Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213467.roa
File: AS213467.roa (raw, json)
Hash identifier: ZqJT8MBg/tJn7OxxFzdrcePfjY61NKTuaVaMCs4sLmY=
Subject key identifier: 3B:DA:4B:01:0D:66:FB:1D:F5:90:9D:52:E1:12:3E:5B:CD:BE:54:95
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 096B644F0F0FA06F68B2695F1E9E3544E697D5E2
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213467.roa
Signing time: Wed 04 Nov 2026 20:32:55 +0000
ROA not before: Wed 04 Nov 2026 20:27:55 +0000
ROA not after: Wed 03 Nov 2027 20:32:55 +0000
asID: 213467
IP address blocks: 2a0e:8f02:2020::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6b:64:4f:0f:0f:a0:6f:68:b2:69:5f:1e:9e:35:44:e6:97:d5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:55 2026 GMT
Not After : Nov 3 20:32:55 2027 GMT
Subject: CN=3BDA4B010D66FB1DF5909D52E1123E5BCDBE5495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:8e:f4:06:7f:15:84:45:38:0e:4a:58:fa:
5d:76:10:35:a7:9f:fa:d7:3d:d3:93:7e:8c:6a:07:
15:6d:af:6b:10:3c:d0:e5:9a:28:e8:3e:84:b2:e2:
0a:1b:df:e8:5c:22:74:a1:2e:9b:2e:90:8f:df:5a:
3c:17:d0:82:5d:7a:12:00:04:3d:58:c4:fc:44:16:
8e:0f:da:d0:f5:0a:ae:b2:62:9e:77:d6:8b:ae:3c:
cb:02:85:ff:c2:7f:b2:b1:dd:e1:f4:a9:19:f7:b6:
4c:bd:05:a0:3c:f4:b9:f2:45:ea:d6:0a:31:ff:d1:
79:43:a1:51:11:49:42:50:39:6f:e2:2b:a6:97:b3:
09:4a:bb:5c:70:d0:41:1d:31:00:3e:07:d2:de:42:
e4:74:16:7e:2d:b9:64:68:8e:84:db:ed:06:ef:13:
0e:47:8e:97:d1:e1:a4:28:c7:0d:19:0b:e9:6a:38:
a1:78:7d:b6:c1:1f:4c:75:31:c4:5b:8d:34:15:69:
46:7c:29:0c:df:9e:32:71:85:7d:6b:3e:d2:78:ff:
81:d2:ef:df:5f:c6:1b:b5:a8:6b:27:f2:b4:a9:67:
f2:2b:9b:3f:ce:aa:d5:d0:98:27:84:c7:f2:2f:8d:
5a:2f:f2:b8:c0:f6:01:36:78:43:cf:8a:4b:45:60:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:4B:01:0D:66:FB:1D:F5:90:9D:52:E1:12:3E:5B:CD:BE:54:95
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213467.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2020::/44
Signature Algorithm: sha256WithRSAEncryption
5c:d2:5e:ca:7b:64:21:1a:44:66:ed:11:d9:c8:58:7e:6c:be:
ed:ff:d7:68:c7:ca:04:08:15:84:0a:5e:2e:cf:1e:56:68:5a:
cb:05:97:51:08:a0:3e:32:f7:d9:95:cc:b7:e5:e7:8e:88:46:
4c:cb:71:54:9b:09:f5:b3:65:c1:8b:d2:fe:62:0d:92:5c:93:
3c:20:44:17:93:6e:5f:fc:5e:40:a0:50:1a:aa:33:17:56:7e:
10:3a:2a:59:3b:98:df:5a:7e:4c:96:78:f5:d4:df:06:f9:4d:
ed:1e:2c:38:66:d7:9e:71:0d:4e:4d:2e:8d:0b:ae:8e:28:6d:
3d:3c:dc:5a:63:25:60:7c:83:4b:11:3b:c8:b3:a9:35:36:ee:
a6:b8:30:ae:9a:0f:25:45:d5:e4:8a:1f:1f:59:6e:74:70:2c:
65:e3:40:7c:b5:0b:4b:2f:d2:15:ac:ed:86:a1:55:70:9d:d3:
92:f6:49:74:bd:18:c3:2b:0c:42:ce:a9:70:8c:3c:da:d5:1f:
f5:ff:ed:d2:e8:2d:c6:13:84:6c:da:14:dc:35:29:63:f3:48:
8f:c1:08:02:a9:94:fc:6d:a7:72:3b:6c:38:b9:e2:ba:bc:0b:
57:fb:f4:d3:87:71:f6:44:46:93:4e:e3:3d:8c:cc:8f:3d:94:
f5:7c:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:07 2026 by rpki-client