Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213865.roa
File: AS213865.roa (raw, json)
Hash identifier: lMU3MUWTN9ZjpTe72aXTv+9viBKi8nb3m4qdZg6HnN4=
Subject key identifier: 3B:0C:AF:35:29:16:9F:3C:4E:1B:AB:E8:EA:E1:5E:8B:5F:73:E1:1D
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 17BACEB224120EB5D29D86009BA3002900D67D6C
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213865.roa
Signing time: Sat 11 Apr 2026 18:34:44 +0000
ROA not before: Sat 11 Apr 2026 18:29:44 +0000
ROA not after: Sat 10 Apr 2027 18:34:44 +0000
asID: 213865
IP address blocks: 31.40.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ba:ce:b2:24:12:0e:b5:d2:9d:86:00:9b:a3:00:29:00:d6:7d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Apr 11 18:29:44 2026 GMT
Not After : Apr 10 18:34:44 2027 GMT
Subject: CN=3B0CAF3529169F3C4E1BABE8EAE15E8B5F73E11D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:0c:ca:5c:bb:9e:d8:62:9c:b4:ab:75:e5:
58:01:1a:6e:09:32:ab:29:76:59:1b:15:65:e7:a2:
d0:36:9f:e7:b1:24:ef:d1:a1:bf:d9:95:07:ad:79:
3b:20:5c:34:88:06:bd:9b:7c:60:1b:35:6d:7a:5d:
54:8b:6d:99:7d:3c:a8:8a:82:36:88:db:70:ea:cb:
9e:70:4e:3f:76:a7:a6:8c:6a:a4:56:9d:fd:8a:e3:
2a:d5:51:cf:b6:82:e2:5d:fa:b5:e2:0f:3e:7a:1f:
1a:14:be:b9:95:75:81:dc:cd:24:c2:40:a2:6d:f2:
71:e0:2f:0e:c6:4e:28:4d:34:11:9b:40:88:bc:63:
9f:67:0a:e5:f3:75:cc:92:91:59:9e:61:fb:a0:dd:
00:b8:75:8b:73:f4:09:c7:97:90:58:87:06:29:4d:
16:58:91:4c:b0:86:fb:ce:9e:8e:1e:1a:9a:f4:4b:
9f:39:29:32:7b:c5:66:84:ae:7a:cb:94:37:68:04:
c1:2e:79:3f:e3:9e:5d:ec:05:fb:54:a1:a4:1d:88:
ed:99:83:52:0a:a7:27:4a:dc:56:ee:cf:57:93:92:
8c:0d:50:1a:5c:2b:93:40:65:25:01:11:2e:b5:99:
16:74:e8:52:13:c9:a1:8c:3e:d5:17:c0:e9:c5:9c:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:AF:35:29:16:9F:3C:4E:1B:AB:E8:EA:E1:5E:8B:5F:73:E1:1D
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.207.0/24
Signature Algorithm: sha256WithRSAEncryption
07:55:b7:10:fa:65:fd:7f:29:db:a1:c1:c1:8d:7f:75:07:7f:
4c:c9:ab:c5:c7:39:e0:51:71:4f:ce:d3:46:29:3b:cc:1a:65:
47:2f:f4:5e:6e:2f:aa:56:60:c3:93:4b:c1:3d:40:94:fc:7a:
df:37:81:e1:af:3b:e1:e9:6a:2f:5d:fc:44:b0:10:ef:97:27:
a6:fe:1f:d9:5c:37:b2:72:62:e9:88:ca:3d:d5:c1:02:d2:1a:
e6:90:2a:eb:02:60:d8:29:9e:1e:13:b4:49:1a:f1:68:6b:b2:
71:1c:27:0b:41:46:13:e3:5a:3b:e5:34:9d:14:50:47:6b:25:
4b:be:9a:74:81:74:a3:f8:cd:1a:38:fe:41:2d:49:54:11:de:
a6:61:72:d1:f5:e3:24:10:16:3a:b5:df:22:13:dc:72:90:b8:
fa:f9:bf:2d:83:dc:75:7b:1a:07:dd:bf:60:95:5a:c5:b5:3d:
0a:f9:3f:94:d5:35:6a:fa:3f:9f:f1:16:28:94:ee:f7:73:b3:
61:9a:ae:f2:77:28:d0:01:03:6f:ac:ff:ae:13:a4:cf:c7:8e:
df:02:91:c4:c1:90:d5:c9:56:75:0f:d5:d2:29:6c:fd:27:6f:
dc:5e:46:fe:b2:3d:33:c4:a7:48:6c:ee:98:d0:4d:51:86:7d:
54:24:62:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:14:17 2026 by rpki-client