Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213001.roa
File: AS213001.roa (raw, json)
Hash identifier: 3hpx3ROP7N87CuvmfhJC764n8x6prmJrkYDSe66J+GM=
Subject key identifier: C3:86:66:65:23:03:D8:64:EA:D0:36:6C:CA:1D:FE:5B:FA:71:2B:20
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2764D419AF3A25785C2FB1BFD9313F7FDDEB4185
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213001.roa
Signing time: Wed 01 Jul 2026 02:01:10 +0000
ROA not before: Wed 01 Jul 2026 01:56:10 +0000
ROA not after: Wed 30 Jun 2027 02:01:10 +0000
asID: 213001
IP address blocks: 82.27.90.0/23 maxlen: 23
82.41.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:64:d4:19:af:3a:25:78:5c:2f:b1:bf:d9:31:3f:7f:dd:eb:41:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 01:56:10 2026 GMT
Not After : Jun 30 02:01:10 2027 GMT
Subject: CN=C38666652303D864EAD0366CCA1DFE5BFA712B20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:a1:cb:44:c5:40:6e:12:fc:5a:33:ef:14:
79:7d:62:da:77:7d:92:74:f0:a3:b3:48:59:d5:e4:
87:71:47:2b:8d:57:3c:98:48:8f:df:3d:49:e2:0b:
6f:d0:6a:fc:ff:72:c5:f0:40:b9:c4:3f:f9:41:5c:
ca:9a:e5:d9:02:f5:ed:bc:43:09:36:38:03:be:b1:
64:99:f0:6a:aa:c7:a2:98:f1:38:6f:58:72:ea:ad:
d6:94:20:71:b9:a9:db:96:e5:fa:28:30:cc:f3:0a:
f5:e0:f4:fd:e7:98:50:76:06:66:22:c3:38:54:e5:
3a:f5:e4:1e:e6:8b:0a:fc:7b:2c:3e:95:e7:f6:de:
fd:ad:19:12:0e:a8:5a:29:91:67:36:7a:cd:58:a4:
a5:38:40:25:13:97:c9:f5:14:c5:6d:fc:dd:e5:d9:
d8:c1:de:f7:60:09:60:82:1f:41:c9:52:3a:d0:e8:
85:1d:ca:1b:27:a5:f7:17:68:ae:9d:52:53:7d:7e:
f9:b3:7c:09:97:4f:0c:1e:34:35:17:dc:f9:d7:9e:
5e:a4:04:fc:ad:07:ce:54:02:f3:3b:b7:97:4c:c8:
be:2f:f1:cf:c9:4f:a6:4b:81:4f:56:0d:c0:4c:a7:
0d:fc:34:0f:d4:14:be:be:2a:59:60:1e:3a:8d:b0:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:86:66:65:23:03:D8:64:EA:D0:36:6C:CA:1D:FE:5B:FA:71:2B:20
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.90.0/23
82.41.245.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7d:04:04:5f:3b:af:72:86:f9:37:d8:0b:51:bb:81:45:56:
b1:8c:13:a1:73:19:0e:82:68:14:5a:c5:78:55:15:d7:ca:1f:
34:39:0e:85:c2:62:03:63:d7:80:c4:49:a6:dc:39:a3:93:84:
1b:0b:3f:10:e2:69:4d:85:b7:b5:ab:2a:75:34:5f:7a:b6:9d:
b1:51:84:2b:43:fb:2f:c9:8b:e2:3b:10:2b:8a:0f:3c:53:25:
31:44:38:35:f3:7d:a3:c9:ef:8f:aa:1f:33:f1:db:83:81:2d:
7f:0f:6e:40:41:44:61:e5:62:1b:29:ce:8c:7d:97:1a:2c:65:
84:f4:f5:c3:ea:4b:48:75:52:88:95:a3:fd:61:b1:c9:c8:58:
66:68:10:e2:ee:50:49:87:b0:23:35:01:c5:0e:3d:b4:a5:d1:
ba:82:54:8b:21:0f:c2:64:ea:d2:43:2a:e0:94:3d:fc:5d:ff:
53:9d:8d:9c:9c:41:1b:bb:6d:64:6f:67:8a:0f:de:6c:48:af:
2e:ca:8c:a4:fc:24:39:63:b5:a6:27:32:36:a3:90:32:10:f6:
a7:a5:53:ff:8b:4e:61:1b:1f:43:bf:a6:1a:68:72:fa:29:63:
04:d7:df:70:8f:ce:68:f3:57:42:ed:95:d6:4d:10:9f:66:7d:
84:b3:0c:cd
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUJ2TUGa86JXhcL7G/2TE/f93rQYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MDEwMTU2MTBaFw0yNzA2MzAwMjAxMTBaMDMxMTAvBgNV
BAMTKEMzODY2NjY1MjMwM0Q4NjRFQUQwMzY2Q0NBMURGRTVCRkE3MTJCMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQd6HLRMVAbhL8WjPvFHl9Ytp3
fZJ08KOzSFnV5IdxRyuNVzyYSI/fPUniC2/Qavz/csXwQLnEP/lBXMqa5dkC9e28
Qwk2OAO+sWSZ8Gqqx6KY8ThvWHLqrdaUIHG5qduW5fooMMzzCvXg9P3nmFB2BmYi
wzhU5Tr15B7miwr8eyw+lef23v2tGRIOqFopkWc2es1YpKU4QCUTl8n1FMVt/N3l
2djB3vdgCWCCH0HJUjrQ6IUdyhsnpfcXaK6dUlN9fvmzfAmXTwweNDUX3PnXnl6k
BPytB85UAvM7t5dMyL4v8c/JT6ZLgU9WDcBMpw38NA/UFL6+KllgHjqNsNf1AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUw4ZmZSMD2GTq0DZsyh3+W/pxKyAwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzMDAxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUhta
AwQAUin1MA0GCSqGSIb3DQEBCwUAA4IBAQB5fQQEXzuvcob5N9gLUbuBRVaxjBOh
cxkOgmgUWsV4VRXXyh80OQ6FwmIDY9eAxEmm3Dmjk4QbCz8Q4mlNhbe1qyp1NF96
tp2xUYQrQ/svyYviOxArig88UyUxRDg1832jye+Pqh8z8duDgS1/D25AQURh5WIb
Kc6MfZcaLGWE9PXD6ktIdVKIlaP9YbHJyFhmaBDi7lBJh7AjNQHFDj20pdG6glSL
IQ/CZOrSQyrglD38Xf9TnY2cnEEbu21kb2eKD95sSK8uyoyk/CQ5Y7WmJzI2o5Ay
EPanpVP/i05hGx9Dv6YaaHL6KWME199wj85o81dC7ZXWTRCfZn2EswzN
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:17 2026 by rpki-client