Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213784.roa
File: AS213784.roa (raw, json)
Hash identifier: zG3OGsk5YVgxRslB+OKrU1QxzoBz8KIA++kf7iDYli8=
Subject key identifier: 59:BE:43:B0:B2:60:1B:78:05:05:49:C5:B6:56:92:5F:C1:AF:CC:C1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2F3674D2E683ABC41E5598EC1592E836D824E921
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213784.roa
Signing time: Wed 28 Oct 2026 23:10:23 +0000
ROA not before: Wed 28 Oct 2026 23:05:23 +0000
ROA not after: Wed 27 Oct 2027 23:10:23 +0000
asID: 213784
IP address blocks: 91.124.68.0/22 maxlen: 24
91.124.72.0/22 maxlen: 24
91.124.76.0/22 maxlen: 24
91.124.100.0/22 maxlen: 24
91.124.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:36:74:d2:e6:83:ab:c4:1e:55:98:ec:15:92:e8:36:d8:24:e9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 28 23:05:23 2026 GMT
Not After : Oct 27 23:10:23 2027 GMT
Subject: CN=59BE43B0B2601B78050549C5B656925FC1AFCCC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b3:36:7a:ac:c9:b2:8a:5c:60:e0:f6:44:66:
83:46:4f:0c:7f:7e:c0:2b:2d:d7:06:52:09:4f:99:
42:7c:08:85:6e:fc:b8:d0:0f:af:f2:e1:de:ed:8a:
63:13:a2:15:16:d0:9d:7b:d3:f6:3a:1d:6f:53:91:
d2:a4:3f:b5:af:99:e6:ab:c2:22:28:48:5f:8c:48:
dd:3f:d3:cf:49:f9:05:84:48:ce:32:52:f8:2e:52:
6d:3c:34:10:c1:f7:bb:70:1b:3b:fa:a2:a7:65:1b:
1e:44:11:68:53:a3:ef:c2:fa:ec:22:33:41:28:15:
26:e6:74:82:12:97:83:ae:ad:a0:ec:a5:9b:dc:25:
9a:d4:41:aa:1d:60:00:ad:0e:7a:3a:09:01:98:86:
09:fd:3d:75:04:41:7d:20:dc:53:c9:39:ce:11:4b:
f5:6d:0b:68:fe:0f:1e:04:53:73:f3:a6:47:4b:dd:
b0:24:ae:a7:b1:0f:f0:fe:c6:1e:9a:e5:96:b5:13:
c6:f5:2f:87:7a:49:43:a1:3f:c5:8d:03:fe:5d:84:
89:21:c2:87:7c:55:27:16:7f:13:9e:6b:34:10:c3:
42:4d:46:69:d0:eb:67:ad:93:57:17:a7:45:04:f4:
65:e4:04:af:f5:e9:1e:25:27:90:97:58:3f:85:6f:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BE:43:B0:B2:60:1B:78:05:05:49:C5:B6:56:92:5F:C1:AF:CC:C1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213784.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.68.0-91.124.79.255
91.124.100.0/22
91.124.108.0/22
Signature Algorithm: sha256WithRSAEncryption
69:52:3e:74:0f:55:c8:3a:a4:bf:05:a6:76:72:86:19:5b:90:
ed:64:9a:5b:8e:55:97:0c:84:f0:36:aa:f4:3c:2f:84:01:0b:
38:b4:80:02:cf:98:74:9d:54:d1:9f:b9:05:31:cf:e8:76:c8:
2d:eb:d3:96:3c:fe:97:9e:0b:bc:33:c7:56:e2:54:db:2e:89:
5d:b0:3a:9e:fd:af:9f:e7:a2:92:bf:83:8c:cb:a5:dd:99:c9:
66:c2:03:46:eb:ff:ee:27:2a:f8:a4:af:8f:fd:43:fa:23:f0:
ce:38:2c:c0:26:4a:5e:a1:b5:24:d6:3a:52:12:8a:5c:74:58:
fd:6e:c8:6b:f3:74:c0:2f:e1:03:ca:a8:e1:8a:d2:6d:3f:22:
51:4c:80:5b:02:60:bd:10:7b:0f:06:e3:f6:f2:88:4b:77:c0:
f2:76:04:d9:49:18:8c:12:b5:83:56:a2:b0:71:e8:96:cb:28:
bd:2e:d0:2d:52:cc:9f:e2:02:9e:59:ef:9f:ff:3b:75:8c:13:
55:3f:bb:cd:ff:2f:9b:00:c1:d2:ca:56:a1:87:23:bb:ad:05:
70:27:b1:7d:fe:b5:5e:54:50:48:53:69:26:35:e1:ef:61:74:
03:72:a8:1d:a9:b9:a5:c3:89:8e:85:e1:63:4c:47:f6:b1:25:
26:57:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:56:50 2026 by rpki-client