Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213069.roa
File: AS213069.roa (raw, json)
Hash identifier: yD5Vpo7QHlHMZKhgfoZxpcGZaSwOraqcmb73XGgSHUw=
Subject key identifier: AA:B6:8D:0B:67:17:4E:3D:63:9D:89:59:A9:91:08:D3:3C:1A:70:3F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3CFAE382A7931928BC004538A797CA14842FB7CA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213069.roa
Signing time: Wed 12 Aug 2026 17:52:04 +0000
ROA not before: Wed 12 Aug 2026 17:47:04 +0000
ROA not after: Wed 11 Aug 2027 17:52:04 +0000
asID: 213069
IP address blocks: 2a13:9500:1bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fa:e3:82:a7:93:19:28:bc:00:45:38:a7:97:ca:14:84:2f:b7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 12 17:47:04 2026 GMT
Not After : Aug 11 17:52:04 2027 GMT
Subject: CN=AAB68D0B67174E3D639D8959A99108D33C1A703F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:4c:eb:dc:3b:5d:bf:da:31:f3:0c:15:92:
8e:49:7a:2d:9c:1e:68:50:4d:45:9f:c8:b5:25:34:
c8:b2:10:e3:9f:c3:b2:58:62:82:5f:74:7b:07:76:
37:ee:3e:38:a5:6a:a7:8e:93:b7:db:db:25:43:fe:
d8:0e:d0:35:a3:58:98:ac:4e:79:5a:4c:68:59:4d:
f1:96:cb:cd:e0:8c:ef:75:d5:87:db:5c:2d:4d:a5:
b6:59:b1:6f:4a:b7:85:90:87:80:65:e4:ce:9e:88:
c3:8e:65:16:b5:bc:fd:0d:25:87:aa:82:06:45:54:
3d:64:2b:87:cf:d1:79:93:e6:0e:c7:22:33:1b:db:
9e:d5:be:39:95:2e:57:08:11:3c:7e:1c:c8:c9:98:
ba:b2:6b:ed:f9:7b:33:fe:b8:c1:ba:77:55:89:df:
9a:29:7b:9d:e6:cf:aa:c7:5e:41:57:c8:5a:0a:01:
b2:b3:63:be:b9:fb:32:f4:7a:75:d5:fa:3c:6d:f4:
9b:09:a0:a0:40:e5:1f:04:da:14:29:eb:5f:88:cd:
1a:6a:f9:9e:c8:3d:7f:52:2f:61:f0:82:c5:48:f7:
96:a1:62:9c:d6:19:43:77:45:44:6a:28:4c:a3:12:
d5:c5:dd:e8:8a:2c:80:e2:b8:0f:25:68:4d:5e:06:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:8D:0B:67:17:4E:3D:63:9D:89:59:A9:91:08:D3:3C:1A:70:3F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1bc::/48
Signature Algorithm: sha256WithRSAEncryption
99:7c:67:53:46:8d:f2:00:68:c4:80:f5:0d:ab:28:92:02:e6:
8a:ee:85:fe:d7:16:04:48:9b:1c:2c:b5:b5:e9:ea:6e:d7:81:
c3:89:ef:07:9c:ec:c1:17:70:d5:f0:01:e2:4b:62:63:1c:93:
2e:24:18:89:47:da:ea:f2:31:a0:36:f7:ff:8b:90:8b:27:dd:
84:36:89:64:26:68:f3:2d:c4:b7:3b:9c:1f:b4:f2:38:55:34:
1b:dc:63:11:4c:5e:99:99:66:d5:a5:b7:89:5f:8e:ee:b1:ed:
ea:23:8e:ef:52:46:bf:5f:2d:7b:9c:8a:a0:aa:f3:d7:de:b6:
08:4b:f0:ec:68:7a:20:12:83:f6:97:89:71:b4:bd:8e:f6:ac:
f6:aa:5f:62:80:3d:0c:fd:6c:5b:7e:06:5b:40:a5:e3:c8:a4:
9c:aa:00:c6:44:fb:30:89:58:d3:06:e2:37:5b:62:0b:c9:1a:
f3:a0:e5:a8:b5:cf:65:9e:76:c4:d9:6b:c2:ca:6f:30:49:07:
59:59:fb:d3:d7:c4:ac:98:e4:81:9a:e0:fa:c7:75:57:d9:3f:
18:99:49:94:51:04:df:a3:6d:4a:87:8d:3a:d3:4d:f2:64:45:
c2:d7:87:16:40:ed:bc:90:bf:c2:72:c9:f9:92:f2:be:89:bc:
66:9c:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:22 2026 by rpki-client