Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213243.roa
File: AS213243.roa (raw, json)
Hash identifier: kUT8X3UwAeMsIX7VSIy//88cfwizQ/msp330sZT62yY=
Subject key identifier: 8E:F5:EF:DF:FC:D4:1D:86:D2:17:DB:B8:CF:87:21:4D:5E:F7:29:51
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 297F5FDBDBC9527B2C3122A479143C92DF3D91F8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213243.roa
Signing time: Sat 15 Aug 2026 03:09:03 +0000
ROA not before: Sat 15 Aug 2026 03:04:03 +0000
ROA not after: Sat 14 Aug 2027 03:09:03 +0000
asID: 213243
IP address blocks: 2a0f:85c1:ba6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7f:5f:db:db:c9:52:7b:2c:31:22:a4:79:14:3c:92:df:3d:91:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 15 03:04:03 2026 GMT
Not After : Aug 14 03:09:03 2027 GMT
Subject: CN=8EF5EFDFFCD41D86D217DBB8CF87214D5EF72951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:df:9f:c5:8f:bd:ff:b5:b3:ce:bb:de:1b:
04:f6:e7:ec:dc:89:6c:89:3c:79:a4:df:c7:1c:a0:
01:d1:c2:74:9d:cb:0d:a7:a2:32:35:59:c7:1d:e0:
b1:1d:23:ab:b3:32:e8:2c:5b:e8:78:8a:f3:0e:3b:
06:b0:23:1b:73:f2:8a:d5:da:8c:22:b4:8b:32:1e:
11:e6:e7:d2:cc:14:6c:fc:95:93:31:60:58:85:27:
77:73:97:84:40:0e:71:ad:42:b9:65:95:65:e4:ba:
e5:c6:16:c5:a5:a6:42:89:09:10:3b:67:f6:67:2b:
b8:90:35:41:f5:29:38:4f:6b:5b:4b:d0:f2:71:d1:
31:59:4d:ca:67:27:d8:ef:57:61:4f:6d:7c:c2:aa:
34:3b:7a:74:27:15:3f:c1:73:f4:39:7a:e8:c1:5b:
52:51:44:88:6e:8d:63:5a:f0:71:98:cc:bf:f6:35:
04:a7:b9:90:5a:84:86:0c:1d:2b:1b:0d:3f:97:51:
10:f3:c7:4f:ba:d2:8e:cb:e9:90:63:be:2c:ef:0b:
39:4e:17:84:ad:d3:51:d2:45:d6:68:31:34:7f:1d:
ad:ac:ee:83:dc:89:08:1c:66:f1:0d:f0:a2:0f:9a:
d4:1c:2c:7b:a0:66:f5:30:38:af:52:f3:21:6f:aa:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F5:EF:DF:FC:D4:1D:86:D2:17:DB:B8:CF:87:21:4D:5E:F7:29:51
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213243.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ba6::/48
Signature Algorithm: sha256WithRSAEncryption
3f:da:dc:e7:b4:59:93:2b:44:6f:ab:ba:27:41:05:64:0d:4c:
d0:ff:45:72:68:71:e2:4a:00:9c:e2:83:19:4e:94:ea:ee:4f:
84:cd:f3:a2:a0:cd:3f:82:12:c6:ae:82:f5:92:63:17:58:c8:
0f:c4:8e:b1:04:93:32:39:3a:e8:60:e5:dc:dc:2f:b9:9d:90:
2f:a4:ad:c0:c1:e6:29:a1:b9:a4:da:63:40:97:f9:0f:98:48:
74:f5:0b:bb:46:11:25:9a:c6:9d:c2:3a:25:29:33:ac:0c:e6:
8a:8e:e2:d4:5b:99:35:53:13:a1:07:7b:66:9c:45:5a:ca:db:
05:12:b4:f0:26:67:75:d2:25:be:9a:c9:34:fa:ce:7b:99:a9:
d5:f7:04:b1:9d:3c:5e:d3:f4:3f:e3:07:ab:5b:34:a3:f6:5a:
0b:fd:67:72:8d:51:c2:52:96:b5:c1:5c:fb:2b:1e:6d:fe:b1:
7f:03:28:aa:ba:32:b9:6f:36:dc:ce:8f:d9:70:0e:47:f8:1e:
aa:c3:f1:c1:01:6a:32:30:e4:af:5f:aa:fc:52:2b:87:03:8d:
2e:44:c2:b5:6c:90:65:58:c4:31:6f:7e:ea:cc:85:f7:30:70:
ab:ff:a5:33:60:92:0d:7e:3d:90:e3:66:7e:b7:3a:8e:7f:a1:
bc:94:d4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:19 2026 by rpki-client