Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213864.roa
File: AS213864.roa (raw, json)
Hash identifier: csRSpFNBoQoFtG0p+abdZrFzzwqFknX11UcqKiS36KE=
Subject key identifier: D3:88:E0:02:63:B1:79:22:08:D3:A0:CB:43:4C:67:CE:28:AD:45:B6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0833890F941EAD538032AB7CF3CAC92083460D1F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213864.roa
Signing time: Tue 29 Sep 2026 03:09:14 +0000
ROA not before: Tue 29 Sep 2026 03:04:14 +0000
ROA not after: Tue 28 Sep 2027 03:09:14 +0000
asID: 213864
IP address blocks: 2a0f:85c1:8f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:33:89:0f:94:1e:ad:53:80:32:ab:7c:f3:ca:c9:20:83:46:0d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 29 03:04:14 2026 GMT
Not After : Sep 28 03:09:14 2027 GMT
Subject: CN=D388E00263B1792208D3A0CB434C67CE28AD45B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:0f:72:76:39:55:80:96:7f:6e:be:81:6e:
03:08:88:a7:72:25:7b:2a:41:24:61:0e:c8:39:bc:
d3:83:ed:e7:77:c5:dd:10:8d:90:0a:06:69:c6:b2:
a8:53:6b:d1:2d:59:15:fa:c7:cb:3f:86:b1:d2:b2:
17:c2:21:60:2e:b8:12:75:e7:3b:83:b5:f7:d2:13:
a7:58:95:ff:e1:57:17:20:80:14:09:6e:63:8c:d7:
d4:b7:8d:dc:f2:c7:a5:4b:4f:93:54:88:a6:9d:df:
c3:7b:f6:f0:c0:1b:6b:71:9f:b5:26:45:25:a3:2c:
58:dc:fc:ce:fa:8c:02:57:a3:6c:02:5a:47:0b:96:
5f:06:7b:2b:b9:23:d0:e8:51:7b:b1:3e:94:a9:99:
a3:83:ca:ef:84:37:6d:61:9d:56:d6:c8:fa:34:d2:
00:56:ec:3e:be:da:ba:72:ae:d1:2a:6b:c3:08:cd:
d9:39:57:06:99:90:ff:59:40:7e:dd:d5:ab:5b:af:
71:c0:44:3a:e2:d2:ba:f5:bf:52:c6:a4:63:b0:64:
ec:43:6d:93:7d:72:b6:d0:40:a5:99:c0:18:bb:08:
4a:4d:67:ac:7f:f5:c8:c0:77:c0:d7:18:ce:80:be:
82:20:4d:e5:5f:bc:da:b4:a5:cc:14:b2:c9:98:66:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:88:E0:02:63:B1:79:22:08:D3:A0:CB:43:4C:67:CE:28:AD:45:B6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8f0::/48
Signature Algorithm: sha256WithRSAEncryption
26:d8:e3:68:bf:b1:bb:af:8d:66:16:73:9d:03:06:34:23:23:
43:c5:28:29:50:21:f5:3e:45:8c:44:29:af:56:ff:ce:91:ed:
dd:3f:ac:ea:2d:6a:95:33:2d:5b:e8:dc:bc:9c:6b:59:61:ce:
5f:98:bb:99:9b:f2:a0:93:23:0e:dc:53:49:f7:bb:68:28:4d:
6b:57:d0:03:0e:a1:c7:03:79:08:ec:3e:49:1b:d8:a8:83:f4:
f3:79:99:95:b9:4f:83:86:af:c9:c6:35:71:aa:33:db:cf:22:
57:2a:d6:a0:55:91:b8:25:20:3b:b9:e1:6d:3c:db:ed:48:90:
f7:f4:71:fb:9a:ef:02:a5:4c:03:e8:86:db:ed:89:e5:78:95:
d3:9b:a1:7b:41:ac:8a:54:8f:d0:2f:b9:e9:21:8d:6e:3a:96:
1d:bf:61:1a:f8:f7:7e:b6:a6:be:19:89:c8:72:d1:99:6b:c6:
c3:5e:32:fb:a4:c8:36:e6:94:97:65:15:45:04:02:65:3f:63:
b0:e8:00:ed:4c:d5:22:fc:79:03:72:ec:e0:0f:53:e0:b2:b5:
8d:60:8d:aa:98:3a:47:5b:da:91:25:88:ac:5b:cb:49:57:d4:
50:3d:2e:e9:0e:53:d6:10:29:73:6b:c6:fb:fd:18:79:ed:78:
51:c8:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:51:25 2026 by rpki-client