Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213840.roa
File: AS213840.roa (raw, json)
Hash identifier: JmvTEvZarVN+a+/n2GRMH8lM/9VufroJsDXQZ9DyQY8=
Subject key identifier: A0:3D:5D:D4:C6:FB:76:91:00:2A:03:7D:A3:F0:57:07:5F:31:0B:D6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4305C434295F57C9B5791157429C0B108A70E67B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213840.roa
Signing time: Sun 07 Jun 2026 08:09:50 +0000
ROA not before: Sun 07 Jun 2026 08:04:50 +0000
ROA not after: Sun 06 Jun 2027 08:09:50 +0000
asID: 213840
IP address blocks: 178.83.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:05:c4:34:29:5f:57:c9:b5:79:11:57:42:9c:0b:10:8a:70:e6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 7 08:04:50 2026 GMT
Not After : Jun 6 08:09:50 2027 GMT
Subject: CN=A03D5DD4C6FB7691002A037DA3F057075F310BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:a4:b4:02:9a:c3:b5:31:8d:59:9c:b6:8d:
76:4b:07:fe:18:ad:ff:a4:cd:cc:76:fc:47:87:4e:
5e:eb:b9:b2:94:ad:fe:a4:69:79:db:f5:e5:a2:b4:
7b:8c:7d:3c:f0:45:53:af:97:79:8e:f8:76:3a:53:
56:e3:f2:93:9d:83:95:0e:38:6b:8d:dc:59:f4:13:
80:b7:d3:42:5f:40:36:95:b3:7b:6e:33:8a:f9:e3:
e8:c3:8d:88:73:fa:36:cd:54:ad:d3:0b:89:38:46:
09:12:4c:89:f5:f7:df:e9:69:5c:68:ef:45:25:f5:
e2:64:b9:85:75:f5:5f:3c:0a:c6:79:be:5a:2b:59:
a6:46:32:ea:d9:22:45:28:66:24:c9:06:30:aa:b4:
61:77:2b:bc:cf:f0:a0:f8:51:8b:f1:5c:10:f0:60:
97:41:c2:d1:de:54:be:77:15:92:8e:40:a0:e5:76:
53:50:f4:10:b4:14:4e:53:dd:41:74:f5:13:4f:6c:
e3:89:27:32:25:c5:e8:7d:d0:bb:95:52:7b:89:e2:
6a:6b:a7:68:5f:9f:c1:91:14:9c:d7:01:15:9d:bb:
26:48:65:b6:96:30:b7:9c:47:8e:f5:d2:f5:f4:ce:
89:11:88:b5:41:be:b0:fd:20:44:7c:a7:59:c4:1c:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3D:5D:D4:C6:FB:76:91:00:2A:03:7D:A3:F0:57:07:5F:31:0B:D6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.203.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a5:e6:b3:ff:7d:e3:ae:b1:ef:75:6d:9f:04:77:9d:7d:5b:
e7:11:0e:4f:07:d7:a4:f0:75:51:bc:ec:1e:09:0b:1c:f6:1e:
38:9a:a0:8c:88:f6:c8:97:07:46:34:ed:ae:73:c7:d9:cf:b7:
9f:6c:47:88:91:9a:1a:9f:10:59:5a:7f:8c:41:90:c1:fc:3d:
16:81:9a:97:a5:bb:b3:61:51:b6:f3:ea:fe:83:b6:38:97:89:
c6:2c:7a:47:c4:c5:50:ce:c2:db:f9:6c:62:4b:9a:3b:11:13:
86:76:38:2b:12:5f:bf:da:9f:69:55:75:22:17:5f:cb:2e:1a:
13:b2:6f:42:08:b4:49:d9:44:06:93:05:19:a0:87:cf:4d:20:
b4:58:c2:b0:5e:8e:1d:63:12:ec:15:a7:53:b4:f4:66:61:e1:
b1:33:a8:12:0c:f5:63:17:7b:8c:4f:e3:f2:8e:b8:c9:9e:80:
cd:b9:ee:22:8a:0b:e8:40:dd:03:03:e3:3f:ee:0e:57:e6:95:
c7:5b:ae:a7:ad:af:7e:ed:96:12:9c:a2:de:d6:2a:c8:d0:5f:
05:d0:2d:59:7d:16:33:10:76:90:37:1b:35:f8:ab:fc:13:91:
72:ab:a6:27:69:bf:49:31:63:94:e4:e3:26:c9:1e:9f:0a:74:
a9:37:c8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:50 2026 by rpki-client