:48:69:b4:a6:77:bf:bf:ba:1a:c4:
8d:93:62:6b:1e:d0:dd:79:89:4b:f7:a0:16:a8:5f:
2e:6b:b2:03:03:bb:22:4e:94:5a:12:11:4f:50:89:
7c:96:e9:7b:65:6f:74:1d:98:a7:de:4d:62:f0:f1:
dd:f9:af:f1:01:07:1b:12:0a:09:0d:cb:f3:d2:38:
b1:0e:c7:2d:dc:77:6f:de:ed:a7:86:27:a2:e9:43:
98:53:54:b3:f1:70:e4:bf:80:db:df:1c:ef:af:3c:
04:a7:33:9a:d1:a8:40:dc:49:f7:e7:23:ba:95:3a:
4e:37:f8:5d:c3:8f:5b:a1:b5:b9:6c:6d:66:12:75:
55:18:7a:cd:2e:bf:b1:ea:5c:47:72:3b:d3:2a:9b:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:99:A5:6C:32:68:C8:38:F6:05:FB:6D:92:10:A2:BE:31:BF:93
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:fbc0::/29
2a0e:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
55:69:6d:d9:ab:1e:35:ed:0e:d0:70:8b:a3:2d:b0:5c:11:bd:
7d:5b:ca:cd:54:f5:87:94:ec:3d:94:37:1a:9c:04:b5:31:c4:
0f:7c:2a:94:04:e5:0b:fd:67:4b:dc:0e:5f:8d:bc:3c:a7:5d:
a7:a9:3b:a9:1a:68:f5:7e:f3:e7:84:b1:8d:8e:14:e2:21:3d:
45:aa:32:4a:16:09:eb:ec:56:05:f1:ed:0b:d8:fa:be:1a:11:
64:5d:9a:a2:40:d7:d4:18:f1:89:c1:1c:98:73:33:76:9f:19:
5e:9d:e2:ad:55:b5:47:59:e6:59:25:29:9b:d8:39:c4:ed:7c:
ce:12:9a:09:ce:76:1c:a3:82:ee:bc:e4:dd:2c:f8:9d:fe:d3:
b9:8f:a9:9e:45:94:2d:cf:50:a0:6b:b6:71:00:db:cb:89:24:
4d:f7:0b:b8:32:1c:b6:66:be:3a:48:a2:32:78:b6:ee:8e:71:
ec:0f:5d:60:42:9f:b7:cb:85:c5:2a:c1:55:3b:b7:38:81:ce:
08:9a:15:4c:43:0e:2b:98:88:e9:7d:6f:9f:4d:a2:ba:36:6b:
db:9d:3b:d2:4f:ad:f2:74:cf:45:b6:34:12:00:ff:a5:ee:99:
56:30:58:25:ca:6e:c9:7c:9e:ce:46:d1:e4:16:2b:ca:8e:e0:
30:7a:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:16:08 2026 by rpki-client