Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
File: AS213896.roa (raw, json)
Hash identifier: vjK6ApmQH4ZKF7v1JmzI0xhXCtNVrABhWF+N2o7RBdw=
Subject key identifier: 35:72:0A:3C:30:77:B0:9E:02:42:50:00:84:9D:BA:06:25:3F:95:9E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 06F0F6CE726532B2A8C72EA38FBCCB71CB642FB8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
Signing time: Tue 04 Aug 2026 00:01:36 +0000
ROA not before: Mon 03 Aug 2026 23:56:36 +0000
ROA not after: Tue 03 Aug 2027 00:01:36 +0000
asID: 213896
IP address blocks: 82.24.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f0:f6:ce:72:65:32:b2:a8:c7:2e:a3:8f:bc:cb:71:cb:64:2f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 3 23:56:36 2026 GMT
Not After : Aug 3 00:01:36 2027 GMT
Subject: CN=35720A3C3077B09E02425000849DBA06253F959E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:8f:83:2e:dc:57:8a:d2:fb:0e:f9:4e:10:
99:7d:eb:3e:8c:d6:99:46:25:c3:20:f4:d2:fc:1b:
29:8c:e8:67:7c:c0:01:ad:44:c1:45:9a:92:3e:f8:
fa:68:98:4b:d7:35:c5:b1:3d:01:21:f9:9d:69:87:
44:55:61:08:28:ec:67:0a:ab:d7:06:f1:86:9b:03:
66:10:19:01:3f:71:7c:d9:bc:73:ae:98:d9:0d:68:
c9:b1:bd:dc:a6:e8:d6:1a:e6:a5:07:fe:a1:cc:91:
bb:4c:e3:86:39:37:7c:ec:e3:36:cb:db:f7:4e:dd:
1d:4e:29:dd:9c:8e:10:f9:2b:b9:fb:04:1f:24:35:
b4:79:02:79:4b:9f:1f:0b:f0:79:a9:98:df:cd:0b:
18:35:ea:1c:a7:6f:f3:7a:7b:bc:4b:4d:d7:a8:e3:
50:4d:82:87:4a:a7:67:28:3b:67:42:7b:84:7c:1c:
2c:03:1a:40:e4:09:62:07:2c:ff:d5:52:b1:6e:20:
a1:96:97:30:90:ed:6e:68:5b:fb:fa:b7:2f:b9:cd:
ea:01:94:7f:b4:7a:f2:30:7f:13:b3:03:cd:b3:95:
3e:63:3b:8f:ba:66:02:b3:a5:d9:09:5e:31:0a:f6:
ee:0d:49:86:11:84:32:fa:b2:80:1d:4f:aa:dd:a3:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:72:0A:3C:30:77:B0:9E:02:42:50:00:84:9D:BA:06:25:3F:95:9E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.88.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c9:09:ee:52:88:d0:e6:1c:97:f6:db:68:be:44:69:f1:7f:
7d:f2:94:95:47:38:6a:5d:27:94:ef:13:ce:cf:d4:7b:ec:32:
a2:f8:1f:f9:9c:71:b4:b0:7b:00:9a:dd:9f:13:6f:8c:8f:b9:
9f:fe:3e:49:29:c9:14:c6:ed:61:9f:48:44:94:a8:5f:31:df:
74:7d:16:24:47:1a:1e:04:14:ff:fd:e5:45:46:f8:1e:9b:2a:
56:9e:42:33:7f:bd:24:b2:5b:9b:ad:22:85:c0:b5:af:1f:39:
02:7d:f3:9f:fb:93:98:fd:fd:9a:aa:79:59:d5:ba:ce:4d:ee:
f4:c3:de:3a:68:c3:64:bd:9c:24:74:0d:35:9b:87:63:a7:40:
f3:11:e9:3b:62:5c:ef:f6:8e:a3:cf:8c:61:ae:d2:8a:f9:1e:
42:15:8a:bc:60:24:8b:70:e4:9e:e2:3b:e4:5d:7d:07:21:7a:
41:16:26:d7:b4:bd:21:84:20:39:f3:46:bc:29:9a:e5:1b:14:
2b:e6:d0:30:51:39:8b:37:2a:5e:d7:bb:ee:08:08:0d:85:39:
d3:53:41:18:41:2b:d0:1b:a1:65:c9:91:20:74:22:53:71:1c:
e6:41:ea:37:a6:3d:79:fd:c0:7b:13:2d:8f:ea:18:57:f9:d9:
8f:26:2b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:20:50 2026 by rpki-client