Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213693.roa
File: AS213693.roa (raw, json)
Hash identifier: +ExGYlSZEF9Uwl/9je3zDhCi3QKQAsvlNsPkaUHmJKg=
Subject key identifier: 14:57:F3:39:41:38:BA:0A:F1:F6:6F:DD:2D:FE:F1:1F:F0:BC:97:77
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 78D15431918063245A7D6459D4B919A2B0D1C25B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213693.roa
Signing time: Mon 09 Feb 2026 23:08:23 +0000
ROA not before: Mon 09 Feb 2026 23:03:23 +0000
ROA not after: Mon 08 Feb 2027 23:08:23 +0000
asID: 213693
IP address blocks: 2a0f:85c1:b36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d1:54:31:91:80:63:24:5a:7d:64:59:d4:b9:19:a2:b0:d1:c2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 9 23:03:23 2026 GMT
Not After : Feb 8 23:08:23 2027 GMT
Subject: CN=1457F3394138BA0AF1F66FDD2DFEF11FF0BC9777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:2d:07:32:9b:4c:d1:fc:74:c9:53:e0:79:
bb:d2:c7:a7:4d:51:36:b3:da:09:83:ca:85:90:c8:
31:f8:75:84:22:c8:d8:b6:0d:59:28:18:90:c8:46:
9d:e2:09:42:42:e5:98:78:f4:2e:e2:3c:b3:cc:51:
d6:68:2c:64:9a:f6:70:18:db:56:60:49:14:6f:e9:
b8:9e:2b:a8:68:17:05:fe:02:77:c7:4e:7a:c4:02:
98:96:70:56:2e:0b:5b:2a:be:01:db:8a:0a:85:59:
5b:45:09:88:2d:76:6d:06:c1:cd:c3:2e:11:26:73:
29:51:9c:34:76:6e:01:e1:d6:62:71:95:d5:8c:e6:
ff:de:d6:b3:ae:4a:6e:47:57:23:cf:a6:89