Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213738.roa
File: AS213738.roa (raw, json)
Hash identifier: 7pvY2wKHFPlcYKPbYd4BZX3dCRHx7iUnR3zDol1sodw=
Subject key identifier: 4A:6E:05:87:24:8D:42:99:2A:6E:C8:FA:11:12:C5:9A:97:6D:4A:E9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5C35D3B3DC10088E11308F97EB2A7C4C45E7BFDD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213738.roa
Signing time: Wed 22 Oct 2025 06:31:01 +0000
ROA not before: Wed 22 Oct 2025 06:26:01 +0000
ROA not after: Wed 21 Oct 2026 06:31:01 +0000
asID: 213738
IP address blocks: 2a13:9500:fd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:35:d3:b3:dc:10:08:8e:11:30:8f:97:eb:2a:7c:4c:45:e7:bf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 22 06:26:01 2025 GMT
Not After : Oct 21 06:31:01 2026 GMT
Subject: CN=4A6E0587248D42992A6EC8FA1112C59A976D4AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cc:59:78:29:f7:42:34:23:a3:bf:4f:c5:6a:
4a:48:96:82:39:2b:d1:1f:9d:3f:37:cd:31:cb:fd:
56:55:7e:61:f2:44:7d:56:8f:d7:b9:e4:52:30:97:
9a:7f:40:a6:e7:5f:45:df:01:3e:4b:60:93:46:cf:
22:cd:10:f2:7a:e2:14:06:f7:4f:02:8d:fc:1d:98:
44:dc:54:85:ee:44:5b:d9:5c:0e:73:bd:0f:53:93:
b2:a4:10:95:62:8d:b1:45:e9:7b:68:aa:bd:49:e5:
f5:22:fb:e1:c6:9f:a9:0f:c0:7f:12:bd:ce:a2:4f:
08:55:70:9e:12:28:ec:9e:08:4d:28:31:66:15:d4:
4f:0e:9d:49:fb:43:89:82:84:79:ef:4a:ea:2a:68:
20:53:56:50:73:ab:c1:7e:83:6d:04:da:e8:ee:a5:
8a:f5:ae:42:48:15:1f:de:25:3a:fb:e6:16:40:7d:
64:3b:5d:f1:1e:dd:95:75:04:fa:c0:87:d2:25:bd:
76:17:bf:af:52:63:39:df:29:39:5e:ae:6a:14:83:
58:0c:a6:e3:dd:79:14:55:31:31:e6:a9:27:7a:c3:
c4:b5:c2:20:ef:1b:1b:4c:34:ac:74:d1:3e:11:7d:
ce:bc:72:c9:db:7c:13:ac:31:49:fc:94:18:ed:92:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:05:87:24:8D:42:99:2A:6E:C8:FA:11:12:C5:9A:97:6D:4A:E9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:fd::/48
Signature Algorithm: sha256WithRSAEncryption
a4:b0:ad:3d:4d:09:5c:6f:fe:b5:9b:3a:06:c7:ca:db:40:10:
ae:6a:e2:83:08:ed:14:58:e1:77:13:76:f6:ad:75:b5:95:98:
e5:65:2d:8a:18:7e:5a:cb:82:3b:1f:a7:97:3f:60:20:87:27:
fb:6d:24:70:47:b7:cb:51:e6:ac:c7:6f:56:c4:17:6e:ae:3f:
f5:f9:75:0f:36:44:d5:53:89:95:80:45:84:ed:01:2e:fe:fc:
ce:dd:79:f6:25:d2:23:1d:f6:57:b6:e9:8f:de:5c:5c:ed:10:
07:d2:fb:e9:d2:8c:fb:c5:78:ae:31:90:13:1f:14:86:6f:9f:
c9:c9:f8:4e:89:ff:5c:a2:0e:e9:ec:82:b4:85:57:5d:d8:5b:
fc:e6:7b:d4:ac:06:1a:c1:b6:32:09:bc:1b:b4:20:47:e2:0c:
b0:31:be:69:63:e6:8f:8e:7f:fc:84:7c:13:a8:44:29:a9:7a:
26:fb:73:9d:71:20:0f:66:6d:87:fc:34:f9:6f:a3:6c:33:2c:
a9:07:5b:e0:5b:20:1d:1f:e1:4f:90:b4:7b:b0:2b:fe:c9:84:
48:26:c4:b0:8c:2c:10:c8:df:a6:7d:3d:76:ce:2a:91:62:1b:
3e:df:98:e4:d8:01:da:ae:80:32:e1:3f:eb:57:60:0c:ea:22:
d0:a7:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:21:27 2025 by rpki-client