Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213430.roa
File: AS213430.roa (raw, json)
Hash identifier: u3dRYKwn2OdjI3p5ep0qHpZLju9l8yV0sL24zLpRwV0=
Subject key identifier: D8:33:B0:1E:9F:1C:68:80:47:E6:73:27:6F:A5:FF:E9:BB:20:00:F5
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1319B2A73E1B0F2C9B1048C6108BD2E505E59AC2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213430.roa
Signing time: Wed 19 Aug 2026 02:57:42 +0000
ROA not before: Wed 19 Aug 2026 02:52:42 +0000
ROA not after: Wed 18 Aug 2027 02:57:42 +0000
asID: 213430
IP address blocks: 2a14:7581:9fa0::/44 maxlen: 48
2a14:7581:9fb0::/44 maxlen: 48
2a14:7581:9fc0::/44 maxlen: 48
2a14:7583:ef80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 17:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:19:b2:a7:3e:1b:0f:2c:9b:10:48:c6:10:8b:d2:e5:05:e5:9a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 19 02:52:42 2026 GMT
Not After : Aug 18 02:57:42 2027 GMT
Subject: CN=D833B01E9F1C688047E673276FA5FFE9BB2000F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:49:ed:1e:4e:73:fb:92:1b:23:1d:74:d1:
a8:38:45:93:06:5f:95:0f:0c:cf:28:15:45:c5:29:
52:38:b9:88:bd:9e:17:0a:73:1b:62:44:c2:ae:7e:
88:3e:f5:73:08:72:3a:a7:02:87:6d:ec:41:f0:27:
a7:84:a4:29:b8:af:9f:2e:26:65:13:fd:c9:fa:25:
bb:25:b0:ad:49:87:70:9b:e4:8f:af:4e:0c:f7:1c:
97:e8:08:66:bb:2a:d3:31:38:7a:03:5b:86:87:82:
c2:6c:eb:e5:1c:1d:c3:8a:be:36:72:fb:f3:b9:fe:
6a:68:3c:ed:32:54:b4:f1:19:97:b9:5d:09:17:96:
8a:f4:7f:1c:ad:c0:cd:f1:a7:9c:92:49:bc:86:53:
e0:f9:fd:41:51:30:2e:5b:ab:71:01:cb:ab:4d:d0:
52:1d:77:69:ef:c8:41:c6:eb:ff:a1:a0:ff:2b:c7:
e4:99:f9:1c:54:e0:ef:34:ee:89:c6:9f:1f:d4:7f:
7e:ea:db:e1:4b:3e:4a:bf:ba:d0:7a:b6:27:83:5b:
1a:39:73:f0:29:95:be:a5:25:65:68:9a:c7:e6:5e:
bb:7c:bd:18:ac:12:2c:01:99:2d:31:b0:02:f9:fb:
2d:5e:52:cb:a5:0b:0f:8e:ed:93:a0:99:da:0a:00:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:33:B0:1E:9F:1C:68:80:47:E6:73:27:6F:A5:FF:E9:BB:20:00:F5
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9fa0::-2a14:7581:9fcf:ffff:ffff:ffff:ffff:ffff
2a14:7583:ef80::/44
Signature Algorithm: sha256WithRSAEncryption
49:f4:e4:a8:35:36:16:f8:47:16:09:09:a3:20:7a:cf:13:83:
92:b5:ac:b2:2e:d1:e6:37:59:9d:ac:e1:5a:3f:63:54:8c:41:
47:00:9c:48:55:f3:be:52:c6:88:24:b7:f4:cb:32:66:6d:d6:
8d:e2:73:32:3d:09:ca:96:89:8e:cb:f7:89:b9:1c:05:38:dc:
fb:03:c1:26:57:63:ac:af:40:ad:1b:7b:9d:68:5a:33:06:6d:
a7:fd:88:1b:f9:21:bb:c9:13:0d:67:d6:10:fe:07:4e:e4:a7:
ae:63:2e:1b:18:21:ed:12:42:e9:89:0d:ad:c5:49:73:e2:5e:
c0:ba:06:a9:b0:f0:d2:24:0a:bc:87:c6:12:82:b2:01:e5:cc:
61:8e:03:85:46:df:6f:ff:99:1f:ea:9a:44:1d:60:58:38:de:
ec:51:1c:cc:68:ec:15:35:f7:1c:cb:24:6e:31:2b:fa:b8:f9:
5a:34:db:8f:8a:a7:a0:45:9d:61:fd:28:6f:0f:3a:39:5d:ab:
6e:dc:8e:46:1f:2b:da:30:42:9a:ce:27:2a:eb:d8:39:3c:00:
df:54:7c:5c:34:11:63:7e:db:88:b0:25:c5:be:f5:bf:3f:cc:
4e:72:15:0d:1e:f3:3e:86:0a:a8:df:ea:4c:5f:bc:0e:4c:ee:
a2:3d:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:39:11 2026 by rpki-client