Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213356.roa
File: AS213356.roa (raw, json)
Hash identifier: Qaz7wdge8FD4/1G59qz+djwGJGw/NAg/a4JvHYMZVtA=
Subject key identifier: 1A:34:97:9E:7C:D5:1D:33:0B:81:F9:E2:BE:AF:C7:25:C3:AC:EA:E8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6B2D87476E3EC84FFA1954E83792A71EC374D21E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213356.roa
Signing time: Sat 15 Aug 2026 03:09:02 +0000
ROA not before: Sat 15 Aug 2026 03:04:02 +0000
ROA not after: Sat 14 Aug 2027 03:09:02 +0000
asID: 213356
IP address blocks: 2a0f:85c1:cea::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2d:87:47:6e:3e:c8:4f:fa:19:54:e8:37:92:a7:1e:c3:74:d2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 15 03:04:02 2026 GMT
Not After : Aug 14 03:09:02 2027 GMT
Subject: CN=1A34979E7CD51D330B81F9E2BEAFC725C3ACEAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:59:6e:14:c5:18:07:da:0d:c7:17:15:28:
9d:ba:17:60:b9:23:c6:0d:92:7e:b2:a0:af:af:69:
18:02:6a:65:42:f6:03:c0:40:6a:ce:db:f7:eb:30:
c8:13:df:fd:f7:4c:b1:5e:19:23:02:d2:78:6b:07:
a8:22:75:6a:22:ba:78:71:4a:49:a4:30:23:0d:c9:
f0:f5:44:8f:a2:58:1b:0a:7d:28:02:14:68:4b:80:
2b:ad:c2:25:78:7c:19:9a:d3:d3:be:42:d6:74:d9:
a0:6a:54:b8:c9:4b:25:4d:d6:c6:4a:5e:29:a1:66:
fa:29:f3:70:b1:20:5b:8c:26:f6:82:ea:2f:9f:d2:
ec:da:a3:81:27:80:39:8e:5f:a5:2c:25:cc:f2:86:
b9:66:d8:4f:4e:66:b1:fe:5c:d7:41:50:db:3d:0b:
f6:44:4a:21:41:19:e1:f0:0e:13:52:af:0c:1d:15:
78:21:23:cb:e6:90:a9:56:60:cf:b0:89:23:82:aa:
0d:b0:a2:36:e3:18:8a:57:e7:08:5a:67:b1:ac:6b:
51:7d:62:e3:b5:7c:11:81:4f:1b:8f:f0:5f:a9:cd:
d7:9a:5a:31:56:c9:51:87:4e:be:b7:56:27:78:ac:
bb:ad:1c:e0:50:8d:28:dc:b6:bf:9d:26:ed:40:54:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:34:97:9E:7C:D5:1D:33:0B:81:F9:E2:BE:AF:C7:25:C3:AC:EA:E8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cea::/48
Signature Algorithm: sha256WithRSAEncryption
22:01:e5:18:59:9f:93:e4:7b:8b:f9:3b:c2:b4:3e:48:06:90:
59:45:45:8c:63:ac:e3:da:aa:28:51:1b:90:79:6a:94:ab:0a:
4f:92:11:11:96:45:56:31:e7:72:9d:8d:84:29:cb:b0:5b:32:
a4:bb:f1:bb:b3:10:e4:00:a1:fc:2a:96:3b:9d:76:8c:68:64:
6e:7e:a7:34:51:e6:1d:4c:49:78:09:f3:c3:cf:c7:63:de:60:
bf:56:d8:d6:78:da:25:74:a8:ba:62:9e:bc:34:d6:e5:95:c1:
4f:5f:11:72:f0:74:47:a8:91:57:b2:3d:67:b2:5a:76:6a:83:
08:43:9c:46:73:fd:95:14:6d:a8:3b:e1:f5:de:32:89:fd:59:
87:8d:1c:36:cd:fc:ad:55:90:e2:ab:6d:07:47:4b:fc:5e:15:
0b:dd:dc:33:9a:5f:86:51:b8:1d:aa:d1:b3:7c:99:f8:d3:11:
83:bf:38:34:41:38:a8:30:a4:4b:3c:82:fb:09:81:c6:d7:9e:
ba:04:ab:d6:df:1a:a8:a5:e4:90:e4:ac:75:cf:2e:e4:f6:51:
d9:86:c9:17:e3:bf:62:cf:6a:50:4f:39:dc:ec:59:8f:b8:66:
45:d0:ee:d5:65:c2:a5:7c:83:40:de:b1:61:b8:49:31:36:ab:
b6:92:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:15 2026 by rpki-client