Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: nFl/iCXtyjUx0FN/hRHk6k9HlphsmmB67ZVfilVR9J0=
Subject key identifier: EE:17:41:88:36:2C:2F:54:A8:40:18:D3:7B:31:64:24:8D:A1:DA:64
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 586D28080E7D97B6449C7E518D4547FFECB5DD9F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213476.roa
Signing time: Tue 11 Aug 2026 06:52:04 +0000
ROA not before: Tue 11 Aug 2026 06:47:04 +0000
ROA not after: Tue 10 Aug 2027 06:52:04 +0000
asID: 213476
IP address blocks: 46.203.189.0/24 maxlen: 24
92.113.42.0/24 maxlen: 24
178.92.34.0/24 maxlen: 24
178.92.43.0/24 maxlen: 24
178.93.115.0/24 maxlen: 24
178.93.234.0/24 maxlen: 24
178.94.136.0/22 maxlen: 24
178.94.150.0/24 maxlen: 24
178.94.151.0/24 maxlen: 24
178.95.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6d:28:08:0e:7d:97:b6:44:9c:7e:51:8d:45:47:ff:ec:b5:dd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 11 06:47:04 2026 GMT
Not After : Aug 10 06:52:04 2027 GMT
Subject: CN=EE174188362C2F54A84018D37B3164248DA1DA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:40:a8:95:15:11:11:73:f7:d6:fd:9c:01:
94:45:e5:87:35:6d:c1:2a:26:ac:ca:f4:b7:7f:8c:
7a:8f:d5:12:1d:a7:a9:c7:29:20:a8:fc:20:63:3c:
d5:b4:15:7d:2c:75:eb:5c:4e:fb:19:67:65:f6:85:
c8:32:fd:fc:fb:24:1e:39:03:80:48:e6:e3:9f:a5:
c1:5f:cd:9d:98:3a:25:1e:d3:5f:da:dd:62:59:0c:
98:7a:db:4a:e8:21:3d:18:3b:cf:56:a8:43:97:3c:
3d:1f:0b:93:46:e3:7f:53:d7:8c:e8:ac:97:72:3c:
00:2b:ad:1d:2e:5d:d4:a4:07:80:14:e5:24:48:c5:
a2:bf:3b:e5:9e:ff:27:94:ee:d9:6c:54:7c:d3:34:
ac:d8:bf:e6:f6:a6:d6:07:cd:f4:8e:89:6f:a1:02:
0a:f7:b4:66:dc:ff:aa:19:b0:87:96:59:2b:af:29:
4f:f5:bc:20:8f:4b:db:0f:40:b6:ee:15:fc:85:09:
ed:fd:86:99:a2:e6:d1:70:ab:ec:af:cd:92:5a:ab:
a6:10:f7:14:38:4c:9c:b9:b8:27:25:14:ed:de:fa:
c4:ac:d0:7f:16:e6:ce:86:cd:64:eb:cb:2d:07:6c:
c8:f8:01:15:1e:b5:9e:30:db:e5:4d:86:8e:28:72:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:41:88:36:2C:2F:54:A8:40:18:D3:7B:31:64:24:8D:A1:DA:64
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.189.0/24
92.113.42.0/24
178.92.34.0/24
178.92.43.0/24
178.93.115.0/24
178.93.234.0/24
178.94.136.0/22
178.94.150.0/23
178.95.57.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:52:9c:d9:68:95:f6:db:05:06:fa:e6:56:b9:ca:69:b8:2d:
a8:e7:f2:c7:bd:90:bb:3c:f6:49:f9:c8:64:f9:a6:e7:6d:f2:
d3:36:b3:f3:c2:64:76:ad:2e:de:54:2d:af:28:8f:80:7b:76:
4d:a4:42:3e:ee:91:ae:e2:a2:ff:92:4d:d6:ae:9d:74:d9:61:
c9:b6:fc:27:d5:bd:c3:1d:7f:60:ab:59:50:7a:da:8b:13:91:
74:83:74:0b:c3:38:f1:6a:6f:72:af:7d:f2:40:ae:bc:12:8e:
97:3c:98:7b:ca:66:5c:ff:f3:ec:5f:61:94:e3:66:3b:90:2a:
f9:0a:6c:01:59:b1:ac:b3:a6:8b:18:ef:c0:3a:06:45:fa:9e:
68:1d:7c:8e:6a:a0:28:6b:fe:33:7f:a9:e8:3c:d4:fd:4f:22:
ae:33:63:3e:f1:61:d3:f3:83:a8:82:07:df:e4:21:6c:6f:8f:
06:14:86:08:54:3a:af:3d:05:e1:31:ad:de:73:e1:c7:9f:87:
15:f3:cc:3d:18:1e:44:d8:ef:72:0b:06:1b:6b:4b:b7:11:9a:
5c:10:0f:b5:08:e0:71:62:73:c0:ac:37:1e:c0:de:e3:22:69:
e2:e7:a4:02:3a:90:c7:95:5b:d3:8a:af:79:69:31:a9:b2:ad:
bd:0e:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 16:25:35 2026 by rpki-client