Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214393.roa
File: AS214393.roa (raw, json)
Hash identifier: EN8U/M/kaGJGC3uQiQbvkPG8srXH+9b5PQJeHZB19do=
Subject key identifier: E6:81:DA:C6:94:C2:A8:05:60:B4:C2:64:DA:74:75:1F:B1:D9:48:79
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3DA29168FF6D9FDDE36EFE98F23D1FE95C595569
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214393.roa
Signing time: Sun 31 May 2026 11:47:19 +0000
ROA not before: Sun 31 May 2026 11:42:19 +0000
ROA not after: Sun 30 May 2027 11:47:19 +0000
asID: 214393
IP address blocks: 2a13:9500:9e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a2:91:68:ff:6d:9f:dd:e3:6e:fe:98:f2:3d:1f:e9:5c:59:55:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 31 11:42:19 2026 GMT
Not After : May 30 11:47:19 2027 GMT
Subject: CN=E681DAC694C2A80560B4C264DA74751FB1D94879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:9c:89:2a:a8:16:df:32:6e:47:0e:ac:22:
58:43:a0:79:f3:03:5c:23:4f:5b:da:73:1a:a2:73:
c0:00:ac:15:4a:0c:72:4f:7c:9e:fa:aa:13:6d:36:
60:fa:6f:01:3d:5f:c6:d2:ef:9c:47:bb:5c:78:b0:
62:f8:d1:71:9d:ee:fc:12:41:7b:6a:15:db:f2:84:
95:15:99:9a:46:2f:9b:75:c0:98:8e:a3:65:a0:bf:
cb:db:18:dc:57:38:a7:a6:a9:c6:c2:ae:5e:d0:99:
70:85:dd:3a:90:9e:dd:b9:b9:6f:52:39:0b:b8:b6:
7b:a0:ed:5e:29:00:bc:e9:4a:de:f5:cf:5d:c4:52:
9b:74:ee:0c:40:f9:c7:c1:04:e9:c5:9f:7e:32:ce:
54:51:e0:10:83:a2:87:3a:e3:c6:b7:25:ed:3f:9d:
c2:bc:ef:ab:2f:84:e4:d0:13:6a:71:5d:98:4a:8f:
4d:62:38:35:36:e0:c7:89:94:81:ba:d0:03:6d:14:
4a:33:18:e9:47:32:dd:bf:28:3c:80:82:73:9f:8e:
90:54:be:19:b0:4d:42:b8:19:32:5b:3b:3e:ea:f8:
2e:70:66:de:4e:14:89:67:e3:ba:93:e6:3e:68:d9:
d7:bd:87:44:d8:91:09:ee:5a:92:e9:c7:6b:80:ca:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:81:DA:C6:94:C2:A8:05:60:B4:C2:64:DA:74:75:1F:B1:D9:48:79
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:9e::/48
Signature Algorithm: sha256WithRSAEncryption
89:79:b5:94:be:f5:ad:27:21:a4:3f:9d:5b:58:e6:ff:64:52:
de:e9:2a:d6:33:9a:2a:60:1c:c6:7f:55:97:8d:55:bd:9a:db:
8b:62:a7:38:2f:b3:b6:6c:63:19:b8:f5:23:61:f9:9b:21:52:
c7:1d:67:e4:87:1d:8b:92:ca:d8:ae:41:05:a1:3f:e6:d1:8f:
5f:08:11:08:7a:1e:e4:5e:0e:71:d5:43:79:22:5d:b3:ce:ba:
aa:f0:9f:4c:f3:93:64:64:ba:28:b3:46:20:eb:51:47:95:61:
a6:91:cb:6d:7f:85:b9:61:61:e6:08:a3:25:3d:4c:da:6a:f8:
c8:58:f0:97:cc:ff:a9:69:d4:19:0b:39:23:91:5c:3e:e3:c0:
80:0c:fc:48:cc:e0:63:e3:f0:89:81:2c:9f:fb:62:34:61:45:
2b:2d:d7:ff:78:2d:47:60:47:c3:c5:51:f8:54:18:5c:39:1e:
0b:c0:77:89:0c:5d:1a:18:b7:c8:a5:f9:cb:ae:8a:a8:17:bf:
7c:ae:3e:bc:82:a2:7a:31:d4:53:70:2d:78:e8:f7:b1:43:6a:
4e:27:cf:c9:63:91:39:ed:55:6d:53:a9:9e:39:c7:01:77:79:
ad:f4:22:b7:26:17:67:ad:e0:70:c7:56:f2:1d:4a:8d:b7:ef:
3d:02:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:43:49 2026 by rpki-client