Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213734.roa
File: AS213734.roa (raw, json)
Hash identifier: LEJXBSJFIwyBdTcJSphrIC+QleSHBcbohP79759nVyw=
Subject key identifier: F2:67:37:1A:44:CB:6A:37:1C:7B:40:04:C5:A9:21:E1:A8:5F:55:56
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3BE6E769AEDEAB11B79E8BF57E62CF51527E169F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213734.roa
Signing time: Tue 26 May 2026 09:06:44 +0000
ROA not before: Tue 26 May 2026 09:01:44 +0000
ROA not after: Tue 25 May 2027 09:06:44 +0000
asID: 213734
IP address blocks: 82.24.4.0/24 maxlen: 24
82.39.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e6:e7:69:ae:de:ab:11:b7:9e:8b:f5:7e:62:cf:51:52:7e:16:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 26 09:01:44 2026 GMT
Not After : May 25 09:06:44 2027 GMT
Subject: CN=F267371A44CB6A371C7B4004C5A921E1A85F5556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:45:56:d2:33:69:fa:17:0c:f1:9f:2f:ca:
ce:c4:c4:45:58:aa:e8:0a:78:20:34:50:f3:73:40:
d4:82:f6:aa:84:a8:b8:f8:79:6e:1a:a4:4a:52:a3:
b5:0a:d3:0c:68:41:53:f8:10:af:7e:dc:3f:5c:ae:
24:e1:5a:5c:55:0f:fb:61:e4:94:ab:01:5e:ca:75:
e6:39:f0:f2:b9:ef:9f:35:31:f1:3f:aa:66:9f:9a:
fb:98:c3:07:76:01:9e:e7:e7:91:fe:6f:1b:cd:0f:
7e:8b:54:f3:d4:6c:ef:a0:3f:57:7b:f4:eb:58:01:
82:df:fb:bd:e8:cd:c7:96:f9:7c:86:f7:3c:d1:b6:
05:19:89:78:3f:ec:c4:bd:be:3f:49:3b:29:e0:89:
5d:db:20:c1:e6:0f:5b:11:45:cc:c3:b4:06:4d:c5:
a8:ab:2d:10:12:df:e8:f4:4b:c0:be:6f:06:13:43:
a0:3b:76:86:12:4c:4d:9b:4e:6a:df:66:9e:cc:af:
71:c1:a8:43:da:e5:58:02:41:c2:43:37:28:99:1c:
3e:55:cb:00:b6:48:08:54:f2:2a:83:0c:5c:6e:09:
54:eb:7e:43:9d:53:5c:b2:73:fc:88:c8:4f:18:ed:
d3:f3:f8:06:1c:5c:6b:75:26:48:57:59:3a:47:dc:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:67:37:1A:44:CB:6A:37:1C:7B:40:04:C5:A9:21:E1:A8:5F:55:56
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.4.0/24
82.39.129.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c9:ae:29:ea:40:d9:6b:a5:18:c5:27:91:9d:f6:d5:5c:dc:
5a:a5:05:3b:40:51:99:75:10:b1:56:05:d4:d5:6e:e2:d8:c7:
76:cb:45:90:13:6a:2d:15:ea:c1:1c:5e:b6:d5:d4:37:02:e3:
c3:b8:30:65:b4:e7:3a:5b:96:92:e5:e7:af:1b:49:76:63:f0:
c4:89:7d:8c:cc:4f:98:d0:48:ce:78:b9:31:4f:0c:77:08:39:
3e:e0:a2:30:d4:aa:6d:07:df:e9:09:c3:cc:83:b4:aa:5b:29:
88:5e:7d:97:fb:1d:eb:63:d8:e0:0f:a1:17:58:dc:33:dd:c2:
dd:f5:83:c1:2d:74:36:42:be:0a:94:7c:43:d0:66:c2:70:15:
54:be:0b:12:d6:16:40:45:07:58:81:1d:33:3c:5e:ca:38:0b:
9c:ee:27:53:00:3a:24:96:8a:88:4e:89:bc:23:9b:0f:28:ce:
4e:88:45:5c:07:9c:54:dc:84:e2:90:dc:0d:23:3b:7c:65:39:
da:b5:46:70:bc:bb:a1:e5:90:da:42:80:37:16:e9:17:21:8d:
e2:79:7d:ce:06:34:fb:21:b9:d9:c5:86:f8:c7:e9:e0:90:92:
ff:80:d9:fa:d4:87:f8:eb:62:f7:41:a1:8f:52:a1:1d:e3:ae:
40:8c:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:14 2026 by rpki-client