Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213036.roa
File: AS213036.roa (raw, json)
Hash identifier: i2PAjmGTPvklmO9gy8KiXIY/V0IYBppDf+PKRacrXTU=
Subject key identifier: 08:0E:15:AE:50:13:3E:F9:9B:8B:8C:AE:D3:65:9D:2F:B9:E3:BE:B6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5A7A982A6C173A0A4E134631425815B64ABAB570
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213036.roa
Signing time: Sat 15 Aug 2026 03:09:03 +0000
ROA not before: Sat 15 Aug 2026 03:04:03 +0000
ROA not after: Sat 14 Aug 2027 03:09:03 +0000
asID: 213036
IP address blocks: 2a0f:85c1:d41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:7a:98:2a:6c:17:3a:0a:4e:13:46:31:42:58:15:b6:4a:ba:b5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 15 03:04:03 2026 GMT
Not After : Aug 14 03:09:03 2027 GMT
Subject: CN=080E15AE50133EF99B8B8CAED3659D2FB9E3BEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:6d:fe:e8:5f:e9:0e:fa:d4:c2:84:f4:de:
fc:a1:97:90:dc:db:45:97:80:70:6c:cf:ab:c1:d2:
02:d9:d0:bf:83:40:22:ff:34:d0:7e:71:e3:2b:e4:
58:72:ed:46:d2:6e:97:04:98:cf:19:b6:83:0d:1d:
d0:7e:c1:6f:a4:51:a8:60:a7:74:1f:0f:b9:96:04:
89:54:92:af:dd:e0:94:62:ab:ab:8c:9e:7c:d4:40:
4f:a6:40:f4:4a:d0:fa:88:a4:dd:62:ac:f7:a6:ca:
00:2b:b3:de:0e:99:9b:96:9b:fe:cd:a2:c1:84:e5:
31:e3:d8:0b:18:6e:c9:32:c4:0b:97:3e:c2:e8:ab:
16:2f:c6:94:a9:88:46:3e:b3:81:22:96:fb:46:85:
f9:e4:fe:3c:da:b4:9c:29:4b:e6:c1:ad:f0:9d:77:
0d:92:1c:b8:91:98:7a:87:c5:2d:8f:fb:57:7d:c1:
01:42:c7:59:e7:ec:c9:d1:93:3f:fc:f7:1c:77:a3:
e6:fe:65:99:0e:b7:13:99:ee:b6:8a:f7:cc:75:d3:
49:1d:49:f2:9d:46:7b:89:fc:ff:8b:35:87:1d:5b:
ff:36:dd:57:42:07:b4:1c:5f:71:3d:5d:13:b4:10:
ed:a7:7f:f6:c1:25:13:9f:51:62:e9:78:c8:6d:cd:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0E:15:AE:50:13:3E:F9:9B:8B:8C:AE:D3:65:9D:2F:B9:E3:BE:B6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d41::/48
Signature Algorithm: sha256WithRSAEncryption
dc:97:b2:47:15:37:8b:ba:e3:7d:1e:b2:a5:7d:37:10:31:68:
75:0b:35:e1:e0:ac:54:e7:79:ea:fd:93:3e:df:78:b4:aa:59:
d8:a0:48:59:00:bb:21:0f:3d:a7:51:d0:0b:8e:23:ec:e0:99:
b7:68:8c:47:3d:d3:47:4a:2b:98:a5:31:92:3e:4b:01:fc:85:
43:0e:f0:6c:4a:4a:63:24:24:3d:ce:ed:63:00:4e:2c:89:2d:
19:bd:b6:7a:ae:68:e1:73:78:16:2e:fa:0f:c1:37:e6:b8:e5:
ea:2b:18:91:3a:e1:1b:80:b1:ad:4e:de:60:2b:cc:0c:7b:59:
49:bb:24:4e:bb:84:b8:b3:bb:79:d4:3e:5a:2c:95:85:96:87:
6f:41:5e:70:1d:8b:99:4e:69:c4:36:2b:22:1d:64:5d:ba:53:
46:41:14:49:c5:70:08:1d:54:58:4c:d7:4a:98:3a:0e:98:0b:
96:0d:f2:89:bc:a6:95:7e:3a:6d:65:61:e7:cb:e2:cf:3f:18:
70:8c:04:d3:5b:a3:1e:dc:1e:10:a5:27:b7:6d:78:1a:be:5d:
0d:70:97:af:84:7a:37:15:f6:dc:40:19:7f:ca:1b:3a:ef:8f:
0e:ea:90:f7:06:33:cd:bf:65:5b:42:b2:e5:de:ab:0d:b8:f5:
d2:58:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:13:41 2026 by rpki-client