Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213840.roa
File: AS213840.roa (raw, json)
Hash identifier: sTwgMUazI/M+4FSfq66hOG6HmQIfO+7FoFnj9fBrFfU=
Subject key identifier: C6:7B:36:F0:F3:5C:6D:6C:AC:95:12:1B:32:06:47:B9:21:98:8D:D2
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6B16F403CAFCB1EB5E466519A0A9E4B43F13D47F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213840.roa
Signing time: Fri 15 May 2026 07:47:18 +0000
ROA not before: Fri 15 May 2026 07:42:18 +0000
ROA not after: Fri 14 May 2027 07:47:18 +0000
asID: 213840
IP address blocks: 2a14:7583:eff6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:16:f4:03:ca:fc:b1:eb:5e:46:65:19:a0:a9:e4:b4:3f:13:d4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 15 07:42:18 2026 GMT
Not After : May 14 07:47:18 2027 GMT
Subject: CN=C67B36F0F35C6D6CAC95121B320647B921988DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:ab:4d:33:21:a7:c0:87:18:81:10:e7:16:
4f:25:72:b2:af:08:a6:a9:4f:19:07:ee:c1:a8:d9:
78:f0:d3:1c:af:be:34:e6:fe:12:01:49:3c:c2:b9:
01:9e:fc:04:30:77:8d:c0:19:7e:92:ca:14:4c:9f:
29:d5:ae:76:5e:8d:e8:d4:1a:0a:5f:01:85:8a:00:
38:77:5d:d2:0e:60:9a:7a:70:b1:9a:69:3c:29:a8:
8c:42:05:68:6d:b3:61:45:1a:8a:32:f7:6d:e2:d2:
1d:bb:a7:08:63:be:2c:96:23:f9:ab:70:03:07:19:
8f:7e:1d:b1:a4:bf:ea:c7:dd:8e:61:78:26:67:f7:
32:34:aa:1e:ec:b5:11:cd:d3:87:cb:3f:f1:1a:df:
e1:b8:f2:0a:61:db:3f:9a:5e:32:9e:e2:6d:f6:ed:
d7:0c:69:e0:1d:da:20:6c:41:40:ff:be:64:cb:89:
20:0b:9c:44:2e:16:5a:a0:c6:b7:2f:67:01:1f:9c:
12:08:d7:ed:78:f4:6b:1f:5a:4e:df:03:3f:e7:5b:
e2:aa:c2:ec:7f:a5:8f:38:f6:c8:e8:0f:f7:0f:a7:
35:27:10:e9:85:c8:bc:50:9a:e1:e9:8c:65:47:8b:
91:90:c3:e3:00:57:a2:f9:74:f5:e2:13:d0:d0:9a:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7B:36:F0:F3:5C:6D:6C:AC:95:12:1B:32:06:47:B9:21:98:8D:D2
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:eff6::/48
Signature Algorithm: sha256WithRSAEncryption
21:e4:a1:07:07:33:00:e5:90:08:a3:72:75:ee:fe:7c:0a:ec:
2e:ab:03:04:8c:0a:77:4c:f9:0b:9f:43:c0:92:77:4f:bf:9e:
d5:78:60:5c:61:ef:6c:86:cf:47:ae:41:6b:3f:26:52:30:6c:
b9:9f:83:56:71:25:3b:00:e6:82:43:63:f3:47:d7:17:32:55:
f5:f0:95:e4:e8:2a:19:77:dc:d4:0d:90:5b:be:47:a3:3b:7c:
ef:40:2f:a0:96:98:83:f8:17:4b:fa:91:4e:dc:d3:e5:71:fe:
99:9f:d2:ca:b6:be:8e:b9:f7:0c:18:6b:04:18:8d:37:5e:a9:
66:e3:15:c7:e0:b6:d6:45:d8:22:a4:62:df:73:ee:a0:da:b2:
99:2d:17:44:9f:cd:03:86:18:bf:18:b7:49:74:2d:39:a5:c4:
97:51:5d:37:e5:cd:1a:8f:76:55:c6:4d:87:9b:1b:44:9f:e5:
d4:1f:52:79:8e:61:7b:db:87:9f:39:cf:3e:91:fd:ab:ad:f0:
15:79:b0:95:df:6b:be:85:0f:06:e0:f1:82:7e:24:60:0e:a8:
2c:3e:ed:c9:81:5f:5c:a2:67:fe:f4:e0:dc:a1:ef:14:9a:bc:
42:28:b0:c0:60:a9:72:cc:59:92:35:e0:2c:87:b7:ef:62:5f:
45:6d:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:27:09 2026 by rpki-client