Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213618.roa
File: AS213618.roa (raw, json)
Hash identifier: DR+k/POn0qC7AruDw06fG0/kOCToUd7908z4TiKmb0c=
Subject key identifier: 2B:54:7B:EE:5F:92:D5:67:12:19:35:8D:E9:1B:D1:8B:2A:76:38:30
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 49ECDC711B73C44323509EA14CCECD39E44B6D35
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213618.roa
Signing time: Wed 01 Apr 2026 07:58:42 +0000
ROA not before: Wed 01 Apr 2026 07:53:42 +0000
ROA not after: Wed 31 Mar 2027 07:58:42 +0000
asID: 213618
IP address blocks: 140.150.232.0/24 maxlen: 24
140.150.233.0/24 maxlen: 24
150.241.139.0/24 maxlen: 24
150.241.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ec:dc:71:1b:73:c4:43:23:50:9e:a1:4c:ce:cd:39:e4:4b:6d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 07:53:42 2026 GMT
Not After : Mar 31 07:58:42 2027 GMT
Subject: CN=2B547BEE5F92D5671219358DE91BD18B2A763830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:d4:5a:be:3f:af:ed:d2:bb:a7:74:f1:26:
19:5c:f5:20:7f:f9:0f:7f:4f:fc:cf:1c:73:4e:53:
dd:e9:3f:46:28:16:42:00:10:12:42:79:2b:8a:26:
26:76:96:64:e7:bf:29:23:16:4a:77:4c:9c:70:b3:
d4:a3:09:1a:74:ef:16:c8:9f:af:14:fa:93:c9:57:
cf:e1:08:2f:23:52:1f:bb:f7:26:b5:9c:fe:11:8f:
55:bb:8e:95:a8:49:f2:3a:c2:be:37:52:99:7a:44:
16:af:df:ab:b1:23:64:7a:47:f4:83:40:be:59:bf:
86:92:d7:06:f9:a5:4a:e7:b7:78:82:2b:c0:f6:4c:
55:35:33:10:e2:e5:ef:6b:34:e3:b1:70:f5:dd:29:
12:0f:b5:5d:d2:a0:e9:73:0c:8d:99:57:f5:59:0a:
73:88:b6:fd:45:48:af:ed:d2:53:2a:7b:6c:fd:d0:
ac:9e:56:b1:da:c9:6d:ea:bf:78:ec:9d:15:e6:bd:
41:7f:4d:b9:2c:03:7d:9d:7a:67:09:9f:02:bb:9b:
93:b2:60:7e:ac:5c:c4:fa:78:f2:34:9f:e9:d5:c2:
e3:2e:83:47:05:3b:42:ea:3a:f4:b3:e6:cb:f4:3a:
00:fc:76:27:0e:67:0f:d0:5f:bb:45:85:36:b4:3b:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:54:7B:EE:5F:92:D5:67:12:19:35:8D:E9:1B:D1:8B:2A:76:38:30
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.232.0/23
150.241.139.0/24
150.241.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:46:8d:09:e3:75:70:ec:d3:72:dc:14:ec:3e:89:ea:ff:ee:
17:86:15:62:71:59:c7:53:30:da:0b:da:cd:30:c4:b4:02:d1:
92:9d:47:fb:74:ce:79:ab:8d:f2:5e:6b:bf:83:19:7d:d3:52:
25:56:5c:eb:1e:91:0a:59:66:56:b3:ca:b2:a2:54:de:97:6c:
b0:46:0f:1e:4d:78:f6:b5:c9:12:64:94:bf:4a:14:0e:d4:53:
63:26:00:e5:c3:68:6d:9f:13:86:de:f1:39:7c:f8:25:a6:7c:
de:4d:81:34:a9:a9:da:f4:c7:0c:08:d1:cf:93:5a:33:27:0d:
4b:3c:64:14:74:f9:97:50:f7:f9:fe:dd:c3:56:73:9d:fd:39:
92:ec:91:19:a7:62:ac:32:ab:ec:c6:26:71:cb:2d:8e:d4:34:
8d:4a:d8:fa:75:34:65:78:0d:b5:1d:7b:61:1d:f1:3c:b7:00:
39:1b:ef:3b:eb:d5:40:96:63:fa:dc:37:56:b2:6f:53:5c:89:
e3:de:a1:32:47:bc:d8:74:a8:5f:d1:49:4b:fc:80:eb:9b:63:
a2:e3:e0:67:d4:a3:2a:c7:44:c6:75:c4:db:4e:8d:44:0c:3b:
1f:f3:3f:f5:a2:85:d9:89:d5:6e:c5:e9:dd:e1:15:12:5f:de:
b9:65:1d:a5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUSezccRtzxEMjUJ6hTM7NOeRLbTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA0MDEwNzUzNDJaFw0yNzAzMzEwNzU4NDJaMDMxMTAvBgNV
BAMTKDJCNTQ3QkVFNUY5MkQ1NjcxMjE5MzU4REU5MUJEMThCMkE3NjM4MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXiNRavj+v7dK7p3TxJhlc9SB/
+Q9/T/zPHHNOU93pP0YoFkIAEBJCeSuKJiZ2lmTnvykjFkp3TJxws9SjCRp07xbI
n68U+pPJV8/hCC8jUh+79ya1nP4Rj1W7jpWoSfI6wr43Upl6RBav36uxI2R6R/SD
QL5Zv4aS1wb5pUrnt3iCK8D2TFU1MxDi5e9rNOOxcPXdKRIPtV3SoOlzDI2ZV/VZ
CnOItv1FSK/t0lMqe2z90KyeVrHayW3qv3jsnRXmvUF/TbksA32demcJnwK7m5Oy
YH6sXMT6ePI0n+nVwuMug0cFO0LqOvSz5sv0OgD8dicOZw/QX7tFhTa0O9D5AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUK1R77l+S1WcSGTWN6RvRiyp2ODAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEzNjE4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBjJbo
AwQAlvGLAwQAlvGuMA0GCSqGSIb3DQEBCwUAA4IBAQBtRo0J43Vw7NNy3BTsPonq
/+4XhhVicVnHUzDaC9rNMMS0AtGSnUf7dM55q43yXmu/gxl901IlVlzrHpEKWWZW
s8qyolTel2ywRg8eTXj2tckSZJS/ShQO1FNjJgDlw2htnxOG3vE5fPglpnzeTYE0
qana9McMCNHPk1ozJw1LPGQUdPmXUPf5/t3DVnOd/TmS7JEZp2KsMqvsxiZxyy2O
1DSNStj6dTRleA21HXthHfE8twA5G+8769VAlmP63DdWsm9TXInj3qEyR7zYdKhf
0UlL/IDrm2Oi4+Bn1KMqx0TGdcTbTo1EDDsf8z/1ooXZidVuxend4RUSX965ZR2l
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:11:03 2026 by rpki-client