Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213436.roa
File: AS213436.roa (raw, json)
Hash identifier: cFBjR6N9OWOePL4Yj1B/sZO9Hbdne6YPuvBZaGmLjL8=
Subject key identifier: A8:43:FD:87:54:DE:C5:81:83:AB:9F:75:17:66:05:47:4E:65:73:ED
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4394E50C5A842619778434306B8344080C6E1D3A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213436.roa
Signing time: Thu 27 Aug 2026 04:28:12 +0000
ROA not before: Thu 27 Aug 2026 04:23:12 +0000
ROA not after: Thu 26 Aug 2027 04:28:12 +0000
asID: 213436
IP address blocks: 2a14:7583:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:94:e5:0c:5a:84:26:19:77:84:34:30:6b:83:44:08:0c:6e:1d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 27 04:23:12 2026 GMT
Not After : Aug 26 04:28:12 2027 GMT
Subject: CN=A843FD8754DEC58183AB9F75176605474E6573ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:3f:18:22:44:e5:65:80:8e:88:2c:f5:59:
1c:cb:5d:5f:84:d7:31:ab:a9:39:a9:b1:76:1b:da:
40:86:fe:17:a5:90:25:ad:09:ae:3b:56:07:71:a7:
f1:1c:de:2d:22:42:bb:2c:ae:99:79:96:58:6b:ca:
a5:e6:ae:0c:c0:5e:e1:14:1c:e1:e8:20:69:97:cb:
06:54:8f:f8:0c:ee:86:04:bc:cb:da:9d:68:8e:f8:
7d:2c:39:cf:72:d2:7b:a7:44:89:87:11:d4:fa:b2:
2b:3d:4f:67:74:95:b6:7c:81:4b:cd:05:2c:54:21:
da:b9:d4:7f:90:50:ca:3f:0c:e1:bd:7f:12:86:a7:
5a:12:a0:73:ef:5f:7a:13:f1:f3:d1:59:48:86:26:
5d:58:96:fc:97:cd:76:41:90:9f:e2:a3:03:56:13:
63:71:b0:32:26:ec:69:93:87:3d:c0:5f:5b:e6:74:
69:4e:af:d7:80:5c:8d:02:f5:2c:8e:c3:ac:83:f3:
24:8c:81:57:db:5e:a3:81:0c:07:7b:94:77:ce:e0:
40:66:e5:ba:14:54:c5:3e:eb:02:18:5e:a1:cf:a2:
c9:9a:99:09:02:cf:ce:d7:bf:d8:a8:17:46:30:f4:
30:01:1e:f2:63:38:70:57:16:bc:19:ff:c1:c2:2b:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:FD:87:54:DE:C5:81:83:AB:9F:75:17:66:05:47:4E:65:73:ED
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:b000::/36
Signature Algorithm: sha256WithRSAEncryption
44:5e:9c:12:7c:d8:63:c5:ea:07:ff:bb:e9:2d:94:ca:0e:af:
99:db:1b:53:e0:a3:2e:5c:14:3f:8f:fc:49:e0:e2:6c:2b:2a:
af:0c:db:2f:31:f9:be:e5:8f:c4:e9:5b:57:c0:82:a2:1d:1a:
c2:8b:98:0b:2e:3b:5f:8f:97:bb:6a:f2:e9:84:bc:12:0d:3d:
20:26:b6:6c:06:96:b1:59:e8:0f:e4:61:a1:7a:e0:86:4b:e0:
cb:95:8a:27:7d:d9:f5:bc:df:7f:af:04:b3:ab:0e:55:9e:77:
03:e4:97:9a:6c:ba:7e:c0:4b:97:51:5a:79:03:e0:96:c0:a6:
97:be:c2:d9:70:1e:82:1b:54:47:29:c8:da:cd:b4:2e:15:e8:
c3:61:fc:1f:0b:f8:a1:96:ab:5d:f7:3e:18:88:35:14:bb:9b:
d9:e3:78:84:84:9d:97:e4:f8:c5:92:4d:5e:0f:67:76:23:54:
7b:fd:b8:80:63:e4:03:ab:60:18:18:d2:20:3f:7c:33:cc:76:
42:27:aa:a4:aa:76:0c:9b:d8:5a:1f:7f:7e:ed:07:7f:ba:be:
52:fa:50:3d:22:0e:d5:e1:17:9d:0b:8a:00:0a:14:e3:74:73:
cd:50:b7:53:3a:d1:13:cd:15:a2:a0:47:2f:7e:b1:3a:de:d6:
11:95:30:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:11:24 2026 by rpki-client