Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213784.roa
File: AS213784.roa (raw, json)
Hash identifier: Q6E4PVVrEXWhjpVcB7IV1JP3LEDIsosLIoSABlCmnBs=
Subject key identifier: D1:40:25:A3:D6:15:EE:E6:94:41:72:14:77:E9:D3:C8:6B:32:67:53
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5289778F4113B13DF2E420FD972C54675DCD69BB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213784.roa
Signing time: Wed 28 Oct 2026 23:18:10 +0000
ROA not before: Wed 28 Oct 2026 23:13:10 +0000
ROA not after: Wed 27 Oct 2027 23:18:10 +0000
asID: 213784
IP address blocks: 155.117.106.0/24 maxlen: 24
155.117.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:89:77:8f:41:13:b1:3d:f2:e4:20:fd:97:2c:54:67:5d:cd:69:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 28 23:13:10 2026 GMT
Not After : Oct 27 23:18:10 2027 GMT
Subject: CN=D14025A3D615EEE69441721477E9D3C86B326753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:59:76:3e:bc:b5:f6:db:88:52:22:36:c2:
f4:82:4d:60:cf:66:27:e6:f9:bc:e0:9d:68:56:19:
41:da:2d:90:a7:84:54:13:e4:62:f6:91:cf:2c:26:
8e:e8:01:0a:c6:ba:8f:b0:ab:06:48:8a:96:37:a4:
0b:91:80:a1:01:c3:dd:6d:09:91:c6:3e:37:95:e8:
d8:19:f9:bd:40:d7:90:a6:09:2a:53:38:e7:d6:16:
bb:83:88:fc:a3:47:e3:9d:61:21:46:1b:b9:eb:a2:
18:ce:40:ea:2b:83:6d:7b:07:0c:40:99:9e:9a:fa:
1a:fa:7c:9e:f5:74:05:c2:d5:d2:7a:6c:d4:2f:b7:
54:16:e0:ed:a1:84:51:1c:30:e9:6b:35:45:a3:26:
97:75:90:28:5e:c8:40:e8:de:6a:70:5b:ca:f7:f6:
73:c9:29:a6:fd:7a:9d:c8:96:0c:8e:a7:69:66:a9:
72:c2:d9:74:f2:be:87:23:35:e1:58:dd:72:6f:c7:
37:ed:aa:e8:55:8b:60:9b:5b:aa:fc:04:cc:7d:e9:
e4:a4:0a:fd:63:10:32:d8:ee:e8:88:b3:31:c0:25:
a0:7f:ac:4b:8b:48:d1:de:2c:d9:4c:79:bd:ac:4d:
d6:53:27:72:2d:bc:cc:e3:39:a8:b6:07:03:47:48:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:40:25:A3:D6:15:EE:E6:94:41:72:14:77:E9:D3:C8:6B:32:67:53
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213784.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.106.0/24
155.117.116.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2f:b2:31:88:6b:ed:f7:5d:89:2c:a1:ea:ea:76:50:36:9f:
22:5b:39:9d:8a:be:10:75:2a:72:69:e3:b3:ee:e5:1b:60:3a:
57:d3:65:2a:1e:40:fd:0d:84:ad:cc:19:1f:2a:77:d8:47:46:
bd:ce:e2:09:3c:0e:46:f0:fb:69:5e:15:e7:e8:67:fc:4c:aa:
85:08:21:b9:ec:80:22:1e:3a:3c:ce:8f:f2:62:00:09:72:5c:
f3:70:f8:75:f6:12:fb:f1:cc:a4:d1:e4:4b:eb:2f:74:fc:9d:
09:d2:95:27:2a:09:cd:ae:ea:0f:be:0f:91:d7:37:75:13:11:
29:fe:57:e8:45:6b:bd:61:d8:84:2c:74:38:5f:78:e4:14:57:
f1:21:39:55:a9:57:c6:c0:c8:6d:4e:3e:36:e5:a1:9b:48:48:
fe:bf:a9:b1:51:87:32:1d:ea:e4:4a:37:12:1e:b1:bf:d1:23:
e0:54:b0:8d:f0:59:25:24:a7:49:cf:18:a3:99:13:16:4d:43:
b5:ad:d0:81:80:47:b8:77:52:b9:fa:e8:ca:d6:6f:95:e0:fc:
b7:1e:e4:6a:6a:1a:05:de:30:18:50:00:5a:90:8d:09:d0:b2:
8a:a3:eb:f2:11:9b:37:8f:5c:cc:0d:cf:dd:5f:ea:14:2f:d5:
48:08:ff:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:57:25 2026 by rpki-client