Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213607.roa
File: AS213607.roa (raw, json)
Hash identifier: /C/pWxqrtMRl7v2DrB2181yFOEe6h5Zj8IExUuwoYLQ=
Subject key identifier: 18:62:FF:EB:B9:91:1B:0E:7F:A3:B4:AF:74:30:83:60:B2:A7:64:E8
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5939A2192913FB99679F37AFECB34F93244975D5
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213607.roa
Signing time: Fri 14 Aug 2026 10:03:03 +0000
ROA not before: Fri 14 Aug 2026 09:58:03 +0000
ROA not after: Fri 13 Aug 2027 10:03:03 +0000
asID: 213607
IP address blocks: 51.194.99.0/24 maxlen: 24
51.194.117.0/24 maxlen: 24
78.105.96.0/24 maxlen: 24
94.194.32.0/20 maxlen: 24
94.194.32.0/24 maxlen: 24
94.194.33.0/24 maxlen: 24
94.194.34.0/24 maxlen: 24
94.194.35.0/24 maxlen: 24
94.194.36.0/24 maxlen: 24
94.194.37.0/24 maxlen: 24
94.194.38.0/24 maxlen: 24
94.194.39.0/24 maxlen: 24
94.194.40.0/24 maxlen: 24
94.194.41.0/24 maxlen: 24
94.194.42.0/24 maxlen: 24
94.194.43.0/24 maxlen: 24
94.194.44.0/24 maxlen: 24
94.194.45.0/24 maxlen: 24
94.194.46.0/24 maxlen: 24
94.194.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:39:a2:19:29:13:fb:99:67:9f:37:af:ec:b3:4f:93:24:49:75:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 14 09:58:03 2026 GMT
Not After : Aug 13 10:03:03 2027 GMT
Subject: CN=1862FFEBB9911B0E7FA3B4AF74308360B2A764E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:db:c9:9c:a4:f6:42:ed:39:dc:36:33:97:
c0:77:d3:fa:cb:94:5e:31:3f:01:52:0f:72:46:a4:
f7:61:05:26:32:fb:c5:a0:96:9a:9a:ff:56:72:44:
02:d5:ca:f4:64:f2:0e:42:74:c2:bc:e8:5b:55:a0:
73:d0:75:55:21:9e:82:11:29:92:fd:1c:2f:70:38:
1f:65:54:6c:a7:e0:8b:4e:d2:00:b2:c5:a0:9c:36:
9f:ad:00:ab:8f:ae:5a:e7:14:ea:26:99:c2:87:6d:
ca:34:48:28:bb:b7:79:c7:c7:fd:dd:82:8e:72:35:
a2:4b:6c:d9:3a:6a:6e:95:0e:7a:bc:4c:4c:95:73:
ce:c1:e4:6c:5d:2c:56:c5:03:0e:c0:86:5d:3b:ef:
c8:51:47:27:d8:8c:94:25:83:7a:0e:23:04:f1:40:
7b:88:db:81:48:1c:c3:d7:8c:cd:03:09:4c:0d:b4:
bf:6e:dd:a4:12:f5:8f:95:07:27:88:0c:ce:f6:29:
32:13:e7:a2:a1:a2:41:da:d3:5d:fc:be:5f:86:06:
6e:e5:32:33:6f:47:09:ce:ed:aa:0d:de:72:f5:0b:
13:80:47:11:e3:fd:19:87:0d:ce:b1:e5:da:62:1f:
cc:de:7e:f0:36:53:bf:9e:49:c3:78:d3:7d:93:8f:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:62:FF:EB:B9:91:1B:0E:7F:A3:B4:AF:74:30:83:60:B2:A7:64:E8
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.99.0/24
51.194.117.0/24
78.105.96.0/24
94.194.32.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:64:e0:15:36:05:45:7a:49:30:25:56:eb:12:f7:84:95:49:
a0:e8:c2:bb:f5:02:e3:4f:60:25:f9:10:02:93:23:cd:d6:35:
f3:3f:ca:72:d3:e3:44:36:d2:43:25:e2:c8:0a:81:44:31:17:
05:a6:7f:7a:7c:f2:fc:49:75:45:f9:10:36:ca:4e:ca:58:74:
b7:db:4a:56:f3:b7:85:4f:09:3a:11:63:e7:28:d8:64:72:f6:
d9:14:75:d2:b8:77:d9:d0:d0:46:35:3f:13:73:6f:93:db:f7:
85:0a:5d:8e:b2:ff:62:c0:10:df:ee:de:3d:51:c7:49:2e:f3:
6c:9c:a5:59:ce:03:4c:e3:f2:7a:39:f2:1d:bb:25:f6:ac:24:
f2:ac:a4:8d:bf:37:d9:ee:52:cc:24:62:a0:85:ee:16:44:c8:
cc:46:35:a7:5d:c7:ba:da:34:7c:1f:29:4f:d3:09:b4:7d:29:
41:8d:3c:f5:93:a5:08:32:92:b3:60:a9:5a:25:9b:25:0c:a4:
87:cf:df:b3:6e:01:27:f1:fc:b5:55:5b:b0:3d:c9:27:f8:6d:
01:80:c0:df:a8:9e:ee:d7:99:02:c3:a7:8c:ab:43:d5:83:fd:
33:18:11:e4:db:b2:09:c9:a4:28:eb:7e:94:e1:98:4e:4f:01:
eb:c4:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:22:59 2026 by rpki-client