Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213760.roa
File: AS213760.roa (raw, json)
Hash identifier: 97ap8MCXZaM9BaHTm8AR9mFzB3GLvshqq5eksS8xMjA=
Subject key identifier: B1:F5:E7:29:45:77:E8:B7:4C:18:F4:4A:E4:77:4D:43:13:8B:AE:EF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4B2D641815F6615C9DC80CA18456C7F093F2C83F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213760.roa
Signing time: Mon 18 May 2026 15:34:56 +0000
ROA not before: Mon 18 May 2026 15:29:56 +0000
ROA not after: Mon 17 May 2027 15:34:56 +0000
asID: 213760
IP address blocks: 178.83.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2d:64:18:15:f6:61:5c:9d:c8:0c:a1:84:56:c7:f0:93:f2:c8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 18 15:29:56 2026 GMT
Not After : May 17 15:34:56 2027 GMT
Subject: CN=B1F5E7294577E8B74C18F44AE4774D43138BAEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:12:64:93:60:81:67:1c:0d:5b:f8:14:e4:
2a:f3:89:69:25:cf:b8:f5:f9:20:73:6d:37:df:ae:
47:01:a6:13:7d:64:f6:02:27:44:75:bc:54:23:48:
34:9f:b9:40:14:b5:9b:17:35:ab:a2:57:16:00:02:
eb:84:9d:27:fa:bc:e3:23:25:48:41:45:df:32:11:
a7:23:1b:c2:14:9a:ed:66:3c:b1:05:18:3c:84:31:
a9:d6:be:88:c5:18:bd:96:c7:08:43:9b:37:ba:6b:
54:7e:42:d3:52:9d:02:bd:3e:3a:a5:8d:e0:b5:66:
c3:f1:64:c9:13:b5:5b:8e:af:09:0c:6e:1c:12:40:
67:e4:34:a5:36:99:8a:79:53:7d:ef:32:40:1c:01:
6f:8c:30:d6:7c:42:fa:2c:09:d1:b4:c9:26:58:3c:
71:c7:76:85:40:9b:66:f3:cf:f5:94:3b:95:09:ed:
f0:63:e9:33:4c:5c:9e:14:41:17:c9:88:f0:de:07:
6b:f9:ba:20:43:04:1d:25:b6:24:fe:23:73:1c:68:
c3:a6:52:60:7f:5e:17:c9:3c:53:96:fd:2d:90:8e:
d1:36:71:89:27:72:92:3c:f8:73:0e:af:e8:00:7d:
c3:25:71:94:0c:82:49:92:f9:f3:70:03:ae:c0:f0:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F5:E7:29:45:77:E8:B7:4C:18:F4:4A:E4:77:4D:43:13:8B:AE:EF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:00:56:0b:38:16:a5:6e:6e:be:4a:da:c7:84:97:2a:78:55:
3a:91:10:6a:73:e4:79:74:08:43:d8:bc:0c:f8:98:cb:8b:78:
4c:e3:17:f8:77:8e:a9:70:e0:78:3c:14:a0:c7:30:7b:fe:f7:
ed:13:9a:73:6d:28:40:41:35:61:21:c4:84:e4:9c:35:6a:14:
53:c2:dc:4e:0b:27:20:2d:e8:91:9e:09:6e:53:1e:1f:b1:0f:
bb:4f:56:cc:61:16:2e:16:8c:c8:6a:da:97:a9:e7:c7:43:c6:
e3:2a:5b:cb:f4:9c:14:fb:50:61:26:a2:91:55:35:00:8c:c9:
1b:cc:b0:d4:c7:28:05:18:2b:67:0e:ca:12:be:eb:61:28:60:
96:be:3e:21:fc:cd:b2:9d:8d:1d:21:22:e3:7c:28:0b:3a:14:
dc:f1:9f:7f:a7:49:fb:a0:53:d4:a2:9f:01:f1:1d:c4:c1:c6:
64:ec:11:5a:17:33:75:0a:29:8d:76:11:0a:2f:0a:b0:39:e6:
70:20:bd:a1:e4:eb:3c:f8:9c:54:84:8e:fc:b0:26:6f:2c:51:
87:cb:1a:e7:6d:9e:27:cc:dd:67:de:be:eb:d8:44:ff:7d:bc:
20:f3:7d:9a:66:44:fa:c1:68:c7:d1:d6:3b:38:e2:6e:9f:e8:
e6:9c:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:29 2026 by rpki-client