Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213887.roa
File: AS213887.roa (raw, json)
Hash identifier: Bqp5BBonHMpcR5wXzlIH/ge25OAR7+Wg1A4ZQJ5CNl0=
Subject key identifier: F6:6A:45:5D:48:ED:7F:48:31:46:E8:B3:7F:A0:6F:C5:CD:BC:3D:FA
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6B3AD2D4303A8C242A4FBDA4996C9495E93400EE
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213887.roa
Signing time: Sat 01 Aug 2026 10:50:17 +0000
ROA not before: Sat 01 Aug 2026 10:45:17 +0000
ROA not after: Sat 31 Jul 2027 10:50:17 +0000
asID: 213887
IP address blocks: 2a14:7583:5700::/40 maxlen: 48
2a14:7583:a800::/38 maxlen: 48
2a14:7583:ac00::/38 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3a:d2:d4:30:3a:8c:24:2a:4f:bd:a4:99:6c:94:95:e9:34:00:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 1 10:45:17 2026 GMT
Not After : Jul 31 10:50:17 2027 GMT
Subject: CN=F66A455D48ED7F483146E8B37FA06FC5CDBC3DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:1b:77:e1:a3:0e:af:32:82:26:cd:97:01:
1e:bf:31:b1:34:91:86:33:41:cb:8c:f5:4d:77:af:
7a:e4:4e:d9:7f:41:7f:23:0d:3d:3b:05:ca:90:f6:
bb:5c:aa:25:9d:d4:7b:12:33:e1:d7:f6:52:5d:7c:
ac:b3:41:b3:43:1c:c9:11:67:3b:97:73:61:81:53:
28:ba:79:33:36:40:6b:5b:83:77:b9:d5:dc:84:46:
5f:48:6b:70:31:0e:25:f1:cc:94:20:0d:4f:6a:2c:
ff:9a:35:f9:9f:6e:59:98:12:fe:c2:44:4f:b5:88:
12:99:77:b8:fd:27:56:da:53:26:6e:83:70:13:d1:
c9:42:e8:94:49:ad:53:8f:46:0f:83:f7:a9:39:f6:
7b:74:dd:85:24:3e:ea:43:e9:45:1a:50:4d:75:53:
c7:b5:17:05:19:59:86:7a:85:2b:a6:58:7a:f0:8f:
b5:0b:03:14:2e:1b:f0:ae:75:fa:c9:68:c1:24:c6:
7e:c1:cc:33:b5:13:f7:ec:2c:d3:54:db:c1:ca:2f:
87:12:bd:a4:d3:7f:94:93:29:39:ac:3c:46:e3:97:
d1:87:a8:f2:56:cc:27:17:83:02:2a:70:0e:68:d0:
56:cc:c4:48:2b:9d:b6:86:7e:4e:18:96:8b:c1:d4:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6A:45:5D:48:ED:7F:48:31:46:E8:B3:7F:A0:6F:C5:CD:BC:3D:FA
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:5700::/40
2a14:7583:a800::/37
Signature Algorithm: sha256WithRSAEncryption
01:c0:eb:e8:e2:01:33:d1:8a:de:42:43:29:03:be:ea:75:6e:
f7:ef:24:9f:ae:b8:b2:46:e9:e8:d0:17:da:fe:aa:97:bd:2e:
52:20:eb:f2:46:a1:4b:6e:07:9c:f9:df:68:bc:4f:37:90:33:
cf:5c:9d:3b:49:f2:eb:ec:1e:a9:80:3c:d8:03:c1:59:4c:58:
0e:ba:64:aa:97:8b:12:45:96:74:eb:d2:a7:9c:a7:f1:aa:73:
ff:d7:df:ea:df:c8:2e:d2:f0:4c:71:d3:13:30:ea:c9:65:3b:
6d:f3:72:2f:60:f5:ff:ba:a7:29:12:3f:73:99:ba:4b:aa:c0:
2a:cb:22:4e:54:c8:1d:0a:26:e4:09:3f:1a:63:16:8a:01:74:
1e:a0:60:52:33:98:5d:81:7f:6b:b0:82:f6:5b:1a:97:c1:26:
83:ac:44:e9:f6:68:05:91:12:ec:14:85:da:be:5a:50:4b:df:
79:9d:09:aa:fa:f6:b6:26:9e:40:0c:3c:8b:15:b8:05:c8:75:
c3:3e:05:15:83:b6:c3:83:31:1c:3a:e7:3d:50:74:9f:45:d5:
45:9c:59:9a:8b:e2:e7:99:8d:e5:c0:02:8d:03:cd:4d:e0:53:
66:00:2b:82:b8:a8:75:4a:06:08:15:e9:dd:dc:ce:07:a1:71:
e0:67:ef:58
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUazrS1DA6jCQqT72kmWyUlek0AO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA4MDExMDQ1MTdaFw0yNzA3MzExMDUwMTdaMDMxMTAvBgNV
BAMTKEY2NkE0NTVENDhFRDdGNDgzMTQ2RThCMzdGQTA2RkM1Q0RCQzNERkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWYRt34aMOrzKCJs2XAR6/MbE0
kYYzQcuM9U13r3rkTtl/QX8jDT07BcqQ9rtcqiWd1HsSM+HX9lJdfKyzQbNDHMkR
ZzuXc2GBUyi6eTM2QGtbg3e51dyERl9Ia3AxDiXxzJQgDU9qLP+aNfmfblmYEv7C
RE+1iBKZd7j9J1baUyZug3AT0clC6JRJrVOPRg+D96k59nt03YUkPupD6UUaUE11
U8e1FwUZWYZ6hSumWHrwj7ULAxQuG/CudfrJaMEkxn7BzDO1E/fsLNNU28HKL4cS
vaTTf5STKTmsPEbjl9GHqPJWzCcXgwIqcA5o0FbMxEgrnbaGfk4YlovB1LqzAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU9mpFXUjtf0gxRuizf6Bvxc28PfowHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEzODg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKhR1
g1cDBgMqFHWDqDANBgkqhkiG9w0BAQsFAAOCAQEAAcDr6OIBM9GK3kJDKQO+6nVu
9+8kn664skbp6NAX2v6ql70uUiDr8kahS24HnPnfaLxPN5Azz1ydO0ny6+weqYA8
2APBWUxYDrpkqpeLEkWWdOvSp5yn8apz/9ff6t/ILtLwTHHTEzDqyWU7bfNyL2D1
/7qnKRI/c5m6S6rAKssiTlTIHQom5Ak/GmMWigF0HqBgUjOYXYF/a7CC9lsal8Em
g6xE6fZoBZES7BSF2r5aUEvfeZ0Jqvr2tiaeQAw8ixW4Bch1wz4FFYO2w4MxHDrn
PVB0n0XVRZxZmovi55mN5cACjQPNTeBTZgArgriodUoGCBXp3dzOB6Fx4GfvWA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:26:16 2026 by rpki-client