Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214913.roa
File: AS214913.roa (raw, json)
Hash identifier: yehdW9GusQVNOJLI/o+iYev9qWMJfUnrP3VCvFlVonw=
Subject key identifier: AB:09:56:A3:52:6B:46:D8:F0:69:91:6F:1F:70:CD:C5:0A:0A:B9:6F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1256E444A6BAA22E87F26876B2B0ED0640B952C0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214913.roa
Signing time: Fri 10 Jul 2026 07:49:08 +0000
ROA not before: Fri 10 Jul 2026 07:44:08 +0000
ROA not after: Fri 09 Jul 2027 07:49:08 +0000
asID: 214913
IP address blocks: 2a13:9500:c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:56:e4:44:a6:ba:a2:2e:87:f2:68:76:b2:b0:ed:06:40:b9:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 10 07:44:08 2026 GMT
Not After : Jul 9 07:49:08 2027 GMT
Subject: CN=AB0956A3526B46D8F069916F1F70CDC50A0AB96F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:88:b9:aa:ab:5e:c7:d1:46:04:aa:83:34:
a0:bd:93:41:08:11:e4:7e:10:b3:ef:e5:57:af:55:
86:97:2b:b2:32:1d:d0:f0:32:51:7d:11:b9:fd:2c:
f6:16:31:57:ec:b6:22:12:ff:c1:6b:66:ba:40:6e:
b4:b0:ff:0d:b7:88:81:4b:b8:6b:20:c6:b2:42:77:
63:ee:ef:cf:e5:a1:01:8c:ad:f1:47:8f:5d:72:0a:
70:a5:3c:91:b1:cf:a5:d9:3b:e0:d6:ce:e2:e4:26:
86:50:dc:97:03:bb:a2:11:51:5d:80:72:73:ef:75:
8c:fd:67:76:06:4b:cf:f0:5e:92:c1:14:d2:f0:4b:
e9:ad:f0:38:c7:f4:76:5f:07:29:2f:0d:4d:1a:79:
68:d2:97:70:6b:83:e8:d4:2a:10:f4:15:13:a4:f9:
88:c6:94:ff:ac:54:59:3a:cf:f8:52:dd:c3:e6:3d:
69:fd:73:82:af:cc:de:f3:a4:62:8a:95:5c:ff:fc:
5a:64:00:b2:21:0a:06:f5:96:6c:d7:af:5e:39:4d:
2f:1b:b8:2b:3e:32:26:0d:40:21:54:c8:31:f3:bd:
83:4e:b5:e5:dc:54:83:33:f2:b3:a1:81:a0:7b:e4:
ba:07:de:26:88:49:b0:d9:a7:53:a8:78:91:6d:4a:
f1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:09:56:A3:52:6B:46:D8:F0:69:91:6F:1F:70:CD:C5:0A:0A:B9:6F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c1::/48
Signature Algorithm: sha256WithRSAEncryption
82:0c:c9:f7:30:08:03:0e:35:43:1e:c2:0c:b8:21:ce:46:45:
74:f2:00:15:da:7d:48:11:cb:04:53:b9:fe:29:b7:76:fc:d5:
38:a7:86:7e:f0:59:02:17:e0:cd:a1:34:6c:32:92:d7:96:e6:
31:04:39:78:af:70:bb:33:18:6d:b9:70:0a:27:91:4a:33:87:
09:f6:01:2a:39:a6:5f:e7:9e:50:ef:dd:09:f1:cd:55:58:db:
73:4f:13:09:24:c4:68:b2:ec:c7:d5:be:39:3d:2e:f9:05:6c:
77:c6:9e:13:90:fa:4b:b4:1d:49:83:fc:a9:19:ff:11:ef:5c:
22:43:99:e4:58:0c:4c:21:4a:90:92:a5:6e:7a:6d:28:bc:b6:
87:dd:da:db:c9:91:b6:5e:9e:9c:6a:49:ad:1e:96:44:fe:0e:
0c:10:57:16:4d:35:dd:7d:38:00:b3:69:11:72:33:a9:5f:98:
46:52:77:6e:4f:dd:37:0c:b3:df:32:35:84:5e:83:37:69:b6:
75:c4:e4:b0:8b:e6:37:a4:a7:89:6e:a9:50:a4:60:f4:87:e2:
96:89:e6:cf:3f:94:6e:ec:17:f5:2a:bb:f7:30:44:03:1e:13:
24:f2:a2:1d:49:6e:01:77:aa:fb:33:03:a9:1a:35:b5:22:2d:
72:38:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:41 2026 by rpki-client