Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: jJLTJv8wcVPltqFtG1hj0mZoEiyHqUkui389oXFUX5w=
Subject key identifier: BE:91:4A:25:EF:DC:99:F3:67:B7:A0:85:3A:1D:9D:6B:9B:B5:02:4E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 300182BEEFC44709F1DFBA68940B74055ED4A523
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213476.roa
Signing time: Tue 04 Aug 2026 07:55:30 +0000
ROA not before: Tue 04 Aug 2026 07:50:30 +0000
ROA not after: Tue 03 Aug 2027 07:55:30 +0000
asID: 213476
IP address blocks: 51.194.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 10:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:01:82:be:ef:c4:47:09:f1:df:ba:68:94:0b:74:05:5e:d4:a5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 4 07:50:30 2026 GMT
Not After : Aug 3 07:55:30 2027 GMT
Subject: CN=BE914A25EFDC99F367B7A0853A1D9D6B9BB5024E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:24:6d:8a:d2:d0:8a:43:8b:66:1c:1e:24:
9a:44:39:13:56:b3:f0:92:d4:56:25:97:9e:54:3a:
4d:86:42:cf:f5:1e:66:bb:ef:8d:92:78:6f:d1:ab:
1a:d2:b7:8e:87:80:35:d4:ab:0e:25:10:68:08:60:
66:c2:27:ad:0f:c0:0b:0c:22:a5:de:9d:0f:82:2d:
ef:a1:42:cf:6a:fb:dd:96:7c:47:6f:21:ef:ba:3c:
c4:a4:0e:97:50:8a:cf:ce:26:17:60:69:93:43:39:
c3:51:49:01:b7:12:0d:d7:a6:e4:92:89:94:1b:d7:
de:19:a3:34:5f:bc:ff:5b:56:43:86:6e:56:ab:8e:
6f:58:78:fc:75:a9:70:7a:85:e4:bb:c9:3c:9e:bb:
4a:83:df:06:a9:3d:79:64:2c:07:c8:89:31:19:c8:
ab:d0:92:d2:52:5f:6c:23:22:7c:e3:7e:d7:63:53:
8c:38:8d:33:f3:b9:bb:0d:22:02:42:48:de:88:0a:
04:c6:f8:14:24:fd:a8:29:2c:a9:ed:19:27:a3:b6:
e1:7a:47:6c:79:82:67:1c:0a:11:bc:de:72:fb:da:
50:4e:98:11:d3:d0:ea:48:0f:3f:f2:52:30:46:8b:
85:00:08:7f:4b:6b:84:12:18:aa:5f:d7:c4:2d:6f:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:91:4A:25:EF:DC:99:F3:67:B7:A0:85:3A:1D:9D:6B:9B:B5:02:4E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.104.0/22
Signature Algorithm: sha256WithRSAEncryption
97:85:d9:f3:68:23:ae:74:a4:40:fe:ca:2f:e1:33:ed:38:5a:
78:be:fc:d5:86:05:93:e2:00:bf:15:35:be:0e:0d:d2:4c:bb:
09:4a:5a:3b:77:1d:9f:7a:30:7c:b5:17:31:49:5b:84:b6:81:
0c:92:71:43:32:e1:94:d4:7f:44:d0:1d:00:00:e3:51:17:de:
a8:be:e8:80:90:48:36:8a:c2:26:01:a7:b8:64:44:97:33:43:
82:96:9a:76:08:39:8d:d2:49:8e:50:f8:b5:ef:27:91:20:92:
9c:6f:76:f2:9c:b7:ab:36:cd:a5:45:a1:04:4b:eb:29:b4:cb:
08:15:79:0d:c4:70:b6:bd:ff:99:2e:43:e3:45:c1:e4:6a:2d:
5c:fb:c9:91:b8:ed:b8:38:18:f4:75:3c:a6:76:55:82:79:32:
58:82:07:f6:41:78:aa:65:f7:cd:bd:41:56:ab:fc:22:1a:a9:
0d:fb:5c:5e:b2:62:7a:54:20:90:e7:3c:59:26:bb:b3:d1:61:
8a:b4:2b:cd:ca:e3:43:16:ae:6a:5a:39:a2:07:44:7b:6f:f9:
9b:7b:27:97:0f:c5:fd:da:46:bb:80:1c:1f:a3:5a:4f:e7:fa:
da:d1:ed:c2:0c:2f:65:f9:ac:d9:02:a1:11:87:f2:07:84:1f:
71:6e:b4:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMAGCvu/ERwnx37polAt0BV7UpSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MDQwNzUwMzBaFw0yNzA4MDMwNzU1MzBaMDMxMTAvBgNV
BAMTKEJFOTE0QTI1RUZEQzk5RjM2N0I3QTA4NTNBMUQ5RDZCOUJCNTAyNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDePiRtitLQikOLZhweJJpEORNW
s/CS1FYll55UOk2GQs/1Hma7742SeG/RqxrSt46HgDXUqw4lEGgIYGbCJ60PwAsM
IqXenQ+CLe+hQs9q+92WfEdvIe+6PMSkDpdQis/OJhdgaZNDOcNRSQG3Eg3XpuSS
iZQb194ZozRfvP9bVkOGblarjm9YePx1qXB6heS7yTyeu0qD3wapPXlkLAfIiTEZ
yKvQktJSX2wjInzjftdjU4w4jTPzubsNIgJCSN6ICgTG+BQk/agpLKntGSejtuF6
R2x5gmccChG83nL72lBOmBHT0OpIDz/yUjBGi4UACH9La4QSGKpf18Qtbx9DAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUvpFKJe/cmfNnt6CFOh2da5u1Ak4wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjEzNDc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCM8Jo
MA0GCSqGSIb3DQEBCwUAA4IBAQCXhdnzaCOudKRA/sov4TPtOFp4vvzVhgWT4gC/
FTW+Dg3STLsJSlo7dx2fejB8tRcxSVuEtoEMknFDMuGU1H9E0B0AAONRF96ovuiA
kEg2isImAae4ZESXM0OClpp2CDmN0kmOUPi17yeRIJKcb3bynLerNs2lRaEES+sp
tMsIFXkNxHC2vf+ZLkPjRcHkai1c+8mRuO24OBj0dTymdlWCeTJYggf2QXiqZffN
vUFWq/wiGqkN+1xesmJ6VCCQ5zxZJruz0WGKtCvNyuNDFq5qWjmiB0R7b/mbeyeX
D8X92ka7gBwfo1pP5/ra0e3CDC9l+azZAqERh/IHhB9xbrSr
-----END CERTIFICATE-----
Generated at Mon Aug 31 16:51:46 2026 by rpki-client