Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213423.roa
File: AS213423.roa (raw, json)
Hash identifier: fYON7EWrGWaf1F7uxKmtlGjkQXutau5j1vB9uHPH5ig=
Subject key identifier: 7B:48:E0:6A:7A:73:63:AE:72:1C:AE:9A:21:8B:F5:06:8B:D3:0E:62
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5534CFF0F0F7F74532D97B3114FA8F2447E3277D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213423.roa
Signing time: Tue 03 Feb 2026 18:08:21 +0000
ROA not before: Tue 03 Feb 2026 18:03:21 +0000
ROA not after: Tue 02 Feb 2027 18:08:21 +0000
asID: 213423
IP address blocks: 2a0f:85c1:b7b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:34:cf:f0:f0:f7:f7:45:32:d9:7b:31:14:fa:8f:24:47:e3:27:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 3 18:03:21 2026 GMT
Not After : Feb 2 18:08:21 2027 GMT
Subject: CN=7B48E06A7A7363AE721CAE9A218BF5068BD30E62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:5f:24:83:30:ed:57:d1:32:d6:f5:51:6f:
04:85:d6:c4:e0:5e:6a:0c:17:db:6d:4e:ea:30:52:
a0:54:c5:93:ed:09:23:72:fa:46:cc:22:22:45:4e:
22:39:fe:a0:63:46:d2:b9:0a:fa:81:82:40:06:7a:
ae:3d:2b:8f:f3:26:b2:90:7d:fe:1c:0b:15:9d:74:
20:c2:55:ce:8a:5c:90:0f:c6:02:5a:6c:e1:97:1d:
ca:43:74:dc:9a:e5:d3:35:f8:14:e5:02:03:bb:dd:
ff:cc:a3:1d:47:77:5b:ff:62:21:cd:a6:b9:b2:23:
2a:19:53:a4:04:c9:19:4f:9b:57:ad:cd:ff:75:6d:
5d:1f:94:ec:2e:04:48:51:91:85:3b:c2:03:6d:a5:
03:d6:cb:b8:7e:1a:78:7f:2c:18:51:1d:4b:5f:ac:
ad:c3:73:85:74:ab:7a:ae:c1:6d:e9:62:75:45:06:
f5:6c:5f:6f:bb:41:3f:6e:ae:75:6f:31:7d:29:89:
c1:d4:48:fd:18:20:b9:1f:8f:a2:84:39:28:e8:dc:
9e:65:c6:32:73:00:00:e0:d6:c8:b8:e3:49:05:ee:
03:ad:dc:1c:b3:96:d5:71:0d:ef:d1:0a:cf:33:21:
ad:91:90:0a:31:2d:11:92:58:65:18:d3:3a:f0:4a:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:E0:6A:7A:73:63:AE:72:1C:AE:9A:21:8B:F5:06:8B:D3:0E:62
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b7b::/48
Signature Algorithm: sha256WithRSAEncryption
e8:f2:40:57:20:9f:b7:48:58:bd:5d:3d:90:51:2c:cb:8d:b7:
27:9d:1c:40:43:c8:a2:bc:16:a6:2d:b2:dc:0a:75:39:e5:2a:
43:cc:ba:ac:50:a4:06:d9:bd:90:7b:e4:d9:6a:56:0f:b6:f0:
19:3f:a0:86:30:e0:33:40:d4:68:a7:b6:fe:02:8b:a9:7b:ed:
a9:63:af:5e:33:49:b4:12:b0:36:31:4b:c8:35:b0:2a:a2:d6:
1f:43:e8:dd:79:6c:6b:27:65:6b:1b:1c:12:ac:30:a1:ad:0c:
cf:61:cd:20:9e:58:f0:b4:8b:0f:e2:3e:c2:14:09:82:42:27:
66:5b:cf:c2:75:16:f1:d9:d7:f5:42:24:a6:be:bd:e0:a2:51:
b7:d6:61:34:bd:b3:33:c9:00:e0:bc:01:76:3c:0a:66:f5:6c:
69:c1:20:70:6f:88:10:1d:99:f0:dd:87:70:e2:c2:37:d1:53:
52:c3:db:22:5e:e5:a0:76:60:09:24:f2:a5:ac:8d:0e:01:4a:
41:42:49:e3:3c:83:c0:53:a1:02:35:14:fe:0c:7c:53:d4:70:
b8:34:ea:b1:64:46:1e:4d:fd:25:9d:72:11:7f:d6:6d:cc:27:
a4:f7:6f:a3:72:6b:b4:67:10:12:22:30:82:0e:81:5e:37:33:
33:05:30:2b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUVTTP8PD390Uy2XsxFPqPJEfjJ30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjAyMDMxODAzMjFaFw0yNzAyMDIxODA4MjFaMDMxMTAvBgNV
BAMTKDdCNDhFMDZBN0E3MzYzQUU3MjFDQUU5QTIxOEJGNTA2OEJEMzBFNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRl8kgzDtV9Ey1vVRbwSF1sTg
XmoMF9ttTuowUqBUxZPtCSNy+kbMIiJFTiI5/qBjRtK5CvqBgkAGeq49K4/zJrKQ
ff4cCxWddCDCVc6KXJAPxgJabOGXHcpDdNya5dM1+BTlAgO73f/Mox1Hd1v/YiHN
prmyIyoZU6QEyRlPm1etzf91bV0flOwuBEhRkYU7wgNtpQPWy7h+Gnh/LBhRHUtf
rK3Dc4V0q3quwW3pYnVFBvVsX2+7QT9urnVvMX0picHUSP0YILkfj6KEOSjo3J5l
xjJzAADg1si440kF7gOt3ByzltVxDe/RCs8zIa2RkAoxLRGSWGUY0zrwSmr5AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUe0jganpzY65yHK6aIYv1BovTDmIwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNDIzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQt7MA0GCSqGSIb3DQEBCwUAA4IBAQDo8kBXIJ+3SFi9XT2QUSzLjbcnnRxAQ8ii
vBamLbLcCnU55SpDzLqsUKQG2b2Qe+TZalYPtvAZP6CGMOAzQNRop7b+Aoupe+2p
Y69eM0m0ErA2MUvINbAqotYfQ+jdeWxrJ2VrGxwSrDChrQzPYc0gnljwtIsP4j7C
FAmCQidmW8/CdRbx2df1QiSmvr3golG31mE0vbMzyQDgvAF2PApm9WxpwSBwb4gQ
HZnw3Ydw4sI30VNSw9siXuWgdmAJJPKlrI0OAUpBQknjPIPAU6ECNRT+DHxT1HC4
NOqxZEYeTf0lnXIRf9ZtzCek92+jcmu0ZxASIjCCDoFeNzMzBTAr
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:37:11 2026 by rpki-client