Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213791.roa
File: AS213791.roa (raw, json)
Hash identifier: WhfyOVzR+z21DBrD8YFNfTpPIPEhluJBUoITRvzR45Y=
Subject key identifier: E5:D0:AD:74:25:89:AB:BC:5A:CE:15:BC:E9:1B:0D:EC:14:F6:D2:0E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7A10B61D322ECAECB6DD2C67AAC57E028111FA2F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213791.roa
Signing time: Wed 10 Jun 2026 14:14:51 +0000
ROA not before: Wed 10 Jun 2026 14:09:51 +0000
ROA not after: Wed 09 Jun 2027 14:14:51 +0000
asID: 213791
IP address blocks: 91.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:10:b6:1d:32:2e:ca:ec:b6:dd:2c:67:aa:c5:7e:02:81:11:fa:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 10 14:09:51 2026 GMT
Not After : Jun 9 14:14:51 2027 GMT
Subject: CN=E5D0AD742589ABBC5ACE15BCE91B0DEC14F6D20E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:2f:71:3a:86:06:86:10:19:55:5a:bc:68:
ff:c5:f7:49:3f:42:38:c0:77:89:93:d2:22:20:27:
8c:3b:3b:05:4e:01:e3:62:b6:fa:b6:a2:6c:aa:e2:
75:56:b7:84:f7:ce:3e:38:53:d2:5a:45:bb:5d:e6:
f0:66:ab:2c:1f:4c:a1:ae:47:bb:9f:9a:4e:ec:26:
c9:a7:4c:63:1d:7a:9c:48:6a:f1:81:87:4c:64:dd:
65:60:ae:e8:b5:70:01:1b:ae:24:66:b7:54:cc:ee:
ff:49:4a:2a:ef:18:4b:53:b8:4a:4c:c4:cd:cf:80:
f5:e8:24:3f:f5:21:b4:d3:08:89:0e:82:34:42:d8:
f9:01:36:06:69:af:8e:b1:ab:ca:b7:c5:48:25:be:
04:8a:28:bc:f9:63:e0:40:15:d2:71:e2:ca:04:1f:
fb:31:bf:54:58:b6:58:b4:cc:8d:ae:32:ee:15:ba:
10:c1:c3:b9:dd:31:de:fd:1d:89:28:19:9a:e6:59:
11:3d:94:06:3e:f3:5a:50:5b:dd:77:f8:3e:77:f0:
b2:10:ca:24:44:7e:66:98:ae:4f:a1:7e:d5:96:dd:
69:69:53:e8:bd:0d:6b:17:37:5b:1f:52:0d:cc:26:
67:57:d3:79:ed:6e:9b:32:61:26:7b:b3:ca:a1:df:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:AD:74:25:89:AB:BC:5A:CE:15:BC:E9:1B:0D:EC:14:F6:D2:0E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0f:46:c4:88:38:35:86:0b:ca:41:b9:ee:9a:2c:3c:77:ff:
26:db:fd:b8:67:b7:29:1f:49:72:22:fd:f4:aa:d0:63:07:cc:
f1:98:f0:61:ae:bb:86:19:bd:34:24:1e:cd:c3:36:13:9f:0e:
3c:6b:37:97:c8:b3:69:1a:0e:dc:76:93:76:67:2d:33:eb:91:
4b:70:8d:f0:b9:41:1a:4a:20:b9:cd:a5:9b:bb:a6:cf:0b:19:
e5:bd:ed:0b:30:11:27:77:36:78:a6:6d:83:0e:ce:1d:c9:3d:
ec:ec:1a:c6:4d:cd:eb:88:3e:7e:26:bd:56:0f:93:86:27:79:
e8:ae:83:81:ea:13:79:bb:7b:66:b2:ad:45:a1:27:33:8d:17:
fa:a2:90:95:36:e0:1d:46:cf:47:4c:df:36:c8:21:77:22:8b:
fb:14:89:fc:e4:e4:87:53:06:f5:c6:7b:66:3a:a6:1b:60:ec:
5c:6f:30:9c:f8:49:28:ae:17:3f:a7:3d:4c:58:93:ef:1b:a1:
c2:c1:00:2d:1c:1b:8d:62:21:09:14:4d:5d:c6:0a:69:20:5c:
fd:5f:88:3b:f2:0b:26:27:e3:83:8b:df:b9:d3:e7:c9:2c:85:
d7:c7:41:dc:b8:2c:6a:0b:b7:51:c2:df:ca:f3:23:2e:09:7d:
12:89:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:20 2026 by rpki-client