Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213865.roa
File: AS213865.roa (raw, json)
Hash identifier: KTYhygFgFbhjXp8KYDJSQLFofB5LXoVqogFmICIe6Hg=
Subject key identifier: AC:64:E4:46:69:C9:0E:C7:DB:F5:C0:54:AB:AC:AE:99:6D:22:2C:9D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1AC25CB371B5D093A00CD2FEED0D62AA7B6BAB52
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213865.roa
Signing time: Tue 29 Sep 2026 22:09:14 +0000
ROA not before: Tue 29 Sep 2026 22:04:14 +0000
ROA not after: Tue 28 Sep 2027 22:09:14 +0000
asID: 213865
IP address blocks: 2a0f:85c1:8ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c2:5c:b3:71:b5:d0:93:a0:0c:d2:fe:ed:0d:62:aa:7b:6b:ab:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 29 22:04:14 2026 GMT
Not After : Sep 28 22:09:14 2027 GMT
Subject: CN=AC64E44669C90EC7DBF5C054ABACAE996D222C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:e0:f7:38:5a:09:a4:cc:20:25:fb:de:4d:
98:cc:5b:74:bb:25:f0:22:c9:c8:ee:d0:08:a3:84:
e1:56:b4:64:8b:45:7c:19:64:2e:1e:66:b8:39:d9:
fe:9c:77:d6:eb:df:38:68:e7:f5:27:0e:96:da:eb:
a2:e1:1b:ff:d8:9a:34:3e:72:ab:d0:87:a8:fd:17:
81:35:00:ae:61:78:1d:81:d9:c9:ce:84:62:2d:c7:
a4:59:b1:d5:73:0b:73:34:4e:2e:c2:e3:d7:fc:6c:
4f:f9:44:8a:01:91:bc:92:aa:80:10:d0:14:77:c0:
ef:d0:41:f0:3b:96:fd:68:69:38:e6:b9:05:06:f5:
bb:19:1f:a5:3f:9d:02:a0:9d:50:e0:a2:53:ca:61:
b5:90:e8:e7:a8:bc:7e:32:cd:82:af:83:3e:f0:a5:
0a:e5:52:bb:00:97:e9:64:5e:25:37:5d:d4:66:ec:
9d:cd:73:86:0e:de:3e:8b:cd:2f:06:e8:82:c7:cc:
b5:d6:2d:eb:d4:ec:ff:8a:f1:9d:04:e5:44:b6:43:
df:97:b9:8b:f9:f2:b6:77:5b:94:9f:82:d0:42:03:
c2:24:56:d9:1a:b9:56:12:d8:96:d6:6a:ef:f4:b2:
fb:d4:1f:b5:54:22:72:14:88:7e:0f:c5:ca:2a:36:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:E4:46:69:C9:0E:C7:DB:F5:C0:54:AB:AC:AE:99:6D:22:2C:9D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8ce::/48
Signature Algorithm: sha256WithRSAEncryption
00:37:c1:d4:a5:9c:1d:ef:32:a9:5b:d8:2f:db:f7:53:c2:10:
da:42:c8:ac:51:69:06:0d:f3:91:1f:ad:82:6d:c7:fe:c5:d4:
a0:b0:10:b1:ef:07:0d:de:9b:01:be:b9:c7:63:ab:ca:19:75:
a1:60:18:e4:13:29:49:dd:80:1c:13:33:ac:83:11:9e:0a:17:
e5:fc:9c:3e:03:0a:4d:e7:1e:b3:2e:49:a3:97:7d:70:7a:fb:
2f:12:3b:0d:24:07:ae:9f:2e:90:09:27:52:46:b3:27:cb:9b:
e5:1c:e0:43:4d:88:a8:8a:50:19:56:f2:09:0e:14:dd:ec:cf:
a7:29:e5:b1:ee:88:e3:a1:8a:5b:e8:87:84:ea:4d:e9:d6:50:
11:da:41:54:81:f7:09:5b:ae:5b:ee:c5:5b:20:f7:87:19:af:
da:d3:2a:50:30:81:ec:07:a8:c5:0c:a9:46:17:35:dd:74:42:
a0:69:0f:3a:56:2c:b4:5d:d7:41:42:94:eb:a6:4b:57:64:c1:
a7:3c:d0:b7:d4:dd:54:fd:7c:b8:b0:ed:f2:01:88:07:ad:31:
de:d5:52:28:c5:36:7a:c7:d5:59:fb:46:0d:ff:da:5d:75:c3:
7c:b8:67:53:67:c6:ab:96:2a:c4:fe:f6:e5:e6:2e:34:fe:c1:
f0:46:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:51:06 2026 by rpki-client