Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: OrLwvwHyv1MXS0QVa28sOAEU0JlZEe01Mb/YU9mO88k=
Subject key identifier: 79:09:79:91:6E:DF:62:08:91:B3:02:F6:6D:CA:4B:51:6B:69:CB:38
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5BC4F48A9D2DC89CED2EA091D189C2CD90A5F88C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213476.roa
Signing time: Tue 11 Aug 2026 06:51:52 +0000
ROA not before: Tue 11 Aug 2026 06:46:52 +0000
ROA not after: Tue 10 Aug 2027 06:51:52 +0000
asID: 213476
IP address blocks: 82.21.169.0/24 maxlen: 24
82.22.17.0/24 maxlen: 24
82.22.29.0/24 maxlen: 24
82.23.142.0/24 maxlen: 24
82.24.120.0/24 maxlen: 24
82.26.113.0/24 maxlen: 24
82.39.232.0/24 maxlen: 24
82.41.140.0/24 maxlen: 24
82.47.217.0/24 maxlen: 24
82.47.230.0/24 maxlen: 24
84.75.138.0/24 maxlen: 24
84.75.157.0/24 maxlen: 24
84.75.162.0/24 maxlen: 24
84.75.183.0/24 maxlen: 24
84.75.192.0/24 maxlen: 24
84.75.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c4:f4:8a:9d:2d:c8:9c:ed:2e:a0:91:d1:89:c2:cd:90:a5:f8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 11 06:46:52 2026 GMT
Not After : Aug 10 06:51:52 2027 GMT
Subject: CN=790979916EDF620891B302F66DCA4B516B69CB38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:6c:32:07:17:7b:2e:99:77:21:35:12:34:
d5:97:13:db:20:2a:1f:10:ad:be:ae:c6:f6:1d:70:
36:40:8b:9d:51:87:d0:ba:2c:6d:9c:ff:4c:bd:4f:
2f:30:8c:3f:4a:37:4e:da:7a:07:81:fa:c2:20:02:
5c:3e:6f:96:29:3e:7b:ec:12:82:2f:53:b7:af:71:
82:48:81:1f:98:bc:61:50:0f:44:88:63:0e:d3:61:
11:f8:fd:d8:67:07:f3:3d:d3:59:67:55:32:ea:b3:
cd:24:bd:30:5e:07:14:c7:04:c9:06:77:58:50:1f:
af:5c:33:35:44:f1:54:67:e0:0d:ab:c2:18:de:9a:
06:2d:cd:36:60:a0:e2:02:61:f0:65:18:dd:d3:a2:
bc:ff:ea:fe:24:f2:ef:52:7a:28:78:5b:6c:02:9b:
1e:d2:a6:a4:c8:50:fa:70:87:8b:b8:d2:ff:38:86:
91:55:16:79:03:42:c0:d3:cc:89:78:94:37:09:44:
b4:21:d8:1d:09:a4:ad:71:0c:51:85:b8:10:09:08:
df:b1:7f:0b:a8:12:d3:b8:cb:45:fc:7b:fe:38:52:
2f:8f:b1:20:66:c4:83:2d:73:4b:99:71:45:a6:ce:
75:e5:28:6f:06:c3:e8:e4:6c:f6:b9:6b:3f:f0:07:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:79:91:6E:DF:62:08:91:B3:02:F6:6D:CA:4B:51:6B:69:CB:38
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.169.0/24
82.22.17.0/24
82.22.29.0/24
82.23.142.0/24
82.24.120.0/24
82.26.113.0/24
82.39.232.0/24
82.41.140.0/24
82.47.217.0/24
82.47.230.0/24
84.75.138.0/24
84.75.157.0/24
84.75.162.0/24
84.75.183.0/24
84.75.192.0/24
84.75.205.0/24
Signature Algorithm: sha256WithRSAEncryption
66:36:70:7b:47:8e:23:b2:ed:cd:97:3c:a6:cb:43:20:e0:1e:
73:68:a5:d2:47:52:23:14:b4:03:65:7c:99:9a:3c:d6:59:df:
04:e2:f6:ca:da:fa:eb:90:d9:55:46:03:7a:ca:d6:cc:d3:04:
3b:a7:c5:64:3b:f2:6b:14:3f:5d:28:22:1e:7b:20:98:82:70:
78:63:42:0f:d7:2a:74:67:4c:b3:62:67:3f:bd:24:77:9a:db:
a6:2d:47:d1:ef:8b:1a:0c:10:af:5b:59:35:39:db:80:63:95:
b0:99:c4:5d:2e:1e:7b:50:8a:01:09:89:55:bc:55:de:9c:02:
70:14:fa:91:1a:bf:fe:48:a3:82:ab:ea:45:2a:56:d3:a6:c2:
37:a1:69:d7:94:c7:71:e9:da:21:db:6e:6f:f1:f5:29:4d:60:
8f:1e:87:1d:d5:33:eb:12:f9:aa:b6:9c:51:4e:1c:64:4f:49:
c8:d6:b8:d4:54:76:ae:50:c4:c3:77:6a:54:69:06:96:6b:42:
48:6f:34:1d:ae:8c:cb:af:c8:be:25:da:b2:00:2e:cd:f8:63:
87:e7:22:c1:27:ac:fc:c1:f9:54:04:5d:5f:78:8c:a1:e1:9e:
df:80:9f:3c:7f:68:c3:90:92:4e:02:47:35:65:10:37:c5:af:
1e:b3:2a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 16:52:04 2026 by rpki-client