Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213451.roa
File: AS213451.roa (raw, json)
Hash identifier: mV9o4hETsZ3+oFSyPqUJt58291efogI4NFlVibouJNM=
Subject key identifier: FD:0E:3B:26:CE:B4:06:24:92:E9:3F:0B:7E:EF:99:7C:A4:AA:65:66
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0AEE1E8DC3924662BDE02383D44AFBF45D272701
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213451.roa
Signing time: Sun 25 Oct 2026 14:49:38 +0000
ROA not before: Sun 25 Oct 2026 14:44:38 +0000
ROA not after: Sun 24 Oct 2027 14:49:38 +0000
asID: 213451
IP address blocks: 82.39.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ee:1e:8d:c3:92:46:62:bd:e0:23:83:d4:4a:fb:f4:5d:27:27:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 25 14:44:38 2026 GMT
Not After : Oct 24 14:49:38 2027 GMT
Subject: CN=FD0E3B26CEB4062492E93F0B7EEF997CA4AA6566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:48:c5:26:6d:bb:8c:ed:4d:59:97:ba:2a:
85:d5:91:ba:71:12:94:0e:6f:5f:8d:e9:87:27:5c:
cc:26:a9:14:09:48:2f:0d:95:cb:98:dd:7f:34:82:
b5:2a:11:7c:93:a4:12:d5:8e:f4:07:7f:65:23:21:
fb:2d:2d:bb:e6:40:e3:b4:90:28:52:74:44:8e:e0:
da:fd:05:05:19:19:3b:dc:84:dc:1b:6a:4e:a9:ba:
27:9d:13:7b:34:bc:76:24:3d:f8:79:49:be:fd:75:
ea:1e:74:51:56:bf:32:eb:63:97:d7:72:d9:eb:a6:
41:cf:a8:37:f1:0c:4c:c2:11:ee:c1:12:58:e6:fa:
32:e6:bb:5d:10:49:11:20:53:6a:f2:0c:37:27:0d:
27:8c:35:17:bd:bb:9a:78:1f:ed:af:a5:9d:59:17:
cd:47:4d:d7:dc:68:9c:9a:fd:be:3c:75:d3:e4:2c:
40:ff:d6:b5:83:a2:d9:1f:18:14:34:23:58:2b:a0:
78:61:e5:b3:ae:42:69:73:34:2a:d8:e7:fd:7d:9a:
53:f4:81:75:7a:00:d1:26:ee:a9:eb:5d:99:a1:b8:
c5:69:29:a8:6b:0e:b4:92:02:48:b6:d7:22:74:13:
4f:a1:94:f3:14:c8:02:aa:66:85:1c:1a:bb:5b:4b:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0E:3B:26:CE:B4:06:24:92:E9:3F:0B:7E:EF:99:7C:A4:AA:65:66
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.98.0/24
Signature Algorithm: sha256WithRSAEncryption
54:60:27:51:1e:db:2c:6d:24:be:cf:77:48:76:1c:52:76:33:
f7:c4:17:2a:bf:57:79:87:57:78:7b:42:55:b5:78:80:09:2c:
de:74:39:6d:f0:fc:59:95:c5:80:37:c6:c5:75:4f:d3:64:8b:
1d:cc:9f:f3:10:fc:30:20:8b:13:eb:76:02:c5:f0:e9:c0:bf:
3e:54:47:42:79:e0:04:bd:03:88:ec:18:09:63:c8:8a:44:93:
53:e5:59:28:45:9b:62:58:20:e8:d6:87:4c:46:0b:3d:03:89:
52:e1:01:b6:dd:86:73:93:99:ca:9a:ee:ae:e0:52:8e:4c:16:
e4:8d:4c:b6:39:b3:f2:6a:74:11:4a:42:3e:fa:6e:6a:63:f6:
f3:21:a7:ab:d1:c8:55:86:2f:6f:80:c7:42:fd:f8:8c:23:e3:
12:35:62:12:47:6f:e8:91:ae:de:d1:68:f9:3c:4e:03:c6:3a:
8a:72:d5:52:f0:a9:f7:8c:d3:f8:85:a2:48:05:5e:4f:8d:fe:
2b:28:7a:ac:8b:45:6d:48:ce:c5:1d:be:55:30:bd:42:b8:82:
a3:65:e8:4b:ef:56:d8:aa:e0:8a:1f:6d:b5:3e:e4:82:18:2a:
f5:98:dc:6c:0a:13:55:ae:80:37:84:16:97:d2:b1:c5:67:89:
9a:e1:6f:5b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUCu4ejcOSRmK94COD1Er79F0nJwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMjUxNDQ0MzhaFw0yNzEwMjQxNDQ5MzhaMDMxMTAvBgNV
BAMTKEZEMEUzQjI2Q0VCNDA2MjQ5MkU5M0YwQjdFRUY5OTdDQTRBQTY1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HEjFJm27jO1NWZe6KoXVkbpx
EpQOb1+N6YcnXMwmqRQJSC8NlcuY3X80grUqEXyTpBLVjvQHf2UjIfstLbvmQOO0
kChSdESO4Nr9BQUZGTvchNwbak6puiedE3s0vHYkPfh5Sb79deoedFFWvzLrY5fX
ctnrpkHPqDfxDEzCEe7BEljm+jLmu10QSREgU2ryDDcnDSeMNRe9u5p4H+2vpZ1Z
F81HTdfcaJya/b48ddPkLED/1rWDotkfGBQ0I1groHhh5bOuQmlzNCrY5/19mlP0
gXV6ANEm7qnrXZmhuMVpKahrDrSSAki21yJ0E0+hlPMUyAKqZoUcGrtbSyWRAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU/Q47Js60BiSS6T8Lfu+ZfKSqZWYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNDUxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUidi
MA0GCSqGSIb3DQEBCwUAA4IBAQBUYCdRHtssbSS+z3dIdhxSdjP3xBcqv1d5h1d4
e0JVtXiACSzedDlt8PxZlcWAN8bFdU/TZIsdzJ/zEPwwIIsT63YCxfDpwL8+VEdC
eeAEvQOI7BgJY8iKRJNT5VkoRZtiWCDo1odMRgs9A4lS4QG23YZzk5nKmu6u4FKO
TBbkjUy2ObPyanQRSkI++m5qY/bzIaer0chVhi9vgMdC/fiMI+MSNWISR2/oka7e
0Wj5PE4DxjqKctVS8Kn3jNP4haJIBV5Pjf4rKHqsi0VtSM7FHb5VML1CuIKjZehL
71bYquCKH221PuSCGCr1mNxsChNVroA3hBaX0rHFZ4ma4W9b
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:17:30 2026 by rpki-client