Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213430.roa
File: AS213430.roa (raw, json)
Hash identifier: iX1BI2eZ7mkeYUwF7TA8u8rlV4w6BS7vphVT1ljWiCI=
Subject key identifier: 10:A4:9A:76:CB:F6:E1:14:22:0B:13:55:2D:1B:F3:B7:FD:D6:82:F7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 284615C85DD0AAEBAF8D3797FFAA50DB49B6F729
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213430.roa
Signing time: Thu 16 Apr 2026 12:47:05 +0000
ROA not before: Thu 16 Apr 2026 12:42:05 +0000
ROA not after: Thu 15 Apr 2027 12:47:05 +0000
asID: 213430
IP address blocks: 2a13:9500:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:46:15:c8:5d:d0:aa:eb:af:8d:37:97:ff:aa:50:db:49:b6:f7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 16 12:42:05 2026 GMT
Not After : Apr 15 12:47:05 2027 GMT
Subject: CN=10A49A76CBF6E114220B13552D1BF3B7FDD682F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:69:eb:0a:b5:19:83:30:37:7f:55:1d:1f:
1e:a0:a0:66:9b:8c:c1:2d:97:2f:2d:95:f0:de:04:
f3:c7:50:79:3c:23:f8:35:ba:81:20:51:40:0c:6e:
80:a8:4c:b2:7f:b8:29:90:a4:95:de:41:1f:37:e7:
52:41:62:11:5e:57:a7:47:df:89:0d:4f:00:2c:8e:
65:1b:0e:20:b9:e3:c6:7c:f5:a4:81:f2:41:21:5e:
72:e2:21:f0:50:2a:33:0f:5f:b8:3d:83:81:d1:7d:
46:ec:54:dd:7c:8f:d0:12:36:8a:60:84:8e:d2:8b:
cd:16:7b:e2:df:4c:e1:43:bb:39:34:87:24:b8:44:
de:42:97:8f:c9:ad:9c:62:84:68:c2:33:0d:1d:dc:
6f:99:bb:65:89:a8:60:07:42:c7:ab:a9:63:80:a4:
09:8a:35:39:2e:54:90:a2:96:97:5a:4f:88:8c:ed:
96:e9:fc:06:d2:99:07:6a:e7:6e:49:89:8d:15:68:
ef:01:6b:6d:4f:76:22:34:6e:65:f4:6c:45:64:53:
2b:82:10:f9:a9:13:fa:de:5a:55:fe:74:0d:8e:82:
a1:08:1c:14:60:0d:3f:dd:be:92:c2:4f:17:ba:11:
0f:a9:f3:62:3d:09:a3:38:5b:60:47:76:4f:a3:a3:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:9A:76:CB:F6:E1:14:22:0B:13:55:2D:1B:F3:B7:FD:D6:82:F7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:41::/48
Signature Algorithm: sha256WithRSAEncryption
25:56:b5:94:23:bf:3e:90:92:42:f6:b5:42:a7:73:a3:e8:b3:
a3:e2:12:b6:ca:01:06:92:2d:08:7d:a9:9e:99:6f:5e:cc:b3:
6a:ac:96:e5:6a:39:92:23:40:76:a7:c4:85:6a:36:af:a6:23:
7e:56:e4:61:d7:5d:45:0c:d1:22:dc:a1:fd:cd:6e:96:99:2c:
34:04:b1:09:1d:20:b3:8f:7f:27:0c:52:d2:0b:68:b8:5c:f1:
69:70:a8:b0:98:71:ae:4c:40:65:9f:31:f1:d1:1c:94:84:f7:
87:da:c9:59:df:88:47:2b:65:b1:07:8b:8c:82:72:11:e3:87:
dc:88:28:e8:20:2f:49:d6:48:3b:2c:01:dd:90:3d:99:ae:a3:
0f:8c:5c:56:c7:54:03:de:a0:0b:0f:3d:1f:2e:f9:c3:b6:fc:
d6:d3:6b:7c:f4:4a:ed:cb:c9:14:b9:d1:e2:d8:57:7d:83:5e:
52:1a:2f:ac:57:ed:c3:9a:45:a9:06:99:06:fb:d3:cc:89:ce:
a9:fd:62:65:42:c8:fe:39:a1:63:27:f3:86:76:51:df:17:b8:
2d:c2:57:ff:ce:d3:b5:bf:c5:f1:d3:f4:33:f5:c1:72:7a:bc:
16:fb:06:0e:de:ab:b7:e8:f5:b6:c8:6e:7a:da:03:7a:c7:54:
ee:05:6a:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUKEYVyF3QquuvjTeX/6pQ20m29ykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MTYxMjQyMDVaFw0yNzA0MTUxMjQ3MDVaMDMxMTAvBgNV
BAMTKDEwQTQ5QTc2Q0JGNkUxMTQyMjBCMTM1NTJEMUJGM0I3RkRENjgyRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfImnrCrUZgzA3f1UdHx6goGab
jMEtly8tlfDeBPPHUHk8I/g1uoEgUUAMboCoTLJ/uCmQpJXeQR8351JBYhFeV6dH
34kNTwAsjmUbDiC548Z89aSB8kEhXnLiIfBQKjMPX7g9g4HRfUbsVN18j9ASNopg
hI7Si80We+LfTOFDuzk0hyS4RN5Cl4/JrZxihGjCMw0d3G+Zu2WJqGAHQserqWOA
pAmKNTkuVJCilpdaT4iM7Zbp/AbSmQdq525JiY0VaO8Ba21PdiI0bmX0bEVkUyuC
EPmpE/reWlX+dA2OgqEIHBRgDT/dvpLCTxe6EQ+p82I9CaM4W2BHdk+jo4nxAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUEKSadsv24RQiCxNVLRvzt/3WgvcwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AABBMA0GCSqGSIb3DQEBCwUAA4IBAQAlVrWUI78+kJJC9rVCp3Oj6LOj4hK2ygEG
ki0IfamemW9ezLNqrJblajmSI0B2p8SFajavpiN+VuRh111FDNEi3KH9zW6WmSw0
BLEJHSCzj38nDFLSC2i4XPFpcKiwmHGuTEBlnzHx0RyUhPeH2slZ34hHK2WxB4uM
gnIR44fciCjoIC9J1kg7LAHdkD2ZrqMPjFxWx1QD3qALDz0fLvnDtvzW02t89Ert
y8kUudHi2Fd9g15SGi+sV+3DmkWpBpkG+9PMic6p/WJlQsj+OaFjJ/OGdlHfF7gt
wlf/ztO1v8Xx0/Qz9cFyerwW+wYO3qu36PW2yG562gN6x1TuBWqa
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:47:04 2026 by rpki-client