Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213605.roa
File: AS213605.roa (raw, json)
Hash identifier: kbU7KEKGFjp1lr7CpkKIB+5BhXsVTio3wRkixt/y5bw=
Subject key identifier: 0A:99:D8:88:B1:BF:F6:7F:C3:C7:38:84:AA:22:CA:18:82:4D:33:C4
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7C06D77B0933894232AFC3C8D19859504C68CF6E
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213605.roa
Signing time: Tue 19 May 2026 03:16:04 +0000
ROA not before: Tue 19 May 2026 03:11:04 +0000
ROA not after: Tue 18 May 2027 03:16:04 +0000
asID: 213605
IP address blocks: 2a14:7581:3100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:06:d7:7b:09:33:89:42:32:af:c3:c8:d1:98:59:50:4c:68:cf:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 19 03:11:04 2026 GMT
Not After : May 18 03:16:04 2027 GMT
Subject: CN=0A99D888B1BFF67FC3C73884AA22CA18824D33C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:06:34:00:0e:42:d4:77:61:31:1e:4d:2e:
90:61:e1:dc:17:69:f2:93:d8:10:a7:a8:e5:10:3f:
8e:c7:66:7c:c2:14:32:89:d3:da:91:cf:1d:65:54:
3f:a9:d5:5c:1d:24:53:b3:0d:e8:2e:f3:47:a9:04:
3a:49:a6:87:50:2b:a7:1c:26:c9:fe:8d:1f:c2:fa:
1e:1f:9a:73:43:ab:ea:43:7e:e4:6b:b0:d8:b3:d0:
c5:f0:6e:12:97:87:88:07:b7:1d:43:e6:93:38:d6:
99:d0:c5:bf:cb:a9:98:16:a1:98:21:6c:88:48:f2:
56:30:09:99:97:b6:20:27:dd:f1:1c:01:9e:a0:7c:
ce:93:e8:f7:fc:52:f4:0f:90:48:f6:8b:7b:8d:d8:
b7:10:49:5b:7e:2a:9f:9b:cc:2a:48:7c:76:ac:83:
9f:b2:52:c1:f5:35:59:95:48:7d:31:0d:c6:b7:d6:
7b:4b:ad:d3:11:7b:f6:68:9f:36:45:d5:0b:54:65:
61:d0:ec:c5:41:17:1c:33:c7:11:92:b3:2e:d3:80:
26:cf:b6:ab:60:fc:76:c1:d5:c6:c0:08:e7:14:48:
6e:ae:2e:d9:25:9f:49:00:78:f6:bd:d9:e0:f0:b6:
de:b8:ba:73:c9:1c:d6:42:a7:8b:ea:3c:67:0a:19:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:99:D8:88:B1:BF:F6:7F:C3:C7:38:84:AA:22:CA:18:82:4D:33:C4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3100::/40
Signature Algorithm: sha256WithRSAEncryption
6e:39:70:5b:eb:c6:b4:3d:7f:2e:a9:39:d4:ec:fd:29:27:0d:
81:e4:bd:ca:af:40:c4:61:d1:ba:47:f3:e3:60:98:11:a9:c5:
96:f2:4e:80:fd:ce:b2:46:93:f1:b8:46:cd:bb:1e:a5:15:10:
75:4f:76:15:9e:5e:c1:cc:41:72:df:c6:be:4f:eb:ff:91:cb:
ca:d7:d2:eb:c9:6e:5a:8c:43:c8:1c:ce:4a:8d:7d:cd:c9:3f:
99:c6:61:fe:87:eb:23:c5:31:78:0f:3d:9e:36:62:21:cf:3f:
9f:d6:1c:8e:a9:dd:4a:3a:4b:3a:26:c1:51:5c:82:7f:75:d5:
6e:e8:df:37:31:74:1e:fd:a1:45:d3:8f:22:44:a5:ce:c5:2c:
3c:ed:fe:66:46:67:c6:9a:d6:cf:ff:29:8c:13:a6:c5:4a:e9:
09:0e:03:a0:e2:b8:1d:b3:ef:95:7b:95:f7:f8:03:7f:a3:33:
3d:15:18:9a:83:ef:73:d7:86:ea:f2:84:95:6d:97:ad:85:e4:
b8:d3:dc:62:55:ab:6d:eb:60:33:bb:c2:7c:01:39:72:e3:3e:
8c:63:2d:43:df:2f:df:1a:93:90:1a:01:8b:72:36:0a:73:d7:
d7:bc:35:70:89:6e:de:f2:81:a6:4d:b1:73:9c:22:c0:93:a8:
22:70:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:30:04 2026 by rpki-client