Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213948.roa
File: AS213948.roa (raw, json)
Hash identifier: ImOenAoBEPEGjFopu3X79A9qlaao/47mDeWcL1V4D0Y=
Subject key identifier: A7:D0:F3:24:0F:E6:0A:D0:98:62:66:C1:9C:A8:09:A1:BE:B0:D4:B2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 460C9BEC8109071EA727A2D5FD07506CB4A31C5D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213948.roa
Signing time: Sun 06 Sep 2026 17:30:43 +0000
ROA not before: Sun 06 Sep 2026 17:25:43 +0000
ROA not after: Sun 05 Sep 2027 17:30:43 +0000
asID: 213948
IP address blocks: 2a13:9500:1d2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:0c:9b:ec:81:09:07:1e:a7:27:a2:d5:fd:07:50:6c:b4:a3:1c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 6 17:25:43 2026 GMT
Not After : Sep 5 17:30:43 2027 GMT
Subject: CN=A7D0F3240FE60AD0986266C19CA809A1BEB0D4B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:18:a8:31:63:80:7e:94:1f:6a:61:03:b1:
15:dd:3f:e6:cc:7e:82:e1:53:a6:90:ef:bc:b5:2d:
60:99:ad:14:70:a4:a0:e5:70:7d:fb:c9:73:c8:1a:
fe:5c:8a:37:91:91:e6:cc:31:c0:46:b9:6b:54:cd:
2f:ce:50:67:2d:88:78:24:dc:64:df:23:19:5c:a0:
ac:e3:b1:50:90:1c:e1:bf:ef:d8:21:36:9f:6e:6c:
c0:e0:4c:d8:a1:0a:fd:a1:02:dd:1b:da:4f:a2:d0:
e4:f6:f6:8e:7f:30:42:9f:5f:16:b1:6d:93:68:bf:
fa:4e:86:f6:4d:56:49:41:cf:28:14:20:f3:ad:16:
bc:3a:6d:f3:a3:d6:f5:54:45:ee:55:87:24:f4:c2:
ca:b4:1d:8b:01:e2:bb:89:59:f9:46:1a:e8:e0:80:
1d:f4:96:41:36:e7:07:91:70:6b:84:45:91:7d:fe:
3a:88:2f:6e:f4:87:70:27:37:0d:00:da:c8:d6:81:
cc:92:b5:f3:9f:c2:a1:ef:d5:30:49:47:af:33:2c:
aa:ae:61:30:76:99:6d:e3:11:a3:04:fd:08:21:5a:
84:6c:19:33:8d:4d:32:44:51:a2:25:86:0f:23:05:
c1:7a:d1:75:ff:37:6f:24:43:51:8c:94:fc:1d:6a:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D0:F3:24:0F:E6:0A:D0:98:62:66:C1:9C:A8:09:A1:BE:B0:D4:B2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1d2::/48
Signature Algorithm: sha256WithRSAEncryption
8f:25:7f:91:cc:42:3e:f1:5f:d7:21:65:55:f1:a4:e4:d3:33:
c8:18:a5:34:33:17:55:33:9f:d8:43:e2:73:f4:56:97:9d:45:
87:c7:cb:d0:a3:d6:d6:a4:d3:55:fd:01:3c:e6:d9:4c:63:59:
f8:45:bf:63:05:8d:80:5b:dc:6a:71:37:b0:e2:f9:1d:62:83:
cd:89:7b:a0:3b:d0:7b:fa:17:53:be:4c:75:54:89:b0:fc:31:
7a:1d:7c:b4:28:1c:1c:72:39:c5:2e:48:ab:a7:f5:48:1d:d1:
8d:b8:40:aa:ff:4a:cb:34:95:38:b7:40:27:09:22:26:e9:a3:
2b:8d:56:f4:ca:f0:09:2f:7d:d7:e2:73:55:ad:ea:d7:4f:19:
f2:c3:79:53:80:14:d9:98:1b:51:14:8c:97:b9:7f:73:77:18:
ce:44:e9:d2:a7:3d:1b:e8:ea:cd:86:27:e9:10:c8:e5:73:da:
58:05:c7:2b:e1:2d:18:46:8a:5f:8c:79:22:d1:0e:6a:d3:c0:
98:0e:aa:44:5d:a3:84:aa:37:a7:0e:ea:e3:12:d6:ba:c4:8c:
ef:c2:55:b4:49:6d:7a:80:87:b0:8a:5c:a1:cf:56:ff:3f:f5:
41:9a:48:1d:c4:14:ac:ff:f9:75:00:b4:cb:40:0e:36:37:1f:
8b:54:26:a3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIURgyb7IEJBx6nJ6LV/QdQbLSjHF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MDYxNzI1NDNaFw0yNzA5MDUxNzMwNDNaMDMxMTAvBgNV
BAMTKEE3RDBGMzI0MEZFNjBBRDA5ODYyNjZDMTlDQTgwOUExQkVCMEQ0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVxioMWOAfpQfamEDsRXdP+bM
foLhU6aQ77y1LWCZrRRwpKDlcH37yXPIGv5cijeRkebMMcBGuWtUzS/OUGctiHgk
3GTfIxlcoKzjsVCQHOG/79ghNp9ubMDgTNihCv2hAt0b2k+i0OT29o5/MEKfXxax
bZNov/pOhvZNVklBzygUIPOtFrw6bfOj1vVURe5VhyT0wsq0HYsB4ruJWflGGujg
gB30lkE25weRcGuERZF9/jqIL270h3AnNw0A2sjWgcyStfOfwqHv1TBJR68zLKqu
YTB2mW3jEaME/QghWoRsGTONTTJEUaIlhg8jBcF60XX/N28kQ1GMlPwdak3JAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUp9DzJA/mCtCYYmbBnKgJob6w1LIwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzOTQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAHSMA0GCSqGSIb3DQEBCwUAA4IBAQCPJX+RzEI+8V/XIWVV8aTk0zPIGKU0MxdV
M5/YQ+Jz9FaXnUWHx8vQo9bWpNNV/QE85tlMY1n4Rb9jBY2AW9xqcTew4vkdYoPN
iXugO9B7+hdTvkx1VImw/DF6HXy0KBwccjnFLkirp/VIHdGNuECq/0rLNJU4t0An
CSIm6aMrjVb0yvAJL33X4nNVrerXTxnyw3lTgBTZmBtRFIyXuX9zdxjOROnSpz0b
6OrNhifpEMjlc9pYBccr4S0YRopfjHki0Q5q08CYDqpEXaOEqjenDurjEta6xIzv
wlW0SW16gIewilyhz1b/P/VBmkgdxBSs//l1ALTLQA42Nx+LVCaj
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:41 2026 by rpki-client