Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: ep/pOkYPuvFfXJdh3zAvgpZy1dPOs8tGrUdnW3JwFcs=
Subject key identifier: 67:4F:48:FD:FB:C5:59:22:DC:20:2D:F0:65:44:78:18:0C:C1:0A:BB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7CA9E6BD5D0482B1F24DA247EA90EF49E76C7040
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213476.roa
Signing time: Mon 26 Oct 2026 13:46:52 +0000
ROA not before: Mon 26 Oct 2026 13:41:52 +0000
ROA not after: Mon 25 Oct 2027 13:46:52 +0000
asID: 213476
IP address blocks: 82.21.169.0/24 maxlen: 24
82.22.17.0/24 maxlen: 24
82.22.29.0/24 maxlen: 24
82.23.142.0/24 maxlen: 24
82.24.120.0/24 maxlen: 24
82.26.113.0/24 maxlen: 24
82.39.232.0/24 maxlen: 24
82.41.140.0/24 maxlen: 24
82.47.97.0/24 maxlen: 24
82.47.217.0/24 maxlen: 24
82.47.230.0/24 maxlen: 24
84.75.138.0/24 maxlen: 24
84.75.157.0/24 maxlen: 24
84.75.162.0/24 maxlen: 24
84.75.183.0/24 maxlen: 24
84.75.192.0/24 maxlen: 24
84.75.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a9:e6:bd:5d:04:82:b1:f2:4d:a2:47:ea:90:ef:49:e7:6c:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 26 13:41:52 2026 GMT
Not After : Oct 25 13:46:52 2027 GMT
Subject: CN=674F48FDFBC55922DC202DF0654478180CC10ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:38:c7:b8:2e:07:8d:92:e8:93:e1:0c:c9:
79:5c:d6:a7:80:9a:a2:94:dd:dd:e8:d6:ca:5f:dd:
5b:9c:95:e1:54:77:ba:82:1a:03:25:61:70:93:14:
2e:07:21:2e:23:7f:8c:00:a9:3b:55:89:1a:1c:cb:
cf:ca:39:11:1a:84:a3:d0:ab:c0:7c:bb:c3:7e:f9:
ed:97:95:11:07:af:a9:73:d7:bd:16:27:61:22:67:
8b:b5:b4:26:5f:c2:9f:aa:6e:aa:0a:12:23:52:dc:
9e:82:8b:f9:38:9d:fd:7c:48:df:70:e1:e1:95:56:
a9:6c:ce:23:7e:f6:bd:4d:17:e1:cb:ad:28:c1:da:
04:76:b9:b4:a0:37:8b:0b:a0:ea:4b:20:5c:a9:17:
c4:70:2a:55:b7:f8:e4:f2:23:a7:ad:5f:66:5b:2a:
43:22:d7:6e:89:74:cb:01:46:4c:d9:4c:ec:44:76:
8c:e9:d8:57:54:64:89:41:ec:6c:a8:85:73:1d:83:
d2:b4:92:df:29:6e:aa:b0:45:b2:27:ee:96:7d:c6:
4f:6b:ee:0b:24:48:a9:68:a1:1d:d2:c6:c0:e1:be:
dd:84:bd:57:d2:32:1f:0f:ee:3c:a4:cc:e9:a4:48:
13:83:2f:33:31:11:94:27:39:1e:27:89:49:4d:ee:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4F:48:FD:FB:C5:59:22:DC:20:2D:F0:65:44:78:18:0C:C1:0A:BB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.169.0/24
82.22.17.0/24
82.22.29.0/24
82.23.142.0/24
82.24.120.0/24
82.26.113.0/24
82.39.232.0/24
82.41.140.0/24
82.47.97.0/24
82.47.217.0/24
82.47.230.0/24
