Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213690.roa
File: AS213690.roa (raw, json)
Hash identifier: 6XZGXUwnHxZp/i9RbWe7cYY26CcETtgMUlzQv/8hOG0=
Subject key identifier: 0B:F7:81:52:C7:5E:BC:08:E4:B6:3F:7A:A8:A3:EA:7D:34:E8:44:FC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 32E19F91976BF6AC3D9B735BE7854AABB551D4B2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213690.roa
Signing time: Tue 30 Jun 2026 09:56:01 +0000
ROA not before: Tue 30 Jun 2026 09:51:01 +0000
ROA not after: Tue 29 Jun 2027 09:56:01 +0000
asID: 213690
IP address blocks: 2a13:9500:ab::/48 maxlen: 48
2a13:9500:19a::/48 maxlen: 48
2a13:9500:19b::/48 maxlen: 48
2a13:9500:19c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e1:9f:91:97:6b:f6:ac:3d:9b:73:5b:e7:85:4a:ab:b5:51:d4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 30 09:51:01 2026 GMT
Not After : Jun 29 09:56:01 2027 GMT
Subject: CN=0BF78152C75EBC08E4B63F7AA8A3EA7D34E844FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:b2:0e:a9:b1:c5:5a:40:8a:42:d6:85:9d:
4a:33:33:c3:b0:ee:65:11:eb:1c:f1:1c:4e:b3:77:
58:8d:5c:65:4d:be:7c:82:58:20:d0:d9:ea:50:41:
67:1b:8a:b0:9e:31:c0:47:10:14:a9:dd:33:35:98:
6d:33:dd:8c:b8:80:79:78:6d:d3:96:c0:ef:19:40:
68:a2:41:05:0c:00:a2:5a:10:4a:96:e5:be:ba:f3:
ae:c7:05:90:d5:d4:18:69:83:be:fa:27:13:f1:a2:
1a:39:ea:7b:3e:b3:8b:9c:05:80:6f:b8:a2:60:81:
f0:3c:36:54:a2:c3:a5:19:61:1d:37:28:dc:27:ae:
66:dc:ef:09:be:04:37:85:80:dd:3e:99:b6:51:b0:
14:7b:e7:de:eb:97:8a:87:a8:94:d7:7e:fb:29:00:
77:be:a9:f3:ca:48:d4:8c:21:5a:e3:7f:f5:09:d2:
5e:08:96:ae:39:15:50:bd:01:2d:d0:b0:90:ab:7e:
a6:81:a8:62:e7:87:6c:40:45:4e:7a:d4:72:a9:18:
d4:7b:42:37:19:9d:ab:b7:1e:56:4f:dd:cd:6f:93:
79:a5:45:0e:6b:39:a9:19:6d:d8:52:35:dc:56:67:
5b:ef:6d:47:a6:fd:64:0c:c3:b7:d3:a5:d1:c8:d9:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:81:52:C7:5E:BC:08:E4:B6:3F:7A:A8:A3:EA:7D:34:E8:44:FC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:ab::/48
2a13:9500:19a::-2a13:9500:19c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:19:d4:95:ea:b8:3d:da:62:46:d8:1e:82:37:da:7f:cb:7b:
8a:a0:f0:67:2d:79:41:e5:f7:c1:b2:96:e3:a2:8b:d7:b0:5e:
de:0f:e4:d6:ee:a9:d8:5e:2e:48:00:9c:28:40:db:f6:cf:1a:
c3:6c:08:70:3a:51:3f:b7:37:21:f9:e0:81:cd:eb:0f:0f:be:
4d:13:15:a6:ba:6d:51:35:a2:6e:df:5c:55:eb:d4:1a:e5:38:
69:c5:6b:e6:ff:af:97:71:c5:e6:43:8e:72:06:4a:d6:8f:25:
bd:bd:9b:0b:45:2c:d0:ab:93:2a:a4:ba:07:b3:40:b3:ec:41:
1b:85:2b:2c:ed:22:f2:45:04:8c:e2:b0:c9:68:e8:18:6b:57:
29:32:f0:f2:76:fa:c5:b6:ca:81:47:f9:d1:25:4d:2c:52:36:
89:f3:e6:7b:88:3e:8f:27:7f:33:bc:5f:1a:d2:50:bf:e6:58:
2a:83:45:97:0a:3c:92:37:3f:65:a0:f5:34:f3:4d:7a:cb:09:
9c:62:62:6d:c7:ae:65:4d:14:d7:78:a5:e8:c9:5e:b3:9b:2e:
b3:9d:6c:ba:ac:55:29:ab:3d:5f:58:8a:15:1d:7a:61:2d:07:
ce:17:4f:bc:2d:01:26:62:ed:25:16:0d:2b:24:76:78:7a:78:
12:e8:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 01:34:31 2026 by rpki-client