Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213038.roa
File: AS213038.roa (raw, json)
Hash identifier: RmPRRA/FJKmKHRYZcTeGtg1jc8xTW+twuhFXX7nnsXc=
Subject key identifier: A7:14:1B:32:20:22:7A:F7:81:4B:66:FC:D9:93:82:F9:4B:2B:0D:B3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 554B500F3D483688662D7AB1771F687D9DB391FE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213038.roa
Signing time: Wed 15 Apr 2026 19:01:02 +0000
ROA not before: Wed 15 Apr 2026 18:56:02 +0000
ROA not after: Wed 14 Apr 2027 19:01:02 +0000
asID: 213038
IP address blocks: 82.38.101.0/24 maxlen: 24
82.38.103.0/24 maxlen: 24
82.38.104.0/24 maxlen: 24
82.38.107.0/24 maxlen: 24
82.38.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4b:50:0f:3d:48:36:88:66:2d:7a:b1:77:1f:68:7d:9d:b3:91:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 15 18:56:02 2026 GMT
Not After : Apr 14 19:01:02 2027 GMT
Subject: CN=A7141B3220227AF7814B66FCD99382F94B2B0DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:a1:15:00:8a:d6:8e:14:93:2b:1e:28:92:
92:e5:3e:bc:e4:f6:3a:82:59:2c:5a:3e:f5:65:5f:
e1:08:f7:a7:ca:ca:e6:2a:01:78:8c:6a:5a:b5:b3:
a8:18:9e:25:1d:2d:80:e7:50:5b:8d:88:60:e6:a0:
48:17:0a:a5:4d:c2:a9:62:95:b2:0e:f5:88:ea:16:
cc:47:86:01:d3:86:45:39:79:4e:ad:a0:6c:fd:60:
87:d5:27:d6:bf:87:b5:36:87:de:fd:9b:23:d0:94:
86:10:20:3f:18:21:1e:a8:4d:c4:75:4a:a6:78:16:
dc:fd:e1:66:19:08:ad:88:1e:f0:a1:98:80:c3:94:
d4:5c:5d:c7:7d:e5:09:6d:3f:ee:c1:a3:fb:6b:27:
b4:0e:0f:89:ab:78:a8:98:c8:75:ff:97:98:c2:b4:
95:02:6d:c1:03:6e:3e:95:3f:99:f4:ab:4c:32:29:
ec:de:6f:1c:6e:29:e3:e3:55:69:52:59:e9:c3:06:
fa:ef:f9:4d:f1:b9:78:d2:44:a6:88:80:f4:af:ef:
00:6a:6f:a5:c7:63:54:4f:2d:77:46:e7:92:81:0a:
b7:2e:6d:97:e0:25:d0:49:bf:57:22:bb:40:de:18:
a8:00:ff:85:d5:9b:fa:00:ea:ab:01:df:ad:82:a8:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:1B:32:20:22:7A:F7:81:4B:66:FC:D9:93:82:F9:4B:2B:0D:B3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.101.0/24
82.38.103.0-82.38.104.255
82.38.107.0/24
82.38.132.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6b:17:87:04:20:9a:d5:a9:59:c1:bc:c6:2b:d7:4f:e7:e9:
e5:d3:9b:74:95:54:34:04:c4:32:06:bf:ec:27:cd:fa:8e:61:
7b:e1:6d:f9:9e:e5:65:97:ad:ae:8f:82:aa:3e:a6:55:b1:9c:
25:ab:17:61:bd:b5:d2:b5:e4:aa:dc:f0:47:01:f6:a3:2f:84:
81:a7:24:fa:95:ed:cd:8b:cb:3d:8a:92:1a:c3:92:58:a6:b3:
ea:90:1c:52:71:46:f8:23:a9:cf:bd:73:13:69:2e:9d:41:5c:
87:a7:b7:bb:7e:16:d4:3e:82:d3:ff:94:13:8a:aa:29:ee:0e:
33:16:04:9f:3e:6e:fd:4c:d3:26:ce:6a:e0:a2:aa:3a:73:28:
c3:85:47:02:8a:b5:bc:e4:2a:58:00:1b:b3:03:e6:34:72:13:
40:ae:26:1d:33:43:82:54:8d:36:c2:44:81:0c:58:c3:34:29:
3d:43:ad:02:a9:29:e7:2e:39:67:d3:d9:8f:b7:0a:76:79:ce:
7c:8f:ce:50:71:89:aa:43:76:5c:b3:4c:28:4c:e6:2e:f5:35:
fa:ba:53:07:54:da:7c:da:87:92:ea:aa:49:86:8c:18:8e:f5:
af:f3:34:fb:cb:0a:dc:26:4d:a5:df:ad:83:4a:65:b2:e7:b5:
a9:b5:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:06 2026 by rpki-client