Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS213427.roa
File: AS213427.roa (raw, json)
Hash identifier: 30y1htubzN4JlYpo2HC54JooIJNPXhhpB2tiFW33Ym0=
Subject key identifier: B1:C8:57:E7:D8:DB:FD:7B:F0:A6:F9:03:62:10:3F:CB:11:E9:E7:FE
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6D25B89A343569020C5A3B6E0A9A7137FE4598A6
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS213427.roa
Signing time: Wed 16 Sep 2026 07:25:22 +0000
ROA not before: Wed 16 Sep 2026 07:20:22 +0000
ROA not after: Wed 15 Sep 2027 07:25:22 +0000
asID: 213427
IP address blocks: 212.74.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:25:b8:9a:34:35:69:02:0c:5a:3b:6e:0a:9a:71:37:fe:45:98:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:22 2026 GMT
Not After : Sep 15 07:25:22 2027 GMT
Subject: CN=B1C857E7D8DBFD7BF0A6F90362103FCB11E9E7FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:e8:04:d4:ad:1e:02:fa:49:84:be:24:5b:
ad:a0:52:6a:ad:01:6f:5f:e5:9c:c2:56:c2:33:e7:
f7:f4:b2:81:9b:b4:a9:7b:1e:47:d1:1e:d4:cd:82:
4f:af:f8:f8:38:67:bd:2a:be:e4:cd:a7:8e:9c:2d:
4d:8d:51:74:9a:34:f8:05:3c:fc:03:82:52:07:cd:
13:16:ba:4e:78:cb:13:5b:29:10:8a:7c:67:3b:4f:
e4:a7:ac:d1:36:3a:21:2d:f1:dc:8d:1f:9a:31:91:
aa:e1:4c:a0:dd:a7:ed:32:53:34:d4:9f:e7:5b:4a:
44:6c:2d:bc:b6:40:41:85:48:49:57:0f:a3:cb:7c:
64:31:70:17:32:17:53:ea:fa:0c:47:c3:5a:7e:5d:
a2:4c:18:b6:7c:8b:76:b4:ad:b4:3d:a2:43:e2:c2:
4a:d7:ee:a8:c8:e0:8c:e8:83:52:c3:b1:6a:01:97:
38:cb:3f:49:7d:55:2c:39:90:94:67:c8:d0:b6:16:
bf:d4:d6:f9:74:26:4a:30:3d:fa:e4:a7:b1:ca:eb:
4e:d3:6f:5e:7f:ea:fd:7a:9b:0d:ef:8b:35:00:14:
37:02:44:a1:6c:83:c0:14:ad:b0:60:14:fb:52:79:
c4:3c:79:f6:71:e7:77:a3:d0:28:f9:4e:32:d2:72:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:57:E7:D8:DB:FD:7B:F0:A6:F9:03:62:10:3F:CB:11:E9:E7:FE
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS213427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:75:f5:c6:52:fb:77:36:d1:14:e8:23:aa:2e:15:5e:0c:cc:
0c:1e:eb:6c:21:0e:a0:f3:d8:8e:21:5e:18:71:c7:de:98:04:
ae:22:35:4e:de:82:c4:ea:35:7f:27:e7:27:bc:86:49:6b:39:
a8:18:d5:4c:ee:c0:34:6f:ee:f7:80:68:35:bf:12:a1:72:58:
f8:20:98:fd:85:9b:d1:c8:90:49:40:c6:c0:9e:1c:00:90:bb:
87:89:f9:a1:72:43:80:cf:d5:ed:61:89:86:98:17:ea:9e:64:
56:6b:16:29:4d:93:f3:30:bb:74:ce:9c:0a:9d:d5:4a:3f:8a:
9a:b9:98:7d:09:5d:e5:97:83:3b:30:de:7b:bf:f4:bb:ea:7b:
ea:a4:d6:60:98:d3:e6:5c:74:72:62:01:34:08:62:11:b6:ca:
20:db:f8:9a:e5:22:7e:74:60:2c:9c:c2:a5:aa:a7:52:2c:7a:
e0:b7:5b:ae:e6:97:f4:d7:28:71:64:d8:aa:35:12:56:e9:fb:
b1:66:82:06:bf:f9:83:19:c8:94:29:e8:62:ad:e7:89:dd:37:
4f:86:7f:ed:e5:e2:d8:fa:b7:8c:53:15:91:31:6d:53:74:33:
1e:af:3e:0f:b5:d8:98:74:41:bc:6c:f8:f7:67:28:bd:fc:eb:
a9:c0:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:05:30 2026 by rpki-client