Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213326.roa
File: AS213326.roa (raw, json)
Hash identifier: 4Ciza4F2vKsr5kd5utwkcGoUA95G936+LvXdLzkPRoM=
Subject key identifier: A9:BB:87:A7:E9:A4:B3:0C:27:44:C0:6B:06:73:AB:A6:0D:AA:6D:33
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 038CA55AA7EB21BAF3C041ED2C349531B6498817
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213326.roa
Signing time: Wed 04 Nov 2026 20:32:55 +0000
ROA not before: Wed 04 Nov 2026 20:27:55 +0000
ROA not after: Wed 03 Nov 2027 20:32:55 +0000
asID: 213326
IP address blocks: 2a0e:8f02:2110::/44 maxlen: 48
2a0e:8f02:f01b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8c:a5:5a:a7:eb:21:ba:f3:c0:41:ed:2c:34:95:31:b6:49:88:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:55 2026 GMT
Not After : Nov 3 20:32:55 2027 GMT
Subject: CN=A9BB87A7E9A4B30C2744C06B0673ABA60DAA6D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:48:0e:cb:0d:62:78:bf:2b:51:c5:46:3b:
a8:35:b9:08:14:7d:fd:75:a2:ea:64:a2:e3:e9:e6:
84:eb:05:eb:34:0e:3b:17:e7:b4:19:4e:30:9c:cc:
d6:cb:8d:ff:70:dd:a7:d3:f3:ef:6c:8b:44:d0:e1:
13:8b:4d:89:ac:58:88:a1:7a:1f:50:72:56:e8:59:
f9:07:9e:e6:80:77:f4:b3:ca:39:14:67:66:4a:f3:
46:60:47:f8:b6:da:af:b7:d6:c0:40:df:cd:08:75:
de:ea:3d:65:73:87:07:ff:74:b9:50:27:4c:cb:b1:
a4:06:66:5d:80:81:1d:c0:34:aa:c7:c4:bf:e6:69:
f4:fd:c8:55:ca:7b:03:b6:bb:db:d1:c5:ef:35:e9:
dc:fd:67:99:2d:56:bb:de:3f:bd:f3:f3:e7:a5:77:
a8:6d:b5:47:f8:03:01:37:56:00:ba:e8:a2:bf:f5:
69:43:7c:40:4e:0f:1f:da:5a:89:85:fb:fc:c3:5f:
0a:44:75:c6:a6:bb:38:b2:bb:5e:9c:0f:cc:74:67:
81:b0:fe:04:cd:d8:4e:53:a2:06:da:14:e1:4b:59:
29:62:15:3a:41:c0:02:c8:00:7a:fb:1b:81:87:f0:
f0:ba:9c:05:fe:2e:5c:13:8a:0c:82:c7:ec:f5:e1:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BB:87:A7:E9:A4:B3:0C:27:44:C0:6B:06:73:AB:A6:0D:AA:6D:33
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2110::/44
2a0e:8f02:f01b::/48
Signature Algorithm: sha256WithRSAEncryption
67:ee:d2:9f:33:56:21:9f:bd:2c:25:c1:67:fe:54:bf:c7:2d:
4c:f3:f5:10:7e:84:05:b2:4d:51:e2:00:71:e4:7d:26:a0:12:
ae:18:ae:5d:ef:36:d7:76:5b:16:8a:0b:d3:f8:56:c7:fa:4c:
1c:dc:9f:1d:eb:9a:5e:fc:ef:6a:b2:1b:1a:4c:e4:69:40:bf:
20:ef:4c:47:d6:4a:ba:93:18:43:a8:a3:9f:57:22:2c:9f:2a:
ef:ab:9a:60:e3:0a:56:2b:19:53:fb:bf:4e:be:29:32:13:44:
49:d2:70:34:2c:81:01:3b:13:1d:d9:a1:7c:3a:14:93:00:d5:
54:d7:4e:93:86:62:bb:b2:89:92:40:0f:64:b9:85:ee:ac:7d:
88:de:6e:5c:20:48:46:88:e2:42:68:79:0d:c3:b5:0e:c9:c8:
ed:77:c6:9e:9a:87:39:57:86:72:bf:49:c6:34:0a:40:b9:fc:
35:12:41:15:f4:34:62:3b:8c:23:0b:ad:e0:14:22:1b:c6:0c:
05:d9:dc:e5:21:72:4d:66:e7:8c:4c:ee:3f:c0:99:36:8e:5c:
f8:b1:d9:af:8d:2f:6e:07:17:15:f2:58:20:de:96:a1:02:ca:
03:3f:22:2c:a0:fa:96:31:a5:14:6e:26:ab:0b:3c:cf:27:d8:
31:b9:12:13
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUA4ylWqfrIbrzwEHtLDSVMbZJiBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NTVaFw0yNzExMDMyMDMyNTVaMDMxMTAvBgNV
BAMTKEE5QkI4N0E3RTlBNEIzMEMyNzQ0QzA2QjA2NzNBQkE2MERBQTZEMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkkgOyw1ieL8rUcVGO6g1uQgU
ff11oupkouPp5oTrBes0DjsX57QZTjCczNbLjf9w3afT8+9si0TQ4ROLTYmsWIih
eh9QclboWfkHnuaAd/SzyjkUZ2ZK80ZgR/i22q+31sBA380Idd7qPWVzhwf/dLlQ
J0zLsaQGZl2AgR3ANKrHxL/mafT9yFXKewO2u9vRxe816dz9Z5ktVrveP73z8+el
d6httUf4AwE3VgC66KK/9WlDfEBODx/aWomF+/zDXwpEdcamuziyu16cD8x0Z4Gw
/gTN2E5TogbaFOFLWSliFTpBwALIAHr7G4GH8PC6nAX+LlwTigyCx+z14U9JAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUqbuHp+mkswwnRMBrBnOrpg2qbTMwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIxMzMyNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCoO
jwIhEAMHACoOjwLwGzANBgkqhkiG9w0BAQsFAAOCAQEAZ+7SnzNWIZ+9LCXBZ/5U
v8ctTPP1EH6EBbJNUeIAceR9JqASrhiuXe8213ZbFooL0/hWx/pMHNyfHeuaXvzv
arIbGkzkaUC/IO9MR9ZKupMYQ6ijn1ciLJ8q76uaYOMKVisZU/u/Tr4pMhNESdJw
NCyBATsTHdmhfDoUkwDVVNdOk4Ziu7KJkkAPZLmF7qx9iN5uXCBIRojiQmh5DcO1
DsnI7XfGnpqHOVeGcr9JxjQKQLn8NRJBFfQ0YjuMIwut4BQiG8YMBdnc5SFyTWbn
jEzuP8CZNo5c+LHZr40vbgcXFfJYIN6WoQLKAz8iLKD6ljGlFG4mqws8zyfYMbkS
Ew==
-----END CERTIFICATE-----
Generated at Sun Nov 8 05:55:27 2026 by rpki-client