84.75.138.0/24
84.75.157.0/24
84.75.162.0/24
84.75.183.0/24
84.75.192.0/24
84.75.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:93:3c:e7:eb:ba:69:79:ce:f2:b2:95:6f:1d:f5:26:f4:6e:
c6:ff:b6:e8:a2:9e:a9:f8:7f:cf:b5:89:b5:46:28:16:f6:e1:
c1:f1:58:82:1e:df:67:2f:c8:90:2a:e7:05:5e:09:da:d1:b7:
54:c0:0e:84:48:1c:7f:6d:e8:b0:f6:e9:8b:6d:1e:d0:a1:77:
78:34:de:eb:81:84:4b:34:8e:2d:01:3d:45:32:7a:72:77:3f:
74:89:c3:d5:9c:fd:86:92:d7:6c:2f:53:98:21:dd:cd:c3:cf:
6d:c9:59:32:64:3d:d0:36:19:97:04:84:9e:b0:27:10:42:b1:
95:a1:68:70:40:12:5e:ba:58:30:fb:90:28:50:1a:fb:14:b6:
50:75:73:f8:23:16:77:c5:9b:de:ac:1d:d1:0b:9e:c5:c9:db:
57:0c:36:f9:96:62:ab:71:11:c9:0b:cd:66:b4:18:44:da:8c:
10:47:a5:aa:97:60:0e:28:d8:af:cf:9e:79:05:08:7d:d7:65:
e3:4c:ae:0e:01:43:03:77:32:40:65:88:40:b5:54:8d:40:5a:
37:cf:b4:5a:49:bb:b8:91:ea:a3:5b:f6:6d:fc:62:f1:8f:a0:
05:ab:d8:3e:b4:1c:8d:24:cf:3b:47:dc:19:14:23:53:cc:25:
a0:2e:17:94
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfKnmvV0EgrHyTaJH6pDvSedscEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMjYxMzQxNTJaFw0yNzEwMjUxMzQ2NTJaMDMxMTAvBgNV
BAMTKDY3NEY0OEZERkJDNTU5MjJEQzIwMkRGMDY1NDQ3ODE4MENDMTBBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERTjHuC4HjZLok+EMyXlc1qeA
mqKU3d3o1spf3VucleFUd7qCGgMlYXCTFC4HIS4jf4wAqTtViRocy8/KOREahKPQ
q8B8u8N++e2XlREHr6lz170WJ2EiZ4u1tCZfwp+qbqoKEiNS3J6Ci/k4nf18SN9w
4eGVVqlsziN+9r1NF+HLrSjB2gR2ubSgN4sLoOpLIFypF8RwKlW3+OTyI6etX2Zb
KkMi126JdMsBRkzZTOxEdozp2FdUZIlB7GyohXMdg9K0kt8pbqqwRbIn7pZ9xk9r
7gskSKlooR3SxsDhvt2EvVfSMh8P7jykzOmkSBODLzMxEZQnOR4niUlN7uhzAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUZ09I/fvFWSLcIC3wZUR4GAzBCrswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNDc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAUhWp
AwQAUhYRAwQAUhYdAwQAUheOAwQAUhh4AwQAUhpxAwQAUifoAwQAUimMAwQAUi9h
AwQAUi/ZAwQAUi/mAwQAVEuKAwQAVEudAwQAVEuiAwQAVEu3AwQAVEvAAwQAVEvN
MA0GCSqGSIb3DQEBCwUAA4IBAQAbkzzn67ppec7yspVvHfUm9G7G/7boop6p+H/P
tYm1RigW9uHB8ViCHt9nL8iQKucFXgna0bdUwA6ESBx/beiw9umLbR7QoXd4NN7r
gYRLNI4tAT1FMnpydz90icPVnP2GktdsL1OYId3Nw89tyVkyZD3QNhmXBISesCcQ
QrGVoWhwQBJeulgw+5AoUBr7FLZQdXP4IxZ3xZverB3RC57FydtXDDb5lmKrcRHJ
C81mtBhE2owQR6Wql2AOKNivz555BQh912XjTK4OAUMDdzJAZYhAtVSNQFo3z7Ra
Sbu4keqjW/Zt/GLxj6AFq9g+tByNJM87R9wZFCNTzCWgLheU
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:17:56 2026 by rpki-client