Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213619.roa
File: AS213619.roa (raw, json)
Hash identifier: pO/C9k8fzq8T5tTCesj8uzjYsJnrw81wQ2OThYdV93g=
Subject key identifier: D8:9C:F0:5C:9E:56:32:CC:4D:F1:60:8A:A7:50:6E:83:2F:A1:F1:07
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 68D64849A8972AB241F8D7FF7F58341F04504D49
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213619.roa
Signing time: Mon 10 Aug 2026 08:39:02 +0000
ROA not before: Mon 10 Aug 2026 08:34:02 +0000
ROA not after: Mon 09 Aug 2027 08:39:02 +0000
asID: 213619
IP address blocks: 2a13:9500:1b6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d6:48:49:a8:97:2a:b2:41:f8:d7:ff:7f:58:34:1f:04:50:4d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 10 08:34:02 2026 GMT
Not After : Aug 9 08:39:02 2027 GMT
Subject: CN=D89CF05C9E5632CC4DF1608AA7506E832FA1F107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:28:f2:f6:6a:a1:4e:b5:66:ee:f9:77:93:
de:51:f0:70:39:7a:30:dc:d5:41:93:ed:9a:8b:b7:
aa:33:71:96:6a:97:b3:48:3d:63:41:28:d2:4f:99:
3c:3b:50:34:08:18:ec:fa:f8:66:47:55:68:90:98:
0a:ad:41:a9:03:3c:9f:38:ea:59:b1:77:e2:5d:5d:
fd:84:90:96:c8:37:7d:d3:ab:c9:fa:1c:bc:6d:e6:
6e:de:8d:09:68:72:0f:fd:5e:eb:5f:fa:07:5d:81:
e1:f6:f2:77:8a:fe:ed:16:cc:2a:26:1c:e5:d8:7a:
6c:df:ea:03:7a:54:57:ca:20:e0:79:53:62:63:a3:
f6:64:06:2a:a9:a4:91:2a:b4:10:58:04:7b:57:b9:
2e:0a:a0:b2:7b:9f:bc:9e:97:1c:bc:d6:2f:7a:46:
f1:ca:af:98:7d:62:97:28:6f:9f:af:02:17:82:41:
29:1e:1b:79:15:a4:2f:d9:c2:be:fc:32:d8:c2:44:
cf:60:97:08:f2:0a:9c:cc:31:ab:2e:77:a2:46:16:
fd:60:01:f3:58:a1:4b:aa:b8:71:20:ec:6e:5f:1c:
67:02:85:d8:27:5e:14:ab:58:86:d3:3f:eb:14:7b:
64:63:d1:fa:a9:0c:ff:43:7f:c8:1d:93:63:98:8d:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:F0:5C:9E:56:32:CC:4D:F1:60:8A:A7:50:6E:83:2F:A1:F1:07
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213619.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1b6::/48
Signature Algorithm: sha256WithRSAEncryption
39:cf:08:21:ac:46:47:25:bf:02:cf:85:26:b8:bd:eb:3c:b4:
82:67:ac:72:47:1a:8d:84:16:0f:a2:46:e3:3a:d4:00:8b:67:
bb:3c:d6:01:df:f9:d3:cd:f2:69:80:77:22:a5:2a:cb:a3:47:
bc:1f:b1:d9:8d:57:b9:c8:a3:1b:de:ec:8f:0d:ad:66:17:43:
45:71:25:06:a7:5c:a4:bc:af:96:df:a0:14:60:26:b3:72:7b:
60:47:a0:bb:8e:ab:e6:ea:3f:f2:7b:c3:76:46:ba:af:59:1c:
27:81:98:78:dc:19:29:cd:90:f1:fa:8c:8d:5d:19:4a:79:b0:
d7:55:7e:ea:f9:72:64:97:13:b5:c4:ed:a4:9e:b5:40:53:be:
44:98:53:e0:3d:e9:3f:7a:f9:9e:59:50:76:b0:9b:5f:cd:7c:
c1:73:08:b8:b7:60:30:bd:0d:28:76:92:ee:3c:96:cb:fe:8c:
86:8f:2e:f9:d9:62:d1:e7:ff:a4:39:26:af:b4:ef:41:9b:2f:
e3:a8:44:36:fc:af:e6:02:45:41:b5:2a:19:e0:b8:af:ba:f8:
36:d0:7b:6d:0d:2b:42:ab:9c:cc:1e:ee:b8:fb:eb:e4:66:08:
0c:19:ae:2f:b9:36:85:5a:aa:19:d5:ae:4b:0c:32:85:ca:9e:
7b:fd:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:01 2026 by rpki-client