Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213690.roa
File: AS213690.roa (raw, json)
Hash identifier: EBTvSnRwUwhWPTx+TXwkxefigzrqz2Ch9LLZePEHhg4=
Subject key identifier: 00:21:4A:18:4C:A1:6E:65:B3:B6:82:27:D7:7E:3D:77:80:00:22:9E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 29E2D01307DFF5ED7DEEFBA8BEC4BFE4CEB4EA7E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213690.roa
Signing time: Tue 09 Jun 2026 09:47:31 +0000
ROA not before: Tue 09 Jun 2026 09:42:31 +0000
ROA not after: Tue 08 Jun 2027 09:47:31 +0000
asID: 213690
IP address blocks: 2a13:9500:ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e2:d0:13:07:df:f5:ed:7d:ee:fb:a8:be:c4:bf:e4:ce:b4:ea:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 9 09:42:31 2026 GMT
Not After : Jun 8 09:47:31 2027 GMT
Subject: CN=00214A184CA16E65B3B68227D77E3D778000229E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:1d:b5:12:d6:f8:1d:4c:ca:c0:5b:8e:1a:
d1:4c:05:2f:f2:5a:0d:4a:3f:e9:c4:d9:f9:c1:4e:
1f:97:8e:b0:44:49:c5:fc:b8:5a:70:19:42:5c:3b:
b3:2b:00:d1:38:44:23:ae:37:6e:8c:57:14:f9:b6:
b7:3a:14:7c:84:a1:70:61:fa:0e:d6:f0:37:b4:03:
44:d9:14:06:b8:e6:b6:08:c0:d6:24:02:4e:61:2e:
9e:ce:0e:06:48:73:f8:0f:92:11:e6:fb:43:e2:aa:
c3:e8:ad:7b:05:ce:69:e5:06:36:74:0c:bc:22:88:
e3:c6:f6:21:fb:5b:9d:48:80:9f:59:ff:4a:b2:2e:
eb:19:2d:e2:37:f4:73:fd:eb:c4:69:7a:20:20:82:
ae:6b:59:1b:e7:ae:4c:6a:f5:77:aa:45:dd:00:ed:
ba:5b:ec:d7:da:a2:bc:2f:04:b8:2a:3a:e4:07:ae:
75:f6:c3:f9:d3:eb:30:b4:bb:f8:73:7b:d5:0d:f4:
8f:8f:4e:0f:f6:37:4b:69:e4:33:65:61:31:b8:d4:
d2:19:e3:a4:cb:de:21:60:71:9d:98:e4:ea:9d:c4:
fb:84:8b:10:1a:30:39:64:fc:ea:18:40:3f:f4:7d:
99:fa:c7:1d:fe:97:41:c1:c1:39:ac:36:82:d0:6d:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:4A:18:4C:A1:6E:65:B3:B6:82:27:D7:7E:3D:77:80:00:22:9E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:ab::/48
Signature Algorithm: sha256WithRSAEncryption
97:db:ab:92:d5:91:c5:25:dc:13:be:f9:f2:af:65:68:24:a0:
9b:7e:fb:f2:ff:26:7a:21:26:43:e1:8a:56:39:ee:12:0d:0d:
3b:96:55:08:33:0d:1d:09:dd:33:0c:ae:d5:51:3b:01:7c:3e:
9f:76:48:bd:84:4b:48:fb:44:4f:94:1b:70:f5:6a:61:fa:6b:
66:11:7e:2b:b7:ef:69:26:b5:95:9c:08:5e:3c:cd:d8:cf:df:
73:2d:5f:69:93:d9:d7:9b:66:21:a3:b4:16:1b:cc:f9:df:bf:
3e:21:7d:f0:5d:00:b0:f4:cf:7d:b3:87:e4:6a:5a:60:59:fa:
1c:ec:5c:01:9d:d1:75:71:a3:15:08:bf:7e:7c:67:8a:ba:34:
4d:20:a8:9a:5f:07:41:aa:28:43:6e:ba:7d:6f:0f:dc:5b:ae:
9c:9f:71:6d:8b:75:6b:bc:2e:1d:10:51:a9:01:86:8a:7b:eb:
94:0b:13:09:e1:43:1d:84:18:f2:5a:0b:21:f0:3e:d8:96:4c:
8f:ba:98:68:8b:9e:fa:7a:60:48:71:93:9e:4b:fe:3c:92:a1:
cb:61:ee:87:de:0c:9b:c3:91:8e:4d:6d:ed:95:11:c9:67:35:
85:0e:ef:fd:c3:84:07:cb:32:56:84:d5:61:55:fd:01:47:16:
be:8d:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:41 2026 by rpki-client