Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213413.roa
File: AS213413.roa (raw, json)
Hash identifier: umdxy92Evjt1+XoNaHaBLhB/fYFEEqy21gOLAHtIJ8M=
Subject key identifier: 3D:12:AE:74:D5:D1:51:42:5B:44:6C:46:99:7E:EF:2F:BE:69:53:18
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 27CF2BEC5852383A2B1BB9F2790E290AA0023F07
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213413.roa
Signing time: Wed 08 Jul 2026 15:47:53 +0000
ROA not before: Wed 08 Jul 2026 15:42:53 +0000
ROA not after: Wed 07 Jul 2027 15:47:53 +0000
asID: 213413
IP address blocks: 2a14:7584:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cf:2b:ec:58:52:38:3a:2b:1b:b9:f2:79:0e:29:0a:a0:02:3f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 8 15:42:53 2026 GMT
Not After : Jul 7 15:47:53 2027 GMT
Subject: CN=3D12AE74D5D151425B446C46997EEF2FBE695318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:64:69:45:1c:60:34:ea:cf:81:d8:34:34:
1d:d5:90:de:39:c9:2f:91:5c:91:8f:c7:b9:8d:fc:
87:77:b5:0a:07:c7:dd:b8:4d:bf:be:0a:5c:ea:e3:
61:66:74:61:37:60:ff:8f:5c:22:60:cf:5e:f3:23:
8e:9f:d9:ef:d0:55:b3:56:34:dc:5b:cd:e4:28:c1:
1a:eb:af:ca:00:7f:ed:1f:c3:b8:9e:d7:68:2c:90:
5f:bd:da:37:2b:18:67:f9:c5:67:71:d2:f3:93:78:
ca:d1:03:cf:cb:9b:73:ce:dd:92:87:b7:61:5c:54:
d0:d2:bc:98:9f:25:80:59:8b:c9:98:91:b1:8a:72:
73:b0:4f:b2:da:0a:20:13:c2:dd:c9:9d:35:46:ed:
ff:22:2d:bf:9a:7c:7a:42:9c:9a:82:42:f7:fa:30:
82:f9:b0:f4:06:7e:4d:4c:8c:2b:0d:ad:a3:9c:41:
48:7c:d5:53:f5:e7:b0:25:52:64:6e:64:8f:87:3a:
99:c0:fe:10:f6:4d:ef:eb:be:dc:ae:02:d3:ab:f2:
ff:8b:2b:0a:60:f0:d7:69:e3:da:43:84:df:d9:dd:
28:65:e4:42:73:ac:34:5b:d8:c3:10:69:96:0c:2b:
98:f8:98:86:ae:1b:51:76:95:39:ec:33:3f:99:f2:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:AE:74:D5:D1:51:42:5B:44:6C:46:99:7E:EF:2F:BE:69:53:18
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:2000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:e7:c6:3b:80:1f:f4:ea:1b:36:c6:78:15:c5:5a:74:2f:fe:
a9:7c:58:ed:24:1f:30:be:d8:8d:ae:34:88:46:cc:18:ec:50:
b8:75:66:bb:53:a1:95:6b:5c:06:fc:75:e9:a0:a2:d7:e9:9a:
dc:da:b5:ee:cc:90:14:91:9b:9e:d2:40:58:f3:35:80:12:91:
f7:49:15:4d:79:b1:16:d8:eb:0e:10:85:c4:31:b9:a5:6f:d4:
32:30:bf:d7:73:05:3b:4d:d3:13:80:d9:9f:62:9a:b0:cf:09:
18:67:09:cd:9c:5b:8b:e0:a7:c6:16:c0:d4:47:b8:00:26:54:
72:21:dc:a2:eb:3e:47:f5:75:25:eb:7d:c0:e4:32:a9:61:93:
47:b2:0e:22:a3:2a:d2:cc:03:f8:db:a2:4d:4d:a0:4a:c9:1b:
46:6a:ba:33:e3:3f:c0:28:71:eb:f2:ca:82:08:b4:1f:1f:78:
3e:dd:24:99:eb:3c:17:34:d5:ec:36:81:e8:d5:36:b2:ca:40:
83:00:e9:54:58:3f:b3:42:4f:a8:cb:41:39:b4:f0:ac:ec:d4:
c5:05:ef:74:78:66:0c:8a:7b:c9:c5:d8:ea:53:cd:fc:27:a6:
80:8f:09:93:49:fd:ec:1d:86:fb:ac:39:f6:91:de:6f:9f:bb:
a2:f2:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:29:06 2026 by rpki-client