Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213674.roa
File: AS213674.roa (raw, json)
Hash identifier: GEI7Tukpl36/0dDjhuz9jGayJ5Bu4u53bKAqpT97n74=
Subject key identifier: 27:3E:C0:1E:2C:AB:8D:6F:A0:AC:5D:40:E6:22:54:17:A4:19:05:21
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 5318E974D6AD2FA705231706FBD4275B2F62894C
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213674.roa
Signing time: Wed 04 Nov 2026 20:32:48 +0000
ROA not before: Wed 04 Nov 2026 20:27:48 +0000
ROA not after: Wed 03 Nov 2027 20:32:48 +0000
asID: 213674
IP address blocks: 2a0e:8f02:2050::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:18:e9:74:d6:ad:2f:a7:05:23:17:06:fb:d4:27:5b:2f:62:89:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:48 2026 GMT
Not After : Nov 3 20:32:48 2027 GMT
Subject: CN=273EC01E2CAB8D6FA0AC5D40E6225417A4190521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:0c:75:4b:d8:be:02:60:aa:07:34:43:bc:
d6:f9:df:f0:36:32:32:3e:94:9a:98:fd:fd:6a:8d:
2e:6b:f9:f1:42:d2:cc:10:ea:37:ea:92:d6:2e:b7:
32:c7:62:39:92:5c:ac:97:c7:d8:f9:87:5e:20:11:
9c:9b:e2:eb:0f:29:f0:5d:af:a7:40:21:67:53:9d:
3a:df:8d:82:c1:9d:57:cc:c0:ca:ca:32:cc:e0:5a:
ce:db:cd:97:3b:4a:2c:8b:86:38:23:ac:d3:27:63:
45:23:e1:b0:8d:52:f7:88:b9:44:26:31:0e:27:ee:
3b:d9:ba:00:ba:b1:67:64:11:90:57:c3:8f:f9:e6:
11:14:dc:89:b5:12:5e:6f:85:66:29:d1:4e:e0:68:
0f:75:26:6d:02:13:a5:6f:29:99:03:b7:ed:5b:c1:
ee:b3:89:5b:a4:49:85:c2:07:43:ff:2d:52:17:19:
15:21:f0:0f:e9:71:8f:20:a1:62:39:b1:d8:c8:f5:
9c:ac:f8:ef:23:2e:ac:1a:50:1b:f3:34:67:c7:84:
df:3e:3b:27:3e:4a:0c:c1:92:2f:4a:c2:de:4c:ed:
a5:65:19:80:62:38:d5:e6:85:29:d9:de:27:d6:4a:
b9:b8:26:e0:00:55:1d:19:62:f6:f4:3c:d0:03:8d:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3E:C0:1E:2C:AB:8D:6F:A0:AC:5D:40:E6:22:54:17:A4:19:05:21
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS213674.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2050::/44
Signature Algorithm: sha256WithRSAEncryption
8b:d8:2f:7f:f9:04:0f:95:dc:11:95:99:58:d6:51:55:e9:3c:
23:2a:b7:e4:4f:37:5d:5c:28:01:bb:46:40:f1:de:76:8c:9f:
e7:41:7d:5f:65:de:ee:ae:67:53:d4:19:72:b5:03:37:3c:62:
ea:46:30:3f:5a:3f:1c:4f:0c:65:a1:22:b4:10:fa:6f:2e:b5:
59:c0:62:bb:58:11:c8:cb:8a:5f:28:5d:72:c9:c5:5d:d4:4c:
e8:fe:14:ea:e2:ca:d0:57:4f:a3:89:3a:aa:4a:8c:2d:81:b6:
7c:a6:f5:34:bc:76:43:7e:15:16:ac:1f:d7:6b:4c:10:e6:9c:
61:3a:05:fe:28:25:0e:44:79:41:7c:e8:c4:cd:74:d2:c5:8e:
a0:f9:4a:9a:dc:10:87:24:5d:99:68:bb:09:0f:dd:98:56:b2:
2a:1e:b9:7d:6a:53:8a:aa:2e:a8:52:c9:c9:b6:b0:92:91:31:
f4:c1:b5:47:31:a0:04:57:a4:86:62:40:70:56:2d:01:07:db:
e5:d3:a8:fb:e1:3c:99:5e:46:d0:13:64:c7:d3:ff:50:b8:eb:
8b:3e:18:78:0e:47:fa:09:0d:30:a0:d7:b4:42:70:31:af:51:
c0:64:53:ed:a0:26:2e:b6:39:f3:33:d1:a0:6c:46:36:6a:6e:
79:85:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:39 2026 by rpki-client