Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213683.roa
File: AS213683.roa (raw, json)
Hash identifier: DHMEqO3ERycm3b3UuCVccRKUHkEdUYMQjv0j/kYXDw4=
Subject key identifier: B9:71:AC:0E:91:D3:2E:F9:F8:84:70:29:86:8E:92:FE:11:58:82:02
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5FAEF00DA6B4039C4A8977F137E64BE35D41DA37
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213683.roa
Signing time: Fri 26 Jun 2026 12:36:52 +0000
ROA not before: Fri 26 Jun 2026 12:31:52 +0000
ROA not after: Fri 25 Jun 2027 12:36:52 +0000
asID: 213683
IP address blocks: 82.22.239.0/24 maxlen: 24
82.24.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ae:f0:0d:a6:b4:03:9c:4a:89:77:f1:37:e6:4b:e3:5d:41:da:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 12:31:52 2026 GMT
Not After : Jun 25 12:36:52 2027 GMT
Subject: CN=B971AC0E91D32EF9F8847029868E92FE11588202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:f5:ab:86:40:fa:a2:84:d7:b2:78:e6:64:
72:7d:99:57:4a:45:05:1e:4d:0b:92:47:f3:e6:45:
d0:76:c5:0f:09:08:06:25:a8:8a:16:2a:3b:08:6d:
ba:f1:94:0a:03:29:a8:8a:f2:fa:f5:86:1d:cf:7e:
66:54:69:9e:e5:55:ea:13:5b:2e:f3:fa:08:5e:ff:
ca:a7:fc:e4:77:4e:5f:f5:45:f8:f6:42:fb:f6:73:
28:33:89:f1:8b:32:32:a0:44:ff:4c:b9:ae:49:33:
ec:85:ba:94:8d:f3:82:5d:cf:ab:3a:bb:38:16:a3:
fc:23:f0:80:a4:50:0f:50:bc:0b:a1:53:23:46:d9:
10:77:28:4b:e4:22:0b:cb:8a:47:52:bc:05:86:09:
6a:81:42:89:2c:2e:6f:58:a1:50:a0:98:2d:3c:3c:
09:48:65:1b:6f:03:cb:17:0a:0f:31:9a:e9:83:5f:
f5:a6:45:63:f4:37:cd:07:75:23:8f:ae:02:10:86:
ee:71:4f:e2:65:3b:55:90:cc:22:ef:d6:58:70:77:
39:03:fc:bb:de:53:9b:c8:cc:5e:c8:f3:de:f5:dc:
36:16:0f:a3:50:2a:57:13:51:77:3b:48:76:b5:39:
c6:10:a4:ab:b7:fb:8e:84:1d:db:3c:ed:c1:d0:8b:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:71:AC:0E:91:D3:2E:F9:F8:84:70:29:86:8E:92:FE:11:58:82:02
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.239.0/24
82.24.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:73:f4:f9:0f:db:f0:3f:46:0d:1d:2b:84:bd:b6:bf:7b:42:
e7:87:d3:1c:d7:14:33:8e:0f:32:d3:dd:00:e8:ff:f7:08:13:
1a:81:a3:e8:d5:83:8c:e8:5d:b7:c0:6d:c6:a0:6f:27:d4:f0:
87:5c:38:78:fb:72:c8:15:3f:3a:b9:01:e0:5a:63:04:36:78:
b4:2c:2f:bc:f2:4b:3d:3b:13:23:a7:5d:ac:12:b0:5e:3f:15:
34:15:5f:9d:75:28:9c:51:36:d7:ab:25:b1:9c:48:93:5b:1f:
c0:8e:9f:9d:20:11:ec:7e:1d:17:6b:d8:db:8d:40:ba:4d:f5:
85:b1:93:0c:c1:b3:5b:cb:91:42:3f:75:71:e4:99:9b:f7:95:
69:97:ea:c5:6d:f1:ec:ce:a3:53:9f:eb:d3:0e:89:8c:87:b1:
9f:22:1e:97:70:3f:c1:9c:b1:4e:da:c5:db:79:82:9a:16:f8:
b1:15:28:3a:9c:53:1d:76:5e:69:ef:42:f3:41:bf:f1:47:60:
c0:48:dc:72:3b:76:3e:e0:26:df:18:c0:3b:bf:b2:70:c7:94:
72:ba:84:be:60:ad:72:95:3e:48:e9:5b:07:71:f2:d7:14:6f:
35:a5:51:58:95:f0:fa:b3:8c:26:0a:26:a9:a6:3f:6b:9c:88:
70:f9:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:17 2026 by rpki-client