Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213896.roa
File: AS213896.roa (raw, json)
Hash identifier: koQ9A3ioc9Iw8l5KWrAeodRyHCxP9F4lTNceXMmeem4=
Subject key identifier: 20:D1:2F:BF:E0:BE:78:55:74:85:6C:85:A3:0B:2A:63:E6:13:2E:B5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 68CDE82808466FD0486F0456BE490CE04240082C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213896.roa
Signing time: Wed 12 Aug 2026 14:57:52 +0000
ROA not before: Wed 12 Aug 2026 14:52:52 +0000
ROA not after: Wed 11 Aug 2027 14:57:52 +0000
asID: 213896
IP address blocks: 87.81.80.0/20 maxlen: 24
87.81.96.0/20 maxlen: 24
94.192.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:cd:e8:28:08:46:6f:d0:48:6f:04:56:be:49:0c:e0:42:40:08:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 12 14:52:52 2026 GMT
Not After : Aug 11 14:57:52 2027 GMT
Subject: CN=20D12FBFE0BE785574856C85A30B2A63E6132EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:f7:29:bb:b9:2f:4c:05:5d:e7:8a:da:c1:
b0:71:d2:20:33:d6:d2:e4:52:ad:93:49:ed:57:a6:
fa:dc:98:0a:17:5a:2c:83:f6:70:6c:f7:d8:8b:d2:
66:a1:2d:4d:e9:42:ef:28:22:94:61:d6:22:f7:42:
5b:63:7d:c8:9d:63:d6:35:37:7c:18:97:f1:51:65:
08:59:a5:ef:93:13:e2:6f:7c:48:ce:67:bd:5c:ba:
a0:53:28:a8:85:74:e7:e0:c0:85:16:81:c6:fc:46:
38:96:a1:5d:39:8b:6d:45:bf:b8:a5:60:60:f9:b3:
1c:1d:3e:bb:a7:49:e6:2c:57:91:c4:85:19:8a:a3:
41:e9:4e:21:13:9f:9c:ee:f2:ff:c3:00:0e:23:66:
8a:8b:9b:23:e7:a2:72:f7:93:dc:32:18:f7:0c:64:
83:e3:9f:b9:1b:9c:6f:df:cc:50:1c:bb:f7:65:14:
54:ef:50:48:2f:5b:45:0b:ba:7a:28:5d:f6:c3:df:
8d:2c:18:13:4b:89:71:93:b9:63:3a:b1:52:24:fb:
50:e6:87:69:00:11:1f:f8:d6:ea:81:d4:ca:15:0a:
30:6e:57:be:8e:c2:a6:fd:c2:e0:c8:4c:1f:db:38:
30:ef:78:68:11:7d:4c:98:12:1b:95:fc:b4:b0:69:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D1:2F:BF:E0:BE:78:55:74:85:6C:85:A3:0B:2A:63:E6:13:2E:B5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.81.80.0-87.81.111.255
94.192.0.0/20
Signature Algorithm: sha256WithRSAEncryption
25:07:9e:2e:9b:b7:0c:0f:0a:66:28:32:05:db:d0:d6:28:b3:
9e:d7:76:11:e8:38:ca:7a:a3:13:9b:6b:09:3d:dc:ab:d5:fc:
da:61:c5:3c:e1:bb:e9:95:82:8d:b9:da:59:51:65:95:75:d9:
dd:13:a8:4d:95:59:b8:90:09:cf:3e:c0:a3:d5:97:83:3e:c4:
ba:7f:29:6b:e5:34:36:73:a9:76:94:8a:ec:59:3a:55:ab:80:
29:58:ae:f2:8b:de:c2:b4:65:33:f0:c2:6c:00:9d:b0:84:80:
5b:6d:ab:b5:17:10:54:e4:29:c9:83:71:bb:ea:52:3b:03:cf:
5a:5d:59:14:34:b3:46:db:d8:e4:43:f5:7d:f4:79:f3:5a:7e:
2c:08:85:3b:eb:e2:ba:11:ec:4a:b0:f0:4d:53:9f:f8:8c:e0:
b1:9c:ae:7e:88:4c:42:b9:a5:19:e1:d6:f5:5c:e7:6b:8a:59:
08:a6:94:e1:71:22:6b:35:df:1f:40:d9:0f:6c:e8:0f:e9:02:
6c:f5:a5:6e:fa:65:b5:f3:e2:21:4b:0c:4b:4c:7a:87:53:04:
79:e8:c9:26:26:82:76:5c:41:3a:ed:05:f8:2e:f9:a8:24:19:
eb:8b:09:1f:ca:4b:13:43:fa:c3:d0:42:2f:fb:a5:18:d3:53:
05:83:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:19:08 2026 by rpki-client