Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213866.roa
File: AS213866.roa (raw, json)
Hash identifier: rtgIauC8dCswLbBYtaHkJak9p2VGZ1c64GstOFoAXck=
Subject key identifier: 99:2C:9C:FB:99:BE:B4:88:71:5C:3F:6D:4B:C7:4D:73:52:3F:0B:63
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 71B3FF1CE29D83EDDD479FFCD4D5ED4B585ECC27
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213866.roa
Signing time: Thu 08 Oct 2026 13:09:16 +0000
ROA not before: Thu 08 Oct 2026 13:04:16 +0000
ROA not after: Thu 07 Oct 2027 13:09:16 +0000
asID: 213866
IP address blocks: 2a0f:85c1:8f7::/48 maxlen: 48
2a0f:85c1:c17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b3:ff:1c:e2:9d:83:ed:dd:47:9f:fc:d4:d5:ed:4b:58:5e:cc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 8 13:04:16 2026 GMT
Not After : Oct 7 13:09:16 2027 GMT
Subject: CN=992C9CFB99BEB488715C3F6D4BC74D73523F0B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:0a:4d:5c:31:42:25:c0:53:db:ae:36:53:
83:b4:3f:fa:7a:a7:90:e0:5f:05:ff:b1:4c:b2:07:
7a:91:91:95:cc:04:15:b8:90:ae:f0:af:d2:b4:43:
6e:7f:7a:6a:20:da:15:78:c5:af:12:8b:37:b8:17:
2e:8d:a1:bf:0c:37:58:15:e9:97:2c:3e:0a:38:2e:
69:7f:77:32:20:5e:c3:55:17:9c:61:0e:00:65:53:
66:72:ad:7c:7a:2d:d1:23:77:1b:5a:22:89:60:a0:
0b:f7:0e:73:f9:51:97:13:4b:8f:33:18:3e:1d:7d:
35:a0:80:96:6e:77:3c:d2:fd:d7:19:22:be:d9:67:
e8:7a:92:fd:d1:62:f3:45:36:9b:29:e0:b8:a9:de:
10:96:57:bd:79:ce:d3:b8:0c:0a:8c:5e:35:1f:a9:
ab:7c:f1:54:ef:45:2e:41:c2:68:70:f7:d3:1d:4e:
22:ac:d4:1a:29:e4:91:5e:31:67:a4:90:c4:dd:0a:
79:ac:ee:ee:cd:97:42:4e:8b:d5:e0:37:18:78:1e:
d8:89:e2:a4:70:41:20:e3:e4:72:2f:7b:85:93:ee:
b6:89:8c:6a:92:12:5a:e0:c6:d7:b4:27:98:db:62:
94:73:65:59:57:e3:2e:73:42:b2:5a:cd:4b:20:e6:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2C:9C:FB:99:BE:B4:88:71:5C:3F:6D:4B:C7:4D:73:52:3F:0B:63
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8f7::/48
2a0f:85c1:c17::/48
Signature Algorithm: sha256WithRSAEncryption
92:2a:5b:53:e3:98:e8:5e:58:d9:82:e0:62:3f:5d:10:01:0c:
e1:36:f7:d2:c7:b8:5e:fe:40:09:f1:28:0d:78:4c:74:bf:21:
85:e1:0f:d7:69:64:e4:6c:09:6c:16:5d:46:55:60:18:94:b5:
cb:bd:6b:07:c1:f7:ef:13:b9:2f:f2:cb:e1:ed:31:57:6f:c0:
67:76:7a:7a:01:bc:b1:83:28:63:85:9d:68:2e:00:be:e1:91:
e5:cd:c5:8a:1f:7b:83:2e:0f:25:67:9c:9d:ff:5f:bd:20:5a:
35:84:32:a9:4e:ed:ce:cf:d4:55:70:5d:a1:8c:3c:27:70:b0:
1c:19:11:0b:8c:36:3d:d0:5e:69:94:73:c9:0d:da:48:b3:c0:
21:af:28:41:25:02:40:41:19:9b:59:8d:71:13:85:3d:0a:21:
3e:cd:bd:7e:84:97:ca:aa:c4:b6:7e:c1:a1:d4:bd:df:1b:6a:
0f:25:69:9a:07:78:2c:3c:a0:3a:1f:84:85:b6:03:82:af:1e:
9c:0c:47:82:43:61:16:3d:cf:1e:fa:09:62:e5:41:8d:45:42:
00:e6:10:f2:59:eb:8c:b5:78:26:fa:a8:3b:87:e0:fa:63:17:
db:f9:bd:03:d7:75:8f:14:ec:ca:45:86:fa:14:b3:a3:33:72:
53:33:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:32:16 2026 by rpki-client