Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213994.roa
File: AS213994.roa (raw, json)
Hash identifier: bmo18z9Uhre+g0wJN4T9ZJGldqrv9FXyf+/kik3es1A=
Subject key identifier: 4A:F9:A2:52:D1:F2:8B:9F:FC:E5:7C:55:8F:4E:FD:B4:62:FB:F5:83
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 465E1558E6CB4BE64658227A7B6167ADEACD447F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213994.roa
Signing time: Fri 03 Apr 2026 15:23:25 +0000
ROA not before: Fri 03 Apr 2026 15:18:25 +0000
ROA not after: Fri 02 Apr 2027 15:23:25 +0000
asID: 213994
IP address blocks: 82.25.10.0/24 maxlen: 24
2a13:9500:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5e:15:58:e6:cb:4b:e6:46:58:22:7a:7b:61:67:ad:ea:cd:44:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 3 15:18:25 2026 GMT
Not After : Apr 2 15:23:25 2027 GMT
Subject: CN=4AF9A252D1F28B9FFCE57C558F4EFDB462FBF583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:a0:ad:21:c5:6f:2d:35:9e:9d:8f:4f:b2:
e6:5d:00:8f:0a:f1:67:bc:37:92:19:96:26:20:33:
ce:e3:2b:c3:ed:02:75:68:f9:73:09:9e:69:22:f6:
7b:ea:e4:bf:19:47:09:17:9c:b8:a7:b0:33:cc:c7:
97:03:a0:f8:18:4d:44:3e:5b:63:43:e4:76:61:46:
af:99:2b:9d:04:b1:ff:61:cf:07:80:3c:49:83:81:
40:5c:77:b1:88:9b:68:6e:f9:8e:64:7a:01:9e:8c:
25:78:a9:30:ae:04:2d:61:a5:3b:c6:a6:30:dd:42:
f4:ba:13:20:99:93:a9:37:d3:10:6a:6c:38:b3:6a:
a0:8d:a7:c7:7b:4f:e0:24:53:df:79:98:f3:89:93:
68:3f:45:cc:42:9f:5c:86:1f:26:b7:81:13:40:ba:
7c:b3:8a:a0:c6:da:bb:20:e1:a9:13:f5:37:57:cf:
16:02:73:1b:26:a2:cb:02:5c:1e:64:33:40:d3:09:
79:42:bc:42:1c:3c:79:63:76:1a:f9:9b:e6:4f:1e:
0e:ae:da:57:5f:f7:55:11:09:29:05:05:2a:4f:59:
9b:70:c7:64:1b:1b:ad:7a:b2:19:5f:3c:98:32:da:
8f:ed:17:63:7c:eb:b9:37:7b:92:06:60:a7:ca:b2:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F9:A2:52:D1:F2:8B:9F:FC:E5:7C:55:8F:4E:FD:B4:62:FB:F5:83
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.10.0/24
IPv6:
2a13:9500:100::/48
Signature Algorithm: sha256WithRSAEncryption
a7:6e:2e:07:59:d9:c1:0f:f8:4a:04:26:25:fd:5a:d1:6c:a5:
2e:b2:f3:f9:f1:9b:68:47:46:1c:d9:10:61:4c:86:d3:2e:12:
1d:fd:46:e8:5b:c9:f8:85:05:0b:d2:35:80:5f:02:dc:79:56:
10:a3:98:1a:44:75:b0:7c:7a:b0:9d:e8:4e:ed:9a:bd:fb:37:
a1:4c:46:fc:24:48:2c:93:7b:2c:bc:0d:70:3f:b0:49:54:31:
94:dc:cc:ed:db:13:0c:9e:b1:44:2b:46:04:ed:eb:eb:00:bd:
bc:03:7a:38:66:8c:f4:93:f7:1d:86:f2:ff:86:ff:3f:93:37:
7a:6e:79:1b:33:72:08:2c:75:fc:58:f1:b8:b1:3e:3b:c0:65:
96:59:2d:54:4a:dd:c9:47:1a:06:53:f7:a4:48:58:10:de:1a:
9b:f1:d2:10:6f:41:98:13:04:ab:bb:6a:0e:31:18:f9:fe:c9:
e1:8f:90:8e:cd:08:a0:ba:12:f3:c2:c4:73:88:09:2f:60:d1:
79:b6:b4:6b:7c:e9:03:de:7f:72:57:6e:33:a6:47:2d:af:84:
f4:13:55:6a:86:f2:c6:c3:ea:b2:dd:8f:95:a7:ef:e5:8c:30:
fe:84:41:8d:87:0a:b1:e2:b4:a7:ac:2d:b4:4d:85:6b:16:ba:
73:1b:91:49
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIURl4VWObLS+ZGWCJ6e2FnrerNRH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MDMxNTE4MjVaFw0yNzA0MDIxNTIzMjVaMDMxMTAvBgNV
BAMTKDRBRjlBMjUyRDFGMjhCOUZGQ0U1N0M1NThGNEVGREI0NjJGQkY1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83aCtIcVvLTWenY9PsuZdAI8K
8We8N5IZliYgM87jK8PtAnVo+XMJnmki9nvq5L8ZRwkXnLinsDPMx5cDoPgYTUQ+
W2ND5HZhRq+ZK50Esf9hzweAPEmDgUBcd7GIm2hu+Y5kegGejCV4qTCuBC1hpTvG
pjDdQvS6EyCZk6k30xBqbDizaqCNp8d7T+AkU995mPOJk2g/RcxCn1yGHya3gRNA
unyziqDG2rsg4akT9TdXzxYCcxsmossCXB5kM0DTCXlCvEIcPHljdhr5m+ZPHg6u
2ldf91URCSkFBSpPWZtwx2QbG616shlfPJgy2o/tF2N867k3e5IGYKfKsmOLAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUSvmiUtHyi5/85XxVj079tGL79YMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzOTk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUhkK
MA8EAgACMAkDBwAqE5UAAQAwDQYJKoZIhvcNAQELBQADggEBAKduLgdZ2cEP+EoE
JiX9WtFspS6y8/nxm2hHRhzZEGFMhtMuEh39RuhbyfiFBQvSNYBfAtx5VhCjmBpE
dbB8erCd6E7tmr37N6FMRvwkSCyTeyy8DXA/sElUMZTczO3bEwyesUQrRgTt6+sA
vbwDejhmjPST9x2G8v+G/z+TN3pueRszcggsdfxY8bixPjvAZZZZLVRK3clHGgZT
96RIWBDeGpvx0hBvQZgTBKu7ag4xGPn+yeGPkI7NCKC6EvPCxHOICS9g0Xm2tGt8
6QPef3JXbjOmRy2vhPQTVWqG8sbD6rLdj5Wn7+WMMP6EQY2HCrHitKesLbRNhWsW
unMbkUk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:04:34 2026 by rpki-client