Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: SFhBUEVEx4R5uUHRl4N+8ruRmGLfCuwGDGslUTdkgf8=
Subject key identifier: D5:B9:C3:72:BE:7C:AD:5D:D2:65:3B:3F:FE:59:EB:06:C6:62:71:54
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 155373FB8DD4B22A248A434EB3513EDABEB657CD
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213476.roa
Signing time: Mon 05 Oct 2026 10:51:54 +0000
ROA not before: Mon 05 Oct 2026 10:46:54 +0000
ROA not after: Mon 04 Oct 2027 10:51:54 +0000
asID: 213476
IP address blocks: 51.194.104.0/22 maxlen: 24
51.194.233.0/24 maxlen: 24
78.105.143.0/24 maxlen: 24
94.194.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:53:73:fb:8d:d4:b2:2a:24:8a:43:4e:b3:51:3e:da:be:b6:57:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 5 10:46:54 2026 GMT
Not After : Oct 4 10:51:54 2027 GMT
Subject: CN=D5B9C372BE7CAD5DD2653B3FFE59EB06C6627154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:9c:88:a9:d6:95:7a:35:bc:5d:a3:77:3e:
42:e8:95:c7:c3:b7:1a:59:c6:73:0c:25:5c:f2:96:
9c:6e:39:0b:92:53:a4:bf:a0:b6:a0:e4:04:7a:73:
f0:96:b3:a9:ef:9a:0c:85:a2:1e:b4:16:09:c5:b1:
17:c2:00:45:f8:1b:fc:f5:4c:48:ac:72:4f:f4:aa:
ad:96:50:ee:ab:0f:a9:42:cf:9d:eb:8d:0b:a5:55:
db:bf:8b:b8:46:6f:52:a2:d1:69:5e:d5:a4:87:65:
c0:61:3d:9b:bc:89:d5:ee:9d:9e:5a:dd:2c:5c:e3:
79:bc:9a:b8:dc:a4:c4:ec:be:81:e7:f4:2d:23:74:
1d:35:ec:f1:7c:d8:3d:48:24:25:d8:59:c1:95:d1:
b7:30:9f:e5:73:9c:68:68:15:c3:41:79:00:9c:9d:
74:58:0c:21:d6:6e:95:bd:dd:8d:14:d3:f4:44:e3:
b4:ab:ee:d1:ad:53:88:0d:b3:3a:2f:6f:8b:3a:ba:
04:5f:6f:7a:75:fc:6f:1c:39:50:98:76:a6:b0:77:
31:02:ee:5a:bb:df:8a:6a:a3:d9:40:f7:24:bf:5c:
c4:43:bf:9f:30:35:1f:a5:c6:75:26:a3:b3:e3:86:
b6:3e:4d:5c:5a:41:d1:69:fa:3c:6b:3d:f5:00:5c:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B9:C3:72:BE:7C:AD:5D:D2:65:3B:3F:FE:59:EB:06:C6:62:71:54
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.104.0/22
51.194.233.0/24
78.105.143.0/24
94.194.96.0/22
Signature Algorithm: sha256WithRSAEncryption
18:2f:b9:ee:7d:26:f6:af:af:f2:52:23:c8:77:c2:20:d4:61:
53:47:dc:46:28:43:5a:89:f0:1a:90:0d:0e:85:77:b4:6e:fc:
f1:7c:53:11:a5:5d:c0:03:f8:1b:a1:b5:14:dd:d1:4a:e8:5a:
e0:3e:70:40:d1:c5:c3:37:7a:9f:13:00:e1:46:8c:bd:a6:bd:
bb:75:0b:34:60:9e:1d:b5:e4:12:5f:8a:53:b8:0e:7a:5b:83:
4f:62:07:a3:62:2c:e7:d3:6e:36:d9:41:f9:02:ea:db:61:1d:
f0:6f:94:e0:4c:ae:d0:db:4a:a6:dd:45:e9:dd:d6:70:c6:7d:
07:0b:d4:59:61:4d:54:8c:35:b2:a2:7e:74:9c:55:86:f3:a2:
cc:3b:8f:78:38:8a:b1:cd:cb:70:bd:ca:a1:bb:f1:b0:8d:ff:
c6:f1:61:e8:6a:37:c4:79:ce:9f:d4:b6:7e:43:40:64:ca:ff:
85:9f:37:46:69:8a:32:67:cc:9a:74:a8:e3:b8:32:fc:c3:68:
50:9d:39:17:5f:7f:71:88:59:ef:99:01:fb:c4:45:b2:14:6e:
d5:28:42:02:ff:4a:79:26:c3:6e:7b:b7:5f:cf:90:79:58:64:
94:6d:87:46:1e:49:0f:30:51:13:9a:f1:9a:a6:81:1f:c1:0c:
43:ee:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:44:08 2026 by rpki-client