Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213711.roa
File: AS213711.roa (raw, json)
Hash identifier: qzpQlVptFE+bdtpwTOSZ9xJ05s4dBcVLx7GsdovEVKI=
Subject key identifier: AA:F8:A1:9F:B9:68:BE:A5:7E:15:59:09:FF:E7:7E:76:C1:86:91:C0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5298246984C18BE84F6D243779FDCE7759ACD6C6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213711.roa
Signing time: Wed 14 Oct 2026 12:05:33 +0000
ROA not before: Wed 14 Oct 2026 12:00:33 +0000
ROA not after: Wed 13 Oct 2027 12:05:33 +0000
asID: 213711
IP address blocks: 178.94.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:98:24:69:84:c1:8b:e8:4f:6d:24:37:79:fd:ce:77:59:ac:d6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 14 12:00:33 2026 GMT
Not After : Oct 13 12:05:33 2027 GMT
Subject: CN=AAF8A19FB968BEA57E155909FFE77E76C18691C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:c9:44:54:43:7d:33:c3:68:6f:a7:b4:79:
d7:dc:84:46:10:84:1e:16:c6:10:b5:a0:84:31:cc:
ea:22:13:21:bb:6f:83:10:58:70:b8:30:cb:1c:50:
7a:b4:ce:b0:01:28:23:f8:ac:07:4f:55:82:9f:91:
e7:53:39:bb:4e:e6:a3:34:ff:ef:6c:10:c0:ab:08:
2e:cb:88:3e:c8:49:e5:1f:42:20:bd:90:bb:33:8b:
f7:a1:ef:3f:f3:51:d0:3b:c9:a0:ad:87:80:e7:d7:
0d:a4:7e:74:e2:f4:2a:2c:b7:9e:97:79:0a:41:74:
7b:07:7e:4d:6a:6a:64:9b:f3:86:24:06:eb:19:7f:
02:00:42:e5:85:04:fb:dd:62:24:b6:a1:30:3a:8d:
fb:d9:77:ad:14:59:29:51:a8:5f:b9:b8:2c:72:7c:
63:86:9b:a3:4f:63:d3:cd:e8:f4:fb:77:cf:60:90:
bd:20:9e:a9:5a:81:3e:d4:e6:ed:a8:e9:53:83:e8:
5e:13:f9:3f:04:d6:a5:4f:50:11:c1:35:9c:c2:2d:
91:fc:79:f3:c7:7a:c8:bd:d8:76:96:16:dc:db:f2:
92:4c:5a:c4:25:50:f6:d7:dc:51:47:21:15:53:37:
5a:36:05:96:eb:d3:9d:fe:43:9a:9e:46:3e:5d:84:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F8:A1:9F:B9:68:BE:A5:7E:15:59:09:FF:E7:7E:76:C1:86:91:C0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.183.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8d:20:d0:ab:02:24:0c:a7:df:dc:06:58:9e:9c:3f:38:ee:
0f:0b:62:a2:51:f0:ce:37:9d:3d:15:ab:7c:cc:3e:85:a8:06:
97:63:20:22:0f:67:77:a9:bc:69:87:23:3f:1b:a0:f5:b9:a3:
3a:a1:a1:be:23:f4:76:d4:27:57:b9:2f:b4:26:37:5d:f4:3f:
3d:19:31:40:48:85:26:5b:0b:9c:e6:a2:b7:74:34:16:ca:c9:
7b:63:c4:cd:92:41:44:3f:c3:1d:ec:74:cc:03:82:e7:5e:81:
d1:cb:88:26:e3:20:1f:2e:0c:d6:d8:23:11:04:ab:25:eb:22:
45:69:44:ff:5f:af:18:1e:28:eb:80:ad:20:2f:31:ed:cf:2a:
a7:31:6e:d8:d0:6c:3d:bf:eb:7f:1a:7d:b2:ca:ba:08:b0:ef:
eb:ce:ea:1b:6d:10:f8:02:ac:06:51:8b:f9:4d:a6:98:b1:75:
06:bb:26:3a:39:9a:d9:3f:f6:eb:96:c8:38:3e:50:c9:98:c7:
51:01:1d:1d:92:90:15:95:ed:49:c7:cb:e7:cf:02:e5:68:f5:
76:48:7b:d8:fc:a6:db:5a:9e:bb:87:ef:94:54:c0:a6:2c:a3:
3a:dd:51:ef:ee:32:ca:67:d6:bc:e0:79:a5:43:ce:fa:33:d2:
38:a1:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:00:00 2026 by rpki-client