Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213711.roa
File: AS213711.roa (raw, json)
Hash identifier: FMfTAPqzLdOIUqpLxMeWd9HaTcLh/Cwg9iuIxGgQlS4=
Subject key identifier: FD:43:1B:04:08:38:D3:FC:3A:4D:CA:CC:7A:36:BA:59:42:95:94:60
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3EA3B35A1837A8B6B34F3CA363DA98C19322885C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213711.roa
Signing time: Thu 23 Jul 2026 10:30:23 +0000
ROA not before: Thu 23 Jul 2026 10:25:23 +0000
ROA not after: Thu 22 Jul 2027 10:30:23 +0000
asID: 213711
IP address blocks: 178.92.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a3:b3:5a:18:37:a8:b6:b3:4f:3c:a3:63:da:98:c1:93:22:88:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 23 10:25:23 2026 GMT
Not After : Jul 22 10:30:23 2027 GMT
Subject: CN=FD431B040838D3FC3A4DCACC7A36BA5942959460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:3c:1d:8b:ef:98:ca:21:9a:c2:5f:c1:20:
fa:00:24:35:0e:aa:b5:82:39:73:d1:d6:c8:87:db:
c2:7d:d3:79:d5:fe:39:ef:e5:b7:0e:17:ad:ee:89:
4b:d4:39:3c:ee:86:a6:8b:bf:16:96:19:cf:62:69:
85:4e:9d:58:9a:3f:37:b4:f8:73:2c:44:ed:41:f0:
e6:af:cd:13:2d:fc:09:f8:91:48:e3:34:35:a6:19:
2b:dc:89:7b:70:54:9d:40:5f:9f:2a:fe:d5:b9:45:
61:42:c8:a8:e7:9b:08:c0:d7:f9:54:15:f1:a5:7b:
c8:95:14:00:8a:fc:df:5e:8e:83:6d:ff:76:58:70:
77:3c:51:15:d6:e6:c7:24:49:ab:de:bd:e2:76:96:
a1:84:5d:01:74:9f:7a:a2:1e:72:ff:27:4b:b2:eb:
51:ee:2a:f5:72:a7:3c:e0:e7:38:67:3a:db:d9:b4:
b4:9d:dd:6b:3d:64:29:62:34:8e:2d:f0:97:ec:64:
da:d8:50:01:eb:a4:32:41:92:7f:50:63:2a:3b:8c:
8a:6a:dd:63:db:96:5d:5c:8a:b4:89:77:45:8f:33:
df:60:40:48:ba:0a:7a:56:2e:64:bc:9a:e8:9e:6e:
86:62:b8:6d:cd:ba:0b:2f:60:9b:04:44:0d:29:28:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:43:1B:04:08:38:D3:FC:3A:4D:CA:CC:7A:36:BA:59:42:95:94:60
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.121.0/24
Signature Algorithm: sha256WithRSAEncryption
72:03:f7:66:fc:63:0b:99:14:e7:15:2c:b3:08:5a:29:a0:be:
b2:c0:28:f5:e7:7e:a6:7b:ad:b3:ad:3c:33:32:40:34:c3:53:
06:d8:cb:cd:be:f2:60:83:8b:8c:c8:f0:d0:35:19:81:0f:99:
d7:dc:34:84:c9:09:55:07:1b:f8:1f:e5:e5:4a:a6:5e:6f:dd:
5b:29:1d:6a:b1:fb:12:e9:ae:86:df:7c:c1:25:c3:a7:ae:1b:
f2:95:f5:52:36:52:d9:63:8a:64:07:12:ae:9b:00:cf:ac:c2:
64:94:ff:13:2e:cf:bb:52:0c:11:d7:e9:dd:94:af:1b:20:93:
67:e8:43:0d:85:c6:d3:f0:e3:9b:3d:b4:22:af:cb:49:ab:03:
5b:09:d5:fe:48:c6:17:5b:9d:52:7f:e3:63:20:cd:46:c7:32:
e4:4f:93:2f:80:b9:87:f1:09:a3:de:91:79:10:bd:69:33:b8:
73:50:5f:57:f8:ff:42:3f:5a:b8:50:1d:f3:1b:6f:04:e6:3e:
c7:ca:93:e5:8e:34:81:f5:cc:42:bf:ac:32:d4:8b:a4:d7:33:
6c:90:8f:3c:2c:ad:b1:e2:d0:17:08:63:20:15:e0:ff:92:a6:
ec:84:79:d9:b5:8a:92:05:6d:7b:84:a8:ee:f3:26:04:b5:d1:
82:b0:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:59 2026 by rpki-client