Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213772.roa
File: AS213772.roa (raw, json)
Hash identifier: +gAHOPQT727GzOmjFIGoo4IrgH4X1UA9pJW3srcTFEE=
Subject key identifier: B5:56:EB:4F:DF:90:F4:FE:86:96:AD:46:9A:3F:55:F2:D7:EB:23:1D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0EFFCB6D54309AD2346E7F8D40C7E059AB7BFF73
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213772.roa
Signing time: Wed 07 Oct 2026 08:36:34 +0000
ROA not before: Wed 07 Oct 2026 08:31:34 +0000
ROA not after: Wed 06 Oct 2027 08:36:34 +0000
asID: 213772
IP address blocks: 181.214.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ff:cb:6d:54:30:9a:d2:34:6e:7f:8d:40:c7:e0:59:ab:7b:ff:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 7 08:31:34 2026 GMT
Not After : Oct 6 08:36:34 2027 GMT
Subject: CN=B556EB4FDF90F4FE8696AD469A3F55F2D7EB231D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:91:47:1b:01:9d:b5:58:50:16:58:b5:f7:
3b:a4:16:0e:7c:c3:84:96:28:03:1e:fa:49:7d:0d:
78:58:f8:94:ab:73:af:0a:eb:90:36:5c:90:3c:c3:
9a:3e:d7:1a:83:c0:78:b0:be:b7:af:f0:90:d9:58:
19:5f:ed:26:97:ae:0f:d4:b3:b8:18:55:21:bf:6c:
6d:fa:8b:7d:d9:c8:05:78:d8:99:a7:b0:3d:e3:10:
53:03:97:03:f5:68:d4:1f:0d:6d:7c:92:36:1b:34:
d3:bb:d3:0c:fb:25:85:e8:d8:16:e9:f7:30:89:4f:
63:d4:15:8e:2e:51:fa:3b:d8:76:3e:91:3c:09:84:
97:79:f1:40:c7:1f:a6:09:44:d6:62:db:0a:20:c2:
4b:ef:7d:cb:fe:03:88:5d:e3:45:0e:16:5a:b6:e6:
b9:31:4c:be:84:89:d9:4e:7a:4d:bc:79:ec:e1:83:
48:9d:97:60:dd:b6:88:c2:a8:27:e7:8c:c0:d0:14:
b9:63:17:83:d6:c5:b7:7e:0f:e6:f0:12:fa:a5:19:
2e:02:48:82:c7:d7:37:7d:9d:6f:5a:2f:62:84:e6:
40:3f:da:70:44:6f:54:a9:6b:d9:57:30:46:0c:e8:
e2:5a:68:c2:77:ab:2e:10:ac:a7:3d:be:4f:4f:9f:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:EB:4F:DF:90:F4:FE:86:96:AD:46:9A:3F:55:F2:D7:EB:23:1D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.147.0/24
Signature Algorithm: sha256WithRSAEncryption
78:41:da:07:71:61:50:13:38:bd:2b:eb:60:3c:81:32:93:30:
a9:4f:8a:9b:a8:18:e2:30:09:0a:97:22:37:2a:24:bb:db:91:
bb:2d:5b:c1:68:c1:27:89:76:56:32:bc:a0:88:bf:70:db:bd:
1b:17:64:6a:45:cc:fb:c4:3a:2d:66:b0:df:d4:10:c6:8d:e9:
37:af:cf:8d:10:62:ff:b0:f9:8f:b5:0b:61:ff:13:8c:07:65:
e3:2e:63:c7:76:6d:c1:f1:63:c2:56:40:6f:d4:19:11:60:34:
e2:37:57:06:b2:25:e3:a1:77:d8:4b:16:fa:b8:69:b6:9a:97:
b8:75:a8:5b:6d:85:04:b4:20:7f:4a:c2:06:34:63:c1:b2:86:
58:ea:d1:c2:20:12:cd:ed:71:2a:4a:f6:cb:80:97:43:4a:2d:
e3:79:bb:2d:1b:e4:12:10:d7:04:46:86:af:78:52:48:a9:a7:
13:94:92:66:f2:17:e5:c3:b4:ff:b4:01:33:81:00:47:aa:c3:
de:c4:43:f3:21:8d:d0:31:82:42:8b:16:4a:f6:27:4f:9f:a5:
86:b5:b0:bc:7d:9b:66:97:0a:1d:08:1f:4d:c1:75:c1:3c:68:
c7:be:88:f1:fd:8b:ca:78:0d:37:e5:66:08:2d:f8:a4:b9:de:
1f:62:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:03:58 2026 by rpki-client