Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213690.roa
File: AS213690.roa (raw, json)
Hash identifier: nScMnSn5DYJTQbC91cjt/ffJslifz8WvDtKCLrmzMf8=
Subject key identifier: 39:92:89:2B:86:21:87:E0:67:18:4E:C0:F6:34:CF:4E:30:31:B9:A3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 12E642D544FAA71FAA31DD8DD788DFE0EF33F9F4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213690.roa
Signing time: Mon 10 Aug 2026 12:57:03 +0000
ROA not before: Mon 10 Aug 2026 12:52:03 +0000
ROA not after: Mon 09 Aug 2027 12:57:03 +0000
asID: 213690
IP address blocks: 45.231.207.0/24 maxlen: 24
181.214.57.0/24 maxlen: 24
181.215.0.0/24 maxlen: 24
181.215.28.0/24 maxlen: 24
181.215.34.0/24 maxlen: 24
181.215.48.0/24 maxlen: 24
181.215.180.0/24 maxlen: 24
191.96.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e6:42:d5:44:fa:a7:1f:aa:31:dd:8d:d7:88:df:e0:ef:33:f9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 10 12:52:03 2026 GMT
Not After : Aug 9 12:57:03 2027 GMT
Subject: CN=3992892B862187E067184EC0F634CF4E3031B9A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:e1:7c:94:8b:23:dc:2b:62:58:8c:54:53:
16:9a:5b:89:0e:53:68:da:da:63:f4:04:6d:7d:bb:
c5:5e:10:3b:91:02:7a:7a:d9:16:88:38:b0:92:8a:
89:8b:59:3b:9d:dc:72:f4:c5:fc:58:b6:c7:7a:6a:
62:6b:26:b7:a1:43:0c:c1:1e:9b:39:9e:e8:b2:e8:
27:90:2e:b6:d8:a7:5e:d9:88:a2:ae:3c:94:9f:51:
87:64:a2:d8:f9:69:62:90:01:f2:c6:d3:83:98:24:
7a:c7:e4:6c:fd:29:f7:61:45:55:20:07:83:5b:fe:
b4:0b:6b:9a:44:9b:ef:b3:95:9e:49:54:af:82:d1:
b1:c6:bf:37:71:b4:ce:1e:11:f1:2d:18:d8:4f:85:
67:61:a6:51:e3:fa:8e:a2:c4:96:12:67:a1:80:72:
0e:f2:d8:b9:05:f7:81:2a:bf:3f:ac:c8:14:9d:e9:
b3:33:f5:b7:b3:8f:52:0b:70:9d:57:c2:47:06:74:
e1:b5:7a:11:9a:f5:6c:70:0c:ab:a1:d9:d3:39:45:
5e:eb:f7:03:d2:04:a6:82:c1:cd:52:c0:e8:1a:8a:
10:a9:76:74:7a:12:b6:72:2c:27:4f:40:03:4c:2a:
e7:e3:03:e5:eb:cc:d1:4f:66:aa:00:0e:9d:dc:a5:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:92:89:2B:86:21:87:E0:67:18:4E:C0:F6:34:CF:4E:30:31:B9:A3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.207.0/24
181.214.57.0/24
181.215.0.0/24
181.215.28.0/24
181.215.34.0/24
181.215.48.0/24
181.215.180.0/24
191.96.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fc:c3:f1:65:ee:31:23:ff:1c:18:f7:67:32:b1:50:61:e3:
f2:c0:0a:91:b8:66:7c:d5:b7:2c:08:ba:ee:ee:cb:85:6a:ce:
af:67:0a:26:b8:0f:df:65:64:e3:7b:e8:e2:42:6d:10:59:6f:
99:4b:27:4b:28:98:10:b9:7f:9b:35:b2:6d:92:b9:ed:03:5f:
57:4e:f9:d0:d0:24:cd:3a:13:de:33:a4:1c:ca:28:ba:c2:fa:
48:d4:54:5e:2f:ae:26:3f:7c:65:cd:ee:29:ac:17:57:2a:0e:
e7:50:1a:0c:bb:18:92:83:8b:ca:9a:1e:1f:47:80:7a:6c:63:
fc:7c:0b:de:5a:91:68:85:9c:54:55:37:1d:9a:c0:c5:ee:ba:
78:b9:ae:e9:ce:bb:dc:b6:bb:70:56:7a:d2:ec:29:d6:9e:ed:
45:6d:7b:48:a8:cb:20:03:6d:1b:5b:a9:73:60:78:ba:b4:90:
9f:00:0e:f7:3f:35:67:55:9b:96:2e:3a:a7:16:52:dd:e4:8f:
e8:6d:3b:c2:a1:1a:4a:f7:af:d6:f7:89:57:3c:0e:e8:d7:f2:
6b:8d:57:b9:f0:3d:cd:cd:b1:09:d4:b7:4f:98:11:50:66:3f:
7f:77:b2:16:3b:06:96:4c:d3:87:81:62:51:42:01:b8:ce:33:
c9:73:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:17 2026 by rpki-client