Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213482.roa
File: AS213482.roa (raw, json)
Hash identifier: 6cS83L1iephut5bzjDqNtGgLhyBlqhZN2jdvfBBB53k=
Subject key identifier: 4C:A2:16:A3:50:03:2F:19:9A:57:D1:0C:4B:D6:34:4F:DD:84:85:6A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 09CD68A1424ED9BCA8CADFDC823B83AA43B18053
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213482.roa
Signing time: Mon 07 Jul 2025 21:22:23 +0000
ROA not before: Mon 07 Jul 2025 21:17:23 +0000
ROA not after: Mon 06 Jul 2026 21:22:23 +0000
asID: 213482
IP address blocks: 82.22.119.0/24 maxlen: 24
82.23.170.0/24 maxlen: 24
82.25.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:cd:68:a1:42:4e:d9:bc:a8:ca:df:dc:82:3b:83:aa:43:b1:80:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 7 21:17:23 2025 GMT
Not After : Jul 6 21:22:23 2026 GMT
Subject: CN=4CA216A350032F199A57D10C4BD6344FDD84856A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:09:e3:e1:1b:ad:8f:75:9d:cb:0e:49:5e:
7a:a3:62:36:f7:8d:22:89:f0:09:0e:0a:e9:f0:62:
02:e1:b2:d7:09:a3:9c:f8:1d:0c:2b:40:bb:c3:eb:
3d:db:11:73:99:eb:bd:1d:9f:a6:18:e9:2d:37:b1:
69:13:3a:74:ae:3a:b3:c4:5f:44:31:72:9f:ad:50:
86:42:64:08:68:02:12:86:25:ed:4c:89:f8:49:0d:
b0:70:a4:d2:e7:e8:14:02:99:f7:bd:d7:b9:55:4a:
88:5a:40:e8:d9:e3:fd:12:8a:22:a0:aa:0b:68:5f:
51:c0:84:9e:70:0f:89:e6:0f:5c:c5:7c:bc:b9:e8:
b5:80:23:ca:b1:35:88:69:6d:d0:71:83:5d:d2:ef:
35:7d:2a:e4:2b:30:39:43:5a:52:b9:94:cc:78:db:
3c:ea:b1:20:93:e3:0a:1a:59:52:89:d7:e6:cc:f2:
b7:bf:f0:1d:59:8b:fe:20:14:b4:ec:e0:34:5e:ec:
44:f5:5d:e8:a7:2c:db:ea:97:8e:7d:39:2a:4f:cf:
17:27:fb:af:de:69:7c:db:88:83:55:81:1b:de:d9:
df:8b:f3:61:6a:15:20:8e:25:74:32:6e:e9:da:0c:
ff:53:3b:a8:ad:ad:09:fd:8c:b7:3d:f9:38:77:0e:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:16:A3:50:03:2F:19:9A:57:D1:0C:4B:D6:34:4F:DD:84:85:6A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.119.0/24
82.23.170.0/24
82.25.187.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f9:75:b6:c6:c4:ea:eb:8a:75:8a:bc:5c:ab:83:fe:77:99:
d7:3a:f6:41:84:1f:c5:89:96:4b:4f:22:5e:78:32:fb:fd:d5:
0e:20:f3:89:12:2a:e7:7a:5f:d4:dc:8e:1f:8c:61:33:cb:e3:
6c:d4:6f:46:2c:c2:93:f4:96:1d:5f:37:f5:1b:00:67:4d:73:
46:5c:90:b3:19:be:26:c3:4b:42:03:26:10:af:da:db:a4:0b:
aa:9c:9b:21:d3:5e:5f:da:5b:91:1b:35:20:0f:a3:96:55:6e:
87:ae:0e:db:e0:a8:ca:68:76:4d:88:84:04:e1:d5:1e:8c:45:
9e:d9:e0:f9:bb:c7:75:1c:11:95:21:27:1a:55:3e:41:f2:bc:
6d:8a:91:5d:26:72:79:7e:b5:9e:6a:2a:7a:47:a9:a1:17:f1:
7c:d5:1e:f0:0f:f4:9f:68:2f:22:51:7d:40:89:bd:79:b2:b4:
97:5c:14:61:eb:20:80:3f:ed:d2:8a:2f:5a:ee:cb:f6:ea:48:
7b:e5:c5:75:05:94:ce:14:01:39:8f:8e:6f:54:a6:4f:60:6c:
3f:aa:98:fa:9a:95:20:58:ce:c9:73:3d:ea:45:d7:be:be:a0:
b2:04:89:59:cc:c4:25:ed:d4:12:19:73:6f:67:7a:d4:e8:14:
ac:02:60:66
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUCc1ooUJO2byoyt/cgjuDqkOxgFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA3MDcyMTE3MjNaFw0yNjA3MDYyMTIyMjNaMDMxMTAvBgNV
BAMTKDRDQTIxNkEzNTAwMzJGMTk5QTU3RDEwQzRCRDYzNDRGREQ4NDg1NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUQnj4Rutj3Wdyw5JXnqjYjb3
jSKJ8AkOCunwYgLhstcJo5z4HQwrQLvD6z3bEXOZ670dn6YY6S03sWkTOnSuOrPE
X0Qxcp+tUIZCZAhoAhKGJe1MifhJDbBwpNLn6BQCmfe917lVSohaQOjZ4/0SiiKg
qgtoX1HAhJ5wD4nmD1zFfLy56LWAI8qxNYhpbdBxg13S7zV9KuQrMDlDWlK5lMx4
2zzqsSCT4woaWVKJ1+bM8re/8B1Zi/4gFLTs4DRe7ET1XeinLNvql459OSpPzxcn
+6/eaXzbiINVgRve2d+L82FqFSCOJXQybunaDP9TO6itrQn9jLc9+Th3DoK7AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUTKIWo1ADLxmaV9EMS9Y0T92EhWowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNDgyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhZ3
AwQAUheqAwQAUhm7MA0GCSqGSIb3DQEBCwUAA4IBAQAC+XW2xsTq64p1irxcq4P+
d5nXOvZBhB/FiZZLTyJeeDL7/dUOIPOJEirnel/U3I4fjGEzy+Ns1G9GLMKT9JYd
Xzf1GwBnTXNGXJCzGb4mw0tCAyYQr9rbpAuqnJsh015f2luRGzUgD6OWVW6Hrg7b
4KjKaHZNiIQE4dUejEWe2eD5u8d1HBGVIScaVT5B8rxtipFdJnJ5frWeaip6R6mh
F/F81R7wD/SfaC8iUX1Aib15srSXXBRh6yCAP+3Sii9a7sv26kh75cV1BZTOFAE5
j45vVKZPYGw/qpj6mpUgWM7Jcz3qRde+vqCyBIlZzMQl7dQSGXNvZ3rU6BSsAmBm
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:39:05 2025 by rpki-client