Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: KfI+gsVLqDjspbtxP9o7xcBDyOiWsEr2JaWuBQHrrXU=
Subject key identifier: 17:61:38:79:39:D7:56:CA:75:50:36:AE:8F:C4:88:C1:65:5E:48:94
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4CE7D92E8BC5512F9C0DE09E6E8480F865AA8976
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213476.roa
Signing time: Wed 27 May 2026 07:32:01 +0000
ROA not before: Wed 27 May 2026 07:27:01 +0000
ROA not after: Wed 26 May 2027 07:32:01 +0000
asID: 213476
IP address blocks: 82.21.169.0/24 maxlen: 24
82.22.17.0/24 maxlen: 24
82.22.29.0/24 maxlen: 24
82.24.120.0/24 maxlen: 24
82.26.113.0/24 maxlen: 24
82.39.232.0/24 maxlen: 24
82.41.140.0/24 maxlen: 24
82.47.217.0/24 maxlen: 24
82.47.230.0/24 maxlen: 24
84.75.138.0/24 maxlen: 24
84.75.157.0/24 maxlen: 24
84.75.162.0/24 maxlen: 24
84.75.183.0/24 maxlen: 24
84.75.192.0/24 maxlen: 24
84.75.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e7:d9:2e:8b:c5:51:2f:9c:0d:e0:9e:6e:84:80:f8:65:aa:89:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 27 07:27:01 2026 GMT
Not After : May 26 07:32:01 2027 GMT
Subject: CN=1761387939D756CA755036AE8FC488C1655E4894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:63:32:7e:55:8a:b0:92:46:14:f8:fc:67:
bd:7f:c9:3b:9d:c0:eb:c4:5c:45:8a:79:c2:13:2d:
f5:15:4b:23:0c:b7:19:6a:89:20:8d:11:d7:b8:25:
e6:0a:97:73:cd:fa:af:9b:e7:ab:4d:91:f5:f9:c4:
c8:dd:86:bc:45:dc:b2:e5:a5:2d:c0:c1:ce:ea:6c:
2d:d8:d9:65:d4:77:23:42:de:2b:f7:dc:f4:4e:dc:
4c:e7:e7:68:8a:fc:b7:ff:f0:d6:e7:2d:62:7c:61:
28:b8:2a:d8:73:85:1e:f9:55:e4:10:a4:5d:30:df:
99:3b:36:0e:ee:d8:0a:65:ca:fa:98:85:d6:f0:ef:
00:60:bb:9f:69:e6:3d:df:95:44:57:c5:40:c3:5d:
b5:b1:f7:ae:50:68:07:c5:a4:0f:6d:26:dc:dd:f0:
ea:04:6a:ab:85:2f:b1:54:be:05:f7:a2:95:56:6b:
9e:67:50:d3:9b:ea:45:a0:a9:21:5f:aa:70:09:a3:
46:97:a9:dc:d7:56:72:23:0b:b1:c5:94:b6:72:4d:
20:be:f1:74:9c:af:4e:99:23:4c:e4:7a:f2:60:ae:
2e:9c:f4:7c:d3:bf:78:3c:0f:ea:ef:bb:cc:b1:1d:
42:d8:3d:19:90:77:14:b5:4c:8e:2f:4e:02:77:95:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:61:38:79:39:D7:56:CA:75:50:36:AE:8F:C4:88:C1:65:5E:48:94
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.169.0/24
82.22.17.0/24
82.22.29.0/24
82.24.120.0/24
82.26.113.0/24
82.39.232.0/24
82.41.140.0/24
82.47.217.0/24
82.47.230.0/24
84.75.138.0/24
84.75.157.0/24
84.75.162.0/24
84.75.183.0/24
84.75.192.0/24
84.75.205.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f3:88:a1:07:c9:eb:48:3e:d4:04:fd:22:6e:5c:ea:fc:48:
4b:e0:8c:fb:8c:ca:9c:bb:a9:d3:37:e8:90:c5:da:7b:f0:b4:
78:89:e1:71:05:b3:02:9e:d0:50:06:dc:27:b6:56:3e:49:37:
04:90:33:bc:c5:db:75:c9:d2:d9:7d:08:bd:aa:6b:c4:8a:0f:
ee:6e:dc:65:24:0b:ff:5c:2b:1a:2c:32:72:69:cf:f4:1f:72:
73:75:13:9d:75:d3:00:2d:6c:ed:f6:99:a9:1e:44:01:c5:b0:
3a:56:02:91:94:08:9a:fa:14:85:b7:a7:0b:3c:8c:e8:e1:8d:
d3:3b:ad:98:74:d9:22:d1:a5:3c:c6:be:4d:a3:3e:4b:30:36:
7f:62:31:20:e2:5f:6d:9d:51:74:a2:10:63:3e:a9:62:09:67:
8f:b0:c5:f2:ac:07:51:ec:d4:bb:03:83:0c:82:f2:34:de:44:
61:13:c9:c1:04:57:0d:93:4d:dc:03:c1:f9:d2:ec:a3:e3:cf:
4d:73:45:f2:94:67:30:72:6d:b7:cd:ec:8f:49:db:72:18:c9:
77:35:3d:4b:29:a5:22:f5:18:31:92:93:ed:6c:1f:41:b0:b5:
16:24:d1:e9:75:6a:d5:50:15:59:c3:41:f0:ae:8b:4b:18:29:
d1:58:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 20:34:24 2026 by rpki-client