Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213714.roa
File: AS213714.roa (raw, json)
Hash identifier: FbDDF2S5mkKfh5MwRKRQfUbPBp1AAgrT6zYVA3XJ6p0=
Subject key identifier: 48:D7:9A:90:F0:EB:0A:1B:CD:D3:13:32:A0:78:8F:27:1A:96:89:90
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6D3CC1C4F78F3343320E0EC385F722BEE2C0AF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213714.roa
Signing time: Tue 20 Oct 2026 01:09:20 +0000
ROA not before: Tue 20 Oct 2026 01:04:20 +0000
ROA not after: Tue 19 Oct 2027 01:09:20 +0000
asID: 213714
IP address blocks: 2a0f:85c1:b34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:3c:c1:c4:f7:8f:33:43:32:0e:0e:c3:85:f7:22:be:e2:c0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 20 01:04:20 2026 GMT
Not After : Oct 19 01:09:20 2027 GMT
Subject: CN=48D79A90F0EB0A1BCDD31332A0788F271A968990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:7e:62:dc:fb:81:4d:21:f1:73:7c:b6:3d:
6f:42:48:7e:ab:1f:69:6a:d0:ea:b1:9d:4d:1a:4f:
36:78:20:10:f8:81:61:f3:b7:fa:94:2f:cf:7f:f4:
6f:d7:d7:48:4d:70:18:3b:02:ac:12:4d:ed:4c:78:
65:5c:bd:30:39:94:32:c3:bd:20:5d:9b:57:55:72:
d2:a2:22:86:36:b5:36:e3:58:1c:a0:f1:ec:5f:dc:
fe:83:88:1d:0b:0a:3c:db:f2:c9:bf:3b:51:4e:d1:
8e:47:ab:09:5e:31:2f:9f:5a:cf:3c:5f:b6:1d:79:
19:ff:98:1b:39:4c:2f:47:66:6d:44:aa:87:9d:f5:
06:4e:ca:2b:76:f8:53:45:c2:ab:cf:49:43:bb:72:
ad:d7:f1:1b:50:f0:92:ee:0c:6e:c8:f2:f9:49:85:
f6:54:b8:96:3c:62:1a:53:53:57:cf:76:eb:ed:c8:
23:b5:5c:29:18:20:4c:68:81:bc:97:de:14:02:52:
3a:80:4d:7b:56:25:5d:13:46:bd:d3:79:dc:38:6c:
bd:70:5f:6c:52:a0:6b:1f:7c:d0:fd:f8:ee:25:31:
10:c2:25:81:40:c7:77:51:6a:28:29:00:fa:7a:1d:
93:ce:68:f0:a1:1d:f1:1f:8c:b8:ef:c2:f3:84:42:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D7:9A:90:F0:EB:0A:1B:CD:D3:13:32:A0:78:8F:27:1A:96:89:90
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213714.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b34::/48
Signature Algorithm: sha256WithRSAEncryption
4f:40:53:7f:b3:cc:3a:1e:38:56:8e:77:b9:1b:52:40:ad:f8:
66:1a:a6:ca:64:77:fd:06:b2:7e:ac:6c:86:e8:a9:2c:52:13:
30:96:54:20:bf:eb:36:88:23:af:dc:a6:e8:7b:b6:48:94:2e:
7f:cf:f0:44:44:3d:b4:b2:f8:0a:86:05:73:a4:0f:0a:23:67:
0a:49:67:0e:4e:78:5c:fa:c6:8a:ae:95:b4:39:df:06:20:5b:
d5:ce:91:90:45:a4:97:c3:bf:80:2d:b9:4d:00:c4:b6:97:f1:
78:1d:c5:14:d7:18:78:20:c4:31:05:da:1c:e4:3d:4a:f0:b8:
fb:69:b6:02:e8:1f:2e:a6:9e:0c:f5:1b:68:89:b7:98:71:be:
e6:2c:11:7e:ec:88:95:9f:41:a2:35:bc:3d:82:5f:4f:ca:65:
5b:a1:ba:57:c8:76:d1:8f:4b:68:75:75:60:27:c9:95:2b:4f:
34:b0:bc:2a:fe:a7:80:9d:97:e7:fe:63:41:a2:f2:b4:80:8e:
e6:ff:7f:9d:8f:c5:5f:8f:ee:62:2b:8d:83:c3:fc:0a:af:99:
bf:f8:13:79:fd:72:c7:05:20:34:5f:66:69:c7:5d:5f:4f:b2:
24:f2:ea:3f:ea:6e:c8:71:5e:bf:e8:e4:90:1b:01:93:7f:c1:
80:86:e6:5c
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgITbTzBxPePM0MyDg7DhfcivuLArzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhjNGNlN2Q4OTAyNDA1YmE0NTk4Zjg0YjZhNDFjMjdkNzIy
ODM0YjFjMB4XDTI2MTAyMDAxMDQyMFoXDTI3MTAxOTAxMDkyMFowMzExMC8GA1UE
AxMoNDhENzlBOTBGMEVCMEExQkNERDMxMzMyQTA3ODhGMjcxQTk2ODk5MDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMadfmLc+4FNIfFzfLY9b0JIfqsf
aWrQ6rGdTRpPNnggEPiBYfO3+pQvz3/0b9fXSE1wGDsCrBJN7Ux4ZVy9MDmUMsO9
IF2bV1Vy0qIihja1NuNYHKDx7F/c/oOIHQsKPNvyyb87UU7RjkerCV4xL59azzxf
th15Gf+YGzlML0dmbUSqh531Bk7KK3b4U0XCq89JQ7tyrdfxG1Dwku4Mbsjy+UmF
9lS4ljxiGlNTV8926+3II7VcKRggTGiBvJfeFAJSOoBNe1YlXRNGvdN53DhsvXBf
bFKgax980P347iUxEMIlgUDHd1FqKCkA+nodk85o8KEd8R+MuO/C84RCCQ8CAwEA
AaOCAg0wggIJMB0GA1UdDgQWBBRI15qQ8OsKG83TEzKgeI8nGpaJkDAfBgNVHSME
GDAWgBTEzn2JAkBbpFmPhLakHCfXIoNLHDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0
ZjQvMC9DNENFN0Q4OTAyNDA1QkE0NTk4Rjg0QjZBNDFDMjdENzIyODM0QjFDLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQveE01OWlRSkFXNlJaajRTMnBCd24xeUtE
U3h3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnN5
bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00
NzAxLThmMWYtODQyNTExMTk2NGY0LzAvQVMyMTM3MTQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqD4XB
CzQwDQYJKoZIhvcNAQELBQADggEBAE9AU3+zzDoeOFaOd7kbUkCt+GYapspkd/0G
sn6sbIboqSxSEzCWVCC/6zaII6/cpuh7tkiULn/P8EREPbSy+AqGBXOkDwojZwpJ
Zw5OeFz6xoqulbQ53wYgW9XOkZBFpJfDv4AtuU0AxLaX8XgdxRTXGHggxDEF2hzk
PUrwuPtptgLoHy6mngz1G2iJt5hxvuYsEX7siJWfQaI1vD2CX0/KZVuhulfIdtGP
S2h1dWAnyZUrTzSwvCr+p4Cdl+f+Y0Gi8rSAjub/f52PxV+P7mIrjYPD/Aqvmb/4
E3n9cscFIDRfZmnHXV9PsiTy6j/qbshxXr/o5JAbAZN/wYCG5lw=
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:32:20 2026 by rpki-client