Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213250.roa
File: AS213250.roa (raw, json)
Hash identifier: t3kuO6LMy2UydzEJvs/GtKyKyz28dcaf6Svyb87MlEw=
Subject key identifier: C3:A3:42:B1:65:7B:5A:4C:93:A0:D0:BD:54:BE:CE:72:30:6A:37:4C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 220BAF2FEC0BCC5A83F574F1382A9CF160512485
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213250.roa
Signing time: Tue 28 Jul 2026 17:31:40 +0000
ROA not before: Tue 28 Jul 2026 17:26:40 +0000
ROA not after: Tue 27 Jul 2027 17:31:40 +0000
asID: 213250
IP address blocks: 82.22.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0b:af:2f:ec:0b:cc:5a:83:f5:74:f1:38:2a:9c:f1:60:51:24:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 28 17:26:40 2026 GMT
Not After : Jul 27 17:31:40 2027 GMT
Subject: CN=C3A342B1657B5A4C93A0D0BD54BECE72306A374C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d0:af:5e:50:cc:61:b8:71:dc:e9:f0:e9:a8:
64:d3:98:11:a4:25:53:76:3a:20:a3:9b:4a:ec:96:
ab:d6:94:9d:17:3e:02:54:1d:5e:cf:10:d9:6a:93:
63:44:73:93:89:7b:42:8d:8e:86:23:72:60:c9:c2:
b7:1a:34:0b:32:8d:e1:81:a1:f0:8a:ab:15:ea:81:
59:96:b8:cc:e3:45:38:be:9b:8b:e8:da:32:ee:c1:
47:5b:ca:ca:58:5e:15:f8:f2:70:68:d9:5a:49:95:
d1:4b:20:0a:54:08:94:9b:71:13:45:8c:ad:ca:75:
b6:f2:4d:1d:ca:2f:46:85:68:fd:6d:91:d1:96:30:
f0:f9:a7:76:c9:e9:1d:89:f4:92:a2:96:d6:87:31:
4e:0e:98:e9:8c:f2:25:7f:aa:eb:75:bd:cc:ce:71:
2f:e2:41:7b:eb:41:05:b0:b4:23:6d:97:86:57:7a:
8f:86:3b:44:be:22:35:9a:df:73:3e:d3:2b:06:7a:
6e:68:72:e1:d0:ab:e9:5f:64:5a:c0:53:c0:02:4e:
e2:70:ce:c1:97:d4:48:0c:1a:b7:ce:b9:56:24:5f:
14:2f:ac:97:82:49:9b:9b:31:9b:54:c0:52:f7:f4:
05:e6:0d:93:df:f7:e9:73:13:39:55:4e:11:fa:d6:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A3:42:B1:65:7B:5A:4C:93:A0:D0:BD:54:BE:CE:72:30:6A:37:4C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9c:3f:6b:a1:92:7d:f1:1b:00:7e:c9:5b:3a:b9:e0:a6:7a:
a5:34:8e:f5:58:20:3e:ab:2e:48:5a:3e:15:f6:0e:7e:fd:6f:
ed:1c:17:49:e3:a8:07:ca:d9:3d:16:bc:01:9c:48:03:d2:27:
24:9b:8e:2d:bb:42:10:42:a5:ed:b1:69:f1:f2:54:77:08:31:
a5:08:1c:50:13:3b:9f:b6:91:6d:75:46:93:7f:95:9f:e0:b0:
67:3b:c4:73:6f:d6:99:12:f9:bd:16:41:5e:88:31:bf:a0:cb:
b1:3f:68:a0:e7:e3:2f:e2:fe:c1:03:c4:94:28:96:1a:c0:b3:
d4:e9:fd:64:7d:45:36:e5:77:ad:86:7a:6d:2d:b8:df:f8:98:
eb:3d:29:1b:e3:1a:01:dc:a4:3b:8a:63:b5:43:10:a3:fd:c2:
29:e1:6e:5d:7d:7f:80:76:a7:c1:51:19:54:be:30:ff:ef:1c:
d8:32:7c:69:47:e8:d0:52:b7:2f:e4:5a:1f:0a:d2:8b:c1:66:
0a:a3:66:cc:bf:89:fb:83:9f:3b:f5:0c:c7:07:e2:30:b8:e5:
c0:95:2a:0f:34:52:7a:e4:b2:12:3d:12:34:9e:55:50:aa:db:
98:5b:f5:88:96:14:7d:83:11:41:7d:be:c7:bf:71:68:aa:c7:
86:f1:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:15:55 2026 by rpki-client