Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213760.roa
File: AS213760.roa (raw, json)
Hash identifier: 40fxU2mwTT9ye/nBCmOc99WZQMnOvafgsy0xVnV/4PI=
Subject key identifier: 26:D2:79:54:05:5D:7A:3C:8A:71:F4:6B:4D:2A:D0:0F:A3:FE:E6:2F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 346892C62F7BC5BDD8A654485C353B95F52E5120
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213760.roa
Signing time: Fri 07 Aug 2026 10:52:55 +0000
ROA not before: Fri 07 Aug 2026 10:47:55 +0000
ROA not after: Fri 06 Aug 2027 10:52:55 +0000
asID: 213760
IP address blocks: 178.83.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:68:92:c6:2f:7b:c5:bd:d8:a6:54:48:5c:35:3b:95:f5:2e:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 7 10:47:55 2026 GMT
Not After : Aug 6 10:52:55 2027 GMT
Subject: CN=26D27954055D7A3C8A71F46B4D2AD00FA3FEE62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:78:f3:81:d5:76:f6:b6:81:d1:ed:d1:e4:60:
8f:4f:4a:94:54:6d:45:e0:b0:ec:20:23:b2:1a:21:
33:de:16:1d:61:e0:3e:b2:aa:f6:ef:0e:4f:b3:5d:
09:c3:88:b6:af:e2:6c:a8:40:38:54:58:c9:ba:f3:
e3:02:1e:a8:62:39:a8:12:9b:cc:71:2d:ea:f4:4b:
c0:a1:b6:d8:a1:81:18:83:d4:fc:51:e3:80:f2:8d:
fd:8c:d3:74:20:98:3c:1e:be:ca:59:11:e2:ca:bd:
a7:42:aa:70:38:b2:5f:83:7a:1e:b0:4e:70:a9:d6:
d5:db:01:f1:42:ba:fc:1a:d0:dc:6f:07:67:68:64:
0a:98:30:24:db:83:73:a0:ee:27:5b:db:f1:38:15:
28:52:d0:dd:9d:2e:7c:7a:de:82:21:de:26:8f:e4:
bf:f0:a5:f5:fe:23:70:cd:38:06:82:e3:bd:79:62:
f6:67:b4:0e:8a:63:ca:b6:4a:d1:d8:9c:ed:b4:20:
89:a3:b4:50:73:42:e7:38:f4:9a:71:1e:c1:aa:a9:
0f:ab:b9:d6:ae:07:be:81:5e:fb:29:10:88:66:96:
7c:62:dd:ee:af:d5:65:fc:53:4c:ba:2b:a3:a3:03:
3f:c7:5b:bf:18:a4:5b:9d:af:fc:33:b2:55:db:47:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D2:79:54:05:5D:7A:3C:8A:71:F4:6B:4D:2A:D0:0F:A3:FE:E6:2F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.174.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d5:bf:49:fc:68:a1:81:cb:4a:3d:e6:0c:d6:17:b0:f5:65:
b0:f9:49:aa:29:c0:ad:bd:45:ee:19:ef:9f:45:14:58:b4:6a:
ff:a8:fa:d4:58:bb:b1:38:94:e0:df:34:9a:33:3f:b4:2c:79:
54:49:4b:52:bc:68:1d:2e:33:2c:5b:a6:9f:1b:d5:e6:4d:d3:
bb:22:53:8a:12:30:85:72:17:3b:84:b4:87:ee:2a:d8:8d:4f:
57:c3:3b:14:75:03:d1:9c:b4:eb:c3:80:17:ec:38:ac:29:08:
5b:13:45:be:0a:a7:50:e3:b5:be:d8:e8:56:c3:80:cb:f9:83:
84:aa:a0:2e:39:5f:c5:fb:34:97:ca:30:b4:65:a3:b6:24:2a:
54:37:f7:76:3a:1c:23:33:36:a0:43:1c:18:0a:78:eb:e4:1f:
ae:39:4a:d2:b6:a8:d9:72:df:a4:13:d4:e2:87:53:a1:22:18:
d6:97:28:6c:35:3c:63:19:fe:ee:78:6e:6b:da:bd:e2:f6:51:
1e:83:d3:5b:c8:28:e5:f1:74:ba:ac:ac:e5:da:4a:65:83:ad:
95:9b:4b:8d:25:2f:be:fa:57:ef:8e:8f:34:af:64:c9:b5:a4:
bb:82:2b:2e:db:72:16:f2:52:4e:1b:30:99:b2:3a:21:b0:1a:
4e:58:20:88
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNGiSxi97xb3YplRIXDU7lfUuUSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MDcxMDQ3NTVaFw0yNzA4MDYxMDUyNTVaMDMxMTAvBgNV
BAMTKDI2RDI3OTU0MDU1RDdBM0M4QTcxRjQ2QjREMkFEMDBGQTNGRUU2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxePOB1Xb2toHR7dHkYI9PSpRU
bUXgsOwgI7IaITPeFh1h4D6yqvbvDk+zXQnDiLav4myoQDhUWMm68+MCHqhiOagS
m8xxLer0S8ChttihgRiD1PxR44Dyjf2M03QgmDwevspZEeLKvadCqnA4sl+Deh6w
TnCp1tXbAfFCuvwa0NxvB2doZAqYMCTbg3Og7idb2/E4FShS0N2dLnx63oIh3iaP
5L/wpfX+I3DNOAaC4715YvZntA6KY8q2StHYnO20IImjtFBzQuc49JpxHsGqqQ+r
udauB76BXvspEIhmlnxi3e6v1WX8U0y6K6OjAz/HW78YpFudr/wzslXbR+KLAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUJtJ5VAVdejyKcfRrTSrQD6P+5i8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNzYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAslOu
MA0GCSqGSIb3DQEBCwUAA4IBAQBI1b9J/GihgctKPeYM1hew9WWw+UmqKcCtvUXu
Ge+fRRRYtGr/qPrUWLuxOJTg3zSaMz+0LHlUSUtSvGgdLjMsW6afG9XmTdO7IlOK
EjCFchc7hLSH7irYjU9XwzsUdQPRnLTrw4AX7DisKQhbE0W+CqdQ47W+2OhWw4DL
+YOEqqAuOV/F+zSXyjC0ZaO2JCpUN/d2OhwjMzagQxwYCnjr5B+uOUrStqjZct+k
E9Tih1OhIhjWlyhsNTxjGf7ueG5r2r3i9lEeg9NbyCjl8XS6rKzl2kplg62Vm0uN
JS+++lfvjo80r2TJtaS7gisu23IW8lJOGzCZsjohsBpOWCCI
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:33:14 2026 by rpki-client