Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: qrcRyIMuSLOH0o1HmBgLSACtsTLpstZ9nxrmZuLxJ8s=
Subject key identifier: 2B:69:DF:C1:D1:84:B8:66:1C:54:94:8B:3A:C7:F8:37:7A:D6:0E:0E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 612D39A26B3BED74A89214884933E991985035B8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213476.roa
Signing time: Wed 27 May 2026 07:31:45 +0000
ROA not before: Wed 27 May 2026 07:26:45 +0000
ROA not after: Wed 26 May 2027 07:31:45 +0000
asID: 213476
IP address blocks: 91.199.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2d:39:a2:6b:3b:ed:74:a8:92:14:88:49:33:e9:91:98:50:35:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 27 07:26:45 2026 GMT
Not After : May 26 07:31:45 2027 GMT
Subject: CN=2B69DFC1D184B8661C54948B3AC7F8377AD60E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:83:be:82:33:ee:42:b3:f9:f0:35:24:19:
7f:38:fd:ff:78:fd:e7:6b:cb:a3:79:fe:e2:2c:c3:
33:03:fb:28:e1:9e:e0:12:78:1b:31:c2:b2:5a:33:
9f:ff:5a:73:e4:26:2f:96:70:06:2b:d9:b9:79:72:
a3:61:bb:a7:22:6c:46:15:3e:d2:74:99:9d:87:c8:
3b:1e:3e:4f:64:dc:6b:8f:f5:f4:01:4d:b3:1b:a1:
73:38:02:fe:84:14:c3:ca:a8:05:01:56:31:a5:0c:
2b:2e:e8:d4:d5:48:6a:ab:c5:8f:25:cf:fa:38:54:
fb:f0:14:8d:61:2e:a2:24:e1:ba:65:4a:5d:73:f4:
b9:ad:a0:a7:55:09:98:eb:65:54:32:9d:16:01:22:
ee:66:31:2e:94:c7:7b:50:ec:c7:b5:af:2c:bc:42:
1c:f6:6d:71:35:41:44:f3:3d:d0:ea:59:35:aa:04:
e6:e7:a8:c7:f3:ba:61:f6:59:06:ad:86:22:6a:37:
dc:00:8b:30:24:c6:55:2b:a9:65:11:70:8a:93:c6:
95:88:cf:52:03:99:e7:da:01:d5:57:e1:16:53:37:
27:39:96:de:77:51:e0:97:60:c5:c6:12:6d:e7:56:
15:c6:05:4d:4e:03:2b:d4:0e:d4:f8:bd:70:19:37:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:DF:C1:D1:84:B8:66:1C:54:94:8B:3A:C7:F8:37:7A:D6:0E:0E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:51:51:6a:98:19:ca:25:28:e3:ba:90:dc:13:df:24:d8:12:
dc:4b:18:89:11:d7:0e:22:f8:d8:c7:cc:0c:fd:d4:5a:8e:50:
76:98:b3:74:e6:79:7d:de:29:58:4d:17:4d:60:74:e4:06:13:
42:9d:e2:74:e8:4a:ca:45:6b:3d:29:04:65:e5:0b:5e:63:22:
3c:04:6d:cc:6b:8d:7e:8d:28:bb:4b:9b:fb:82:cb:97:c8:59:
40:1d:47:5f:9b:28:80:af:38:74:8b:60:41:95:c8:66:59:88:
fc:66:c3:b8:c0:32:d3:f2:d8:62:46:74:31:79:7b:bf:73:be:
23:f2:f5:15:a5:5e:4a:26:42:84:04:dc:3c:38:36:55:94:4f:
18:84:f5:9a:60:94:12:82:90:83:8e:d3:3a:9f:74:cb:1f:17:
87:d4:b7:8e:ac:e4:0c:b8:26:64:88:4c:9a:b3:7a:0b:e6:88:
38:41:41:26:62:55:56:56:5f:62:06:f0:bb:9d:4d:e2:6f:8f:
bb:0c:7d:81:57:cc:fe:7b:61:36:e4:1c:37:b8:8a:48:6b:9c:
43:9a:ca:2e:18:03:91:23:d9:53:d0:7a:07:02:e9:b2:c6:2c:
1a:ad:7a:12:53:64:c3:07:8e:e5:ce:6f:9c:93:9f:ce:5b:57:
af:58:14:ff
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYS05oms77XSokhSISTPpkZhQNbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA1MjcwNzI2NDVaFw0yNzA1MjYwNzMxNDVaMDMxMTAvBgNV
BAMTKDJCNjlERkMxRDE4NEI4NjYxQzU0OTQ4QjNBQzdGODM3N0FENjBFMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmYYO+gjPuQrP58DUkGX84/f94
/edry6N5/uIswzMD+yjhnuASeBsxwrJaM5//WnPkJi+WcAYr2bl5cqNhu6cibEYV
PtJ0mZ2HyDsePk9k3GuP9fQBTbMboXM4Av6EFMPKqAUBVjGlDCsu6NTVSGqrxY8l
z/o4VPvwFI1hLqIk4bplSl1z9LmtoKdVCZjrZVQynRYBIu5mMS6Ux3tQ7Me1ryy8
Qhz2bXE1QUTzPdDqWTWqBObnqMfzumH2WQathiJqN9wAizAkxlUrqWURcIqTxpWI
z1IDmefaAdVX4RZTNyc5lt53UeCXYMXGEm3nVhXGBU1OAyvUDtT4vXAZN1d5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUK2nfwdGEuGYcVJSLOsf4N3rWDg4wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEzNDc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8eo
MA0GCSqGSIb3DQEBCwUAA4IBAQB6UVFqmBnKJSjjupDcE98k2BLcSxiJEdcOIvjY
x8wM/dRajlB2mLN05nl93ilYTRdNYHTkBhNCneJ06ErKRWs9KQRl5QteYyI8BG3M
a41+jSi7S5v7gsuXyFlAHUdfmyiArzh0i2BBlchmWYj8ZsO4wDLT8thiRnQxeXu/
c74j8vUVpV5KJkKEBNw8ODZVlE8YhPWaYJQSgpCDjtM6n3TLHxeH1LeOrOQMuCZk
iEyas3oL5og4QUEmYlVWVl9iBvC7nU3ib4+7DH2BV8z+e2E25Bw3uIpIa5xDmsou
GAORI9lT0HoHAumyxiwarXoSU2TDB47lzm+ck5/OW1evWBT/
-----END CERTIFICATE-----
Generated at Mon Jun 1 20:34:25 2026 by rpki-client