Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213482.roa
File: AS213482.roa (raw, json)
Hash identifier: IAMFsHFVlyOXbI7o4leLppiz3a+QzkVGO94r/9goEs4=
Subject key identifier: 67:F5:A4:31:E0:95:F9:53:82:85:C3:95:9B:93:03:FE:22:D0:E8:92
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5BD978C6F5B4FC07D0A12A446F19CA32FCCF5DD8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213482.roa
Signing time: Tue 03 Feb 2026 15:11:46 +0000
ROA not before: Tue 03 Feb 2026 15:06:46 +0000
ROA not after: Tue 02 Feb 2027 15:11:46 +0000
asID: 213482
IP address blocks: 82.22.119.0/24 maxlen: 24
82.23.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d9:78:c6:f5:b4:fc:07:d0:a1:2a:44:6f:19:ca:32:fc:cf:5d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 3 15:06:46 2026 GMT
Not After : Feb 2 15:11:46 2027 GMT
Subject: CN=67F5A431E095F9538285C3959B9303FE22D0E892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:aa:61:f5:f6:ba:f0:cd:8a:cf:50:bd:91:
6b:af:45:38:25:a8:c0:25:7d:ad:be:f9:66:5b:7f:
78:6f:0f:4f:5b:cc:a3:35:b4:0a:5a:64:53:a5:49:
18:3f:c0:1a:f4:85:14:16:c3:67:cc:98:0f:3c:41:
86:18:3a:c5:bd:f6:b0:30:b6:34:43:bb:49:d0:77:
77:6f:cc:65:82:06:a0:84:76:99:ba:b1:38:7f:dc:
02:01:6a:da:ec:60:81:ce:cf:bb:2a:76:b5:c8:f8:
9e:64:5d:d0:1d:3b:f5:c1:52:95:a6:12:43:9c:1f:
41:2d:1e:05:4f:55:ba:5e:ab:2a:b0:e3:2d:ca:b1:
5d:29:65:8b:4c:a6:33:77:a9:70:76:71:3c:41:d2:
9f:c3:51:76:94:9f:43:6e:0b:d9:4b:a7:4a:84:a5:
4a:cd:f3:c7:9c:8d:9e:7a:ff:b9:3e:3f:97:c1:b2:
bd:09:29:a8:da:c7:d6:ca:7e:95:d6:54:41:f8:88:
f4:5e:90:6f:59:69:2b:f9:ad:a0:7a:b8:30:67:34:
d5:f4:e3:31:b6:13:72:e6:83:57:c9:b4:af:db:01:
78:9a:b8:25:8b:dc:75:7b:a5:21:4b:99:0a:5d:75:
8e:ae:6c:ec:79:22:2c:dd:2b:d7:3d:d6:95:84:01:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F5:A4:31:E0:95:F9:53:82:85:C3:95:9B:93:03:FE:22:D0:E8:92
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.119.0/24
82.23.170.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:16:e3:f2:f1:24:f3:21:2f:38:41:7d:3b:3a:bc:7c:7a:ea:
e3:85:00:49:29:fa:cc:d0:e8:3a:65:5a:37:10:17:5e:77:3e:
ec:fb:76:ab:c6:16:81:e4:f4:87:ae:9d:a5:49:f3:c9:cf:7d:
1e:7f:0f:32:d0:e1:42:78:21:0a:fc:91:e0:1d:a1:eb:2a:f8:
e0:d2:32:bc:b6:8f:4e:4d:79:ac:18:d5:f0:9f:3f:65:66:5e:
61:82:c8:ca:53:aa:a1:1f:74:97:b6:cb:26:a7:08:a8:fd:66:
0f:86:dd:0c:16:f1:20:98:95:41:2b:c1:e3:99:6d:2a:83:98:
3b:9a:77:85:01:86:22:2c:94:d8:64:43:02:be:9f:72:5c:89:
c5:67:ce:65:13:4e:4d:4f:4c:fe:b0:75:03:60:93:2e:9d:b1:
67:00:a3:f4:81:3e:db:a2:24:26:87:3d:a1:1e:dd:01:92:50:
b2:43:66:b2:d9:c4:8b:7e:c8:27:13:9d:f5:6e:f5:24:05:26:
03:55:ee:9b:6b:e1:65:1b:29:c0:0f:9a:f6:51:46:71:2b:70:
fc:54:f6:79:0c:b1:1b:dd:6f:c5:f0:ff:b5:08:8e:09:08:22:
20:c6:c4:26:d8:3f:f5:da:42:78:f7:4b:66:e5:40:87:4f:48:
99:24:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:12:15 2026 by rpki-client