Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213655.roa
File: AS213655.roa (raw, json)
Hash identifier: JFBBPbzRO/xTDxBp+7ql9WXFpFUJsNU2EMJ7gUo2phQ=
Subject key identifier: 96:76:1C:70:AD:86:D2:08:BC:2B:F9:77:1A:ED:A7:78:DA:91:66:50
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 01D20CE3E4D6030FAF5E4D84EF71D5D03D7560C9
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213655.roa
Signing time: Wed 04 Nov 2026 20:32:45 +0000
ROA not before: Wed 04 Nov 2026 20:27:45 +0000
ROA not after: Wed 03 Nov 2027 20:32:45 +0000
asID: 213655
IP address blocks: 2a0e:8f02:f073::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d2:0c:e3:e4:d6:03:0f:af:5e:4d:84:ef:71:d5:d0:3d:75:60:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:45 2026 GMT
Not After : Nov 3 20:32:45 2027 GMT
Subject: CN=96761C70AD86D208BC2BF9771AEDA778DA916650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:dc:c0:78:db:6f:55:f5:90:27:8a:f4:cd:
24:7c:a5:10:1a:53:bb:6c:ee:0f:a2:ff:dc:28:d1:
4e:ed:af:45:d5:9b:2e:48:92:15:b2:bf:13:e6:a1:
0c:03:19:76:5f:cc:8d:90:43:9d:9c:85:a5:f7:92:
2d:9b:66:99:d6:57:8f:d7:8f:e0:a8:d0:e1:a5:b9:
d9:da:89:ca:0d:05:a3:36:46:4d:97:18:aa:5c:40:
93:27:d0:e0:16:e3:9d:48:8f:34:64:07:26:a4:f3:
07:33:89:6d:bd:54:90:98:a4:f7:83:90:16:a3:60:
b2:f6:83:9c:0e:2c:8a:7c:1a:7a:31:35:bc:56:8d:
cf:89:3d:62:64:1a:fa:11:c8:c7:20:a4:47:e3:37:
32:09:c9:14:5e:a6:6d:11:bc:81:5c:55:6d:48:4f:
df:e5:c5:5d:88:39:01:5c:d2:e7:62:72:3e:ea:04:
99:04:6c:de:41:ee:28:cf:6a:dc:dd:63:e5:e9:ae:
8b:34:11:8f:2e:3a:62:17:37:8f:e4:32:f9:61:57:
e7:ae:89:44:4f:f6:21:e9:05:9f:90:32:95:3a:94:
b2:9a:81:0d:9a:54:39:f2:c3:4f:2b:d5:c0:1f:ff:
87:72:a5:f9:52:2e:39:00:fc:9e:83:51:fe:80:57:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:76:1C:70:AD:86:D2:08:BC:2B:F9:77:1A:ED:A7:78:DA:91:66:50
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f073::/48
Signature Algorithm: sha256WithRSAEncryption
39:4f:06:65:cd:53:32:5a:23:17:8c:3c:07:6c:ef:2e:8a:1d:
2c:33:8b:ae:c1:7f:95:60:a4:e9:5f:a5:45:30:a1:1c:a5:90:
86:26:9a:37:13:ba:3f:2b:73:c0:f3:23:24:e6:a6:37:20:c0:
26:41:e5:04:2a:41:68:1f:88:c4:7a:02:e3:54:df:e3:9b:bd:
74:6b:55:15:28:8e:02:5d:c1:88:96:a9:af:56:6b:7a:47:1c:
ff:b4:19:f4:14:8a:86:f5:99:97:f4:26:2e:94:2e:7a:bd:67:
f4:d2:df:5a:5f:25:ce:fd:4e:a3:d5:7e:8c:38:26:fe:f6:68:
dc:17:e0:da:f2:67:77:18:af:c0:50:01:f9:1a:22:a9:d9:4f:
18:9c:8c:04:f2:8f:0c:cd:d7:87:9e:e5:6e:96:59:47:68:55:
a1:0c:7c:b2:e1:41:a9:6d:86:56:ed:7f:fb:75:2d:08:3a:1c:
a4:9d:5d:2f:79:19:7d:8f:2c:70:93:30:98:e5:da:48:db:10:
03:f3:d9:0a:2f:c2:12:db:0b:6d:a3:a1:de:5f:94:dc:eb:42:
78:ae:64:61:24:60:f3:44:11:0c:af:18:96:a5:60:90:32:1f:
9c:bf:99:07:43:02:12:91:c2:12:01:1f:e0:ff:9d:bb:d1:aa:
c6:59:6b:42
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUAdIM4+TWAw+vXk2E73HV0D11YMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NDVaFw0yNzExMDMyMDMyNDVaMDMxMTAvBgNV
BAMTKDk2NzYxQzcwQUQ4NkQyMDhCQzJCRjk3NzFBRURBNzc4REE5MTY2NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrh9zAeNtvVfWQJ4r0zSR8pRAa
U7ts7g+i/9wo0U7tr0XVmy5IkhWyvxPmoQwDGXZfzI2QQ52chaX3ki2bZpnWV4/X
j+Co0OGludnaicoNBaM2Rk2XGKpcQJMn0OAW451IjzRkByak8wcziW29VJCYpPeD
kBajYLL2g5wOLIp8GnoxNbxWjc+JPWJkGvoRyMcgpEfjNzIJyRRepm0RvIFcVW1I
T9/lxV2IOQFc0udicj7qBJkEbN5B7ijPatzdY+Xpros0EY8uOmIXN4/kMvlhV+eu
iURP9iHpBZ+QMpU6lLKagQ2aVDnyw08r1cAf/4dypflSLjkA/J6DUf6AV0LnAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUlnYccK2G0gi8K/l3Gu2neNqRZlAwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIxMzY1NS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoO
jwLwczANBgkqhkiG9w0BAQsFAAOCAQEAOU8GZc1TMlojF4w8B2zvLoodLDOLrsF/
lWCk6V+lRTChHKWQhiaaNxO6PytzwPMjJOamNyDAJkHlBCpBaB+IxHoC41Tf45u9
dGtVFSiOAl3BiJapr1Zrekcc/7QZ9BSKhvWZl/QmLpQuer1n9NLfWl8lzv1Oo9V+
jDgm/vZo3Bfg2vJndxivwFAB+RoiqdlPGJyMBPKPDM3Xh57lbpZZR2hVoQx8suFB
qW2GVu1/+3UtCDocpJ1dL3kZfY8scJMwmOXaSNsQA/PZCi/CEtsLbaOh3l+U3OtC
eK5kYSRg80QRDK8YlqVgkDIfnL+ZB0MCEpHCEgEf4P+du9GqxllrQg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:47:32 2026 by rpki-client