Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213876.roa
File: AS213876.roa (raw, json)
Hash identifier: SnvUFlUq8jzfOill1WEAmAxo6rjOFhr/L+aAifMHqCI=
Subject key identifier: 89:27:A5:ED:FC:6B:C6:E2:A7:FA:86:39:EE:B9:16:56:D1:48:64:1D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2C8565F9A9F2FFFBA246D4A394AF92F54BE720D2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213876.roa
Signing time: Mon 24 Aug 2026 09:01:44 +0000
ROA not before: Mon 24 Aug 2026 08:56:44 +0000
ROA not after: Mon 23 Aug 2027 09:01:44 +0000
asID: 213876
IP address blocks: 188.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:85:65:f9:a9:f2:ff:fb:a2:46:d4:a3:94:af:92:f5:4b:e7:20:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 08:56:44 2026 GMT
Not After : Aug 23 09:01:44 2027 GMT
Subject: CN=8927A5EDFC6BC6E2A7FA8639EEB91656D148641D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:a1:70:53:13:96:62:aa:79:cf:98:31:dc:
12:b0:74:36:6a:aa:0d:d7:ee:f4:2c:8e:4e:5a:09:
c7:33:ab:62:d5:ce:dd:af:30:38:af:47:68:77:e8:
07:9a:ce:0a:6d:9d:c2:1c:e8:e1:d6:27:0a:0b:3e:
08:24:af:4a:c9:8d:53:45:bd:98:84:49:d4:13:f0:
61:0f:97:ac:05:62:fa:cc:48:48:9d:78:c4:f9:92:
25:d7:b2:75:da:39:bf:7a:23:87:87:01:a2:54:1d:
82:ce:3c:6f:64:ca:51:08:d0:cc:c2:09:6e:a2:1e:
b9:9f:b7:d4:ca:7f:0c:cb:d1:28:85:a5:18:22:66:
23:fc:99:15:b1:01:f5:63:70:14:26:c0:a7:cf:03:
b1:0e:52:55:9b:e5:73:a7:e8:88:85:3c:99:9f:b8:
85:3d:d9:02:c3:27:6b:b7:21:2d:7e:ea:ec:45:26:
70:3d:e2:b7:d5:12:9b:a5:19:62:dc:f6:aa:bc:f3:
95:0d:12:41:dd:b2:85:72:54:31:ae:0d:11:82:b3:
7f:c6:c8:6b:27:d3:0b:f6:61:77:92:f6:15:8f:be:
2b:41:1b:5b:89:0b:c5:3a:c8:c7:90:17:a5:40:05:
74:1b:1e:06:f7:8f:f9:12:ee:11:41:37:a5:f0:4d:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:A5:ED:FC:6B:C6:E2:A7:FA:86:39:EE:B9:16:56:D1:48:64:1D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
03:92:87:08:5f:1b:87:8a:be:2f:94:c1:c1:f6:00:ed:15:53:
51:cc:0e:76:21:e3:2d:8e:77:ab:53:8d:28:01:23:9c:8a:32:
0f:09:a7:c4:11:ca:1c:3e:2c:20:87:16:7a:fe:c5:8d:99:d5:
b9:9a:02:3e:d3:f6:a7:e9:34:58:fb:f7:2f:99:5a:7a:50:72:
57:d3:6d:d5:8b:04:0a:bb:57:97:f1:84:06:c9:2d:41:8c:79:
19:78:ee:c3:10:95:81:92:04:51:56:b7:84:f7:00:0e:2c:20:
cd:30:46:c4:86:8b:71:79:2b:5d:a8:3d:ef:5f:f8:8c:2f:5d:
1f:d5:db:e8:16:ff:75:1f:04:77:f5:41:7b:af:12:6a:ac:ea:
58:b5:a5:3c:31:b5:c0:1b:7d:22:f3:ae:6b:77:d7:b4:ce:9f:
44:c2:46:79:46:8b:f3:ba:e6:9e:3a:01:fa:e5:45:1f:33:5b:
2f:c3:6a:9b:1e:b4:69:bf:26:88:8b:14:c0:57:0d:be:56:94:
d0:96:43:e2:ea:fe:a5:b8:52:a9:19:20:b5:0f:59:1a:cd:45:
4c:18:cd:72:23:ee:88:a6:63:00:e7:fe:f7:80:4b:a0:c3:0a:
8c:1a:b7:0b:4f:52:12:83:d1:6c:95:56:1c:75:1b:d9:82:56:
1a:eb:03:b8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIULIVl+any//uiRtSjlK+S9UvnINIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjQwODU2NDRaFw0yNzA4MjMwOTAxNDRaMDMxMTAvBgNV
BAMTKDg5MjdBNUVERkM2QkM2RTJBN0ZBODYzOUVFQjkxNjU2RDE0ODY0MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryqFwUxOWYqp5z5gx3BKwdDZq
qg3X7vQsjk5aCcczq2LVzt2vMDivR2h36AeazgptncIc6OHWJwoLPggkr0rJjVNF
vZiESdQT8GEPl6wFYvrMSEideMT5kiXXsnXaOb96I4eHAaJUHYLOPG9kylEI0MzC
CW6iHrmft9TKfwzL0SiFpRgiZiP8mRWxAfVjcBQmwKfPA7EOUlWb5XOn6IiFPJmf
uIU92QLDJ2u3IS1+6uxFJnA94rfVEpulGWLc9qq885UNEkHdsoVyVDGuDRGCs3/G
yGsn0wv2YXeS9hWPvitBG1uJC8U6yMeQF6VABXQbHgb3j/kS7hFBN6XwTX7VAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUiSel7fxrxuKn+oY57rkWVtFIZB0wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjEzODc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNwp
MA0GCSqGSIb3DQEBCwUAA4IBAQADkocIXxuHir4vlMHB9gDtFVNRzA52IeMtjner
U40oASOcijIPCafEEcocPiwghxZ6/sWNmdW5mgI+0/an6TRY+/cvmVp6UHJX023V
iwQKu1eX8YQGyS1BjHkZeO7DEJWBkgRRVreE9wAOLCDNMEbEhotxeStdqD3vX/iM
L10f1dvoFv91HwR39UF7rxJqrOpYtaU8MbXAG30i865rd9e0zp9EwkZ5Rovzuuae
OgH65UUfM1svw2qbHrRpvyaIixTAVw2+VpTQlkPi6v6luFKpGSC1D1kazUVMGM1y
I+6IpmMA5/73gEugwwqMGrcLT1ISg9FslVYcdRvZglYa6wO4
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:35 2026 by rpki-client