Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213711.roa
File: AS213711.roa (raw, json)
Hash identifier: 1stgDUeIpB6rqnyL3egkWLzQMHTXh00+yjI+DDUizOQ=
Subject key identifier: D9:CF:CA:B7:F6:08:E5:E1:F7:8D:B8:D0:3D:E2:76:7B:29:0B:B8:B1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 20196266E184611267E6A368626323E85ABA4721
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213711.roa
Signing time: Wed 17 Jun 2026 17:23:59 +0000
ROA not before: Wed 17 Jun 2026 17:18:59 +0000
ROA not after: Wed 16 Jun 2027 17:23:59 +0000
asID: 213711
IP address blocks: 213.109.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:19:62:66:e1:84:61:12:67:e6:a3:68:62:63:23:e8:5a:ba:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 17 17:18:59 2026 GMT
Not After : Jun 16 17:23:59 2027 GMT
Subject: CN=D9CFCAB7F608E5E1F78DB8D03DE2767B290BB8B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:87:f9:d4:d7:26:a3:41:f4:f5:16:1b:05:bb:
b9:e9:1d:1d:ca:be:ee:52:bf:c1:dc:4b:6a:9e:4a:
a1:92:6c:83:95:01:72:57:4b:9c:11:1d:e2:b6:23:
b3:0b:64:79:06:a2:0e:2b:f8:25:bd:ac:55:51:c7:
06:64:e6:0a:1c:33:59:5e:43:d7:b2:e6:45:c6:af:
b4:d0:4e:b0:4c:0f:22:30:01:81:7d:03:59:80:76:
9a:cf:87:a3:8c:ad:e1:b1:70:14:94:bb:e1:ac:2a:
87:c8:78:8b:44:c5:f9:67:f9:ec:bf:d7:fa:d7:34:
12:bc:0a:2e:77:56:cb:ad:79:f4:df:8e:ed:fb:61:
a6:89:1e:ba:85:4a:c5:58:2b:67:ff:a3:ef:1c:dd:
84:b0:a7:f1:b0:b2:05:79:46:94:92:ef:09:2d:c0:
af:a4:3e:99:66:5e:d4:90:44:f5:a7:76:63:bd:ed:
da:06:17:af:51:56:35:0d:da:23:74:d1:de:17:a4:
cd:e5:a0:19:8c:02:77:04:2e:19:4c:e9:c7:6f:1d:
bd:64:31:b7:08:ff:53:b0:71:c2:ce:76:33:8b:49:
6f:16:c7:a7:a8:14:bf:74:1b:d8:c6:ea:6d:a6:b4:
38:6f:cd:7c:0a:de:62:57:84:d7:58:f3:73:7f:b3:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:CA:B7:F6:08:E5:E1:F7:8D:B8:D0:3D:E2:76:7B:29:0B:B8:B1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.169.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1e:4b:6b:2e:61:a2:a0:70:c4:68:8e:3f:d6:c1:f6:e8:6b:
ee:92:61:31:65:77:d3:c8:ed:90:d1:e5:ae:09:c3:0d:51:da:
3c:35:87:2f:0e:6b:a3:91:06:53:96:65:9e:7f:cc:e1:b8:80:
2c:65:04:48:2f:16:08:28:e1:97:68:b7:23:10:25:bb:a0:01:
50:d2:5e:62:5a:6f:b9:f2:99:23:f6:c1:3f:b5:38:56:79:aa:
94:63:03:a0:43:a1:43:6d:5c:d5:89:f1:c0:0b:8c:22:93:58:
9c:30:ca:d8:3a:24:b8:bc:c0:7d:35:46:31:c2:ca:bd:55:f6:
e5:8f:de:24:84:65:c7:9a:64:17:fb:d3:70:a9:05:b0:ac:47:
7b:21:20:35:46:73:ad:6a:4c:ab:cd:8c:a2:f5:a0:69:4e:20:
1b:25:4f:17:09:bd:a0:9d:aa:d4:6a:63:fa:55:a9:4f:e0:44:
d0:3b:51:d5:41:e5:57:e4:be:99:d5:73:63:84:d8:33:82:88:
34:a6:68:ef:03:41:ba:b8:06:b2:39:cd:56:97:54:e8:8f:17:
1a:34:0e:af:27:b6:4d:85:f7:0c:c4:3d:fe:58:b8:9e:27:9d:
dd:d9:28:09:03:5d:ca:fa:de:aa:4b:1a:37:7e:35:02:ea:dd:
1d:3b:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:28 2026 by rpki-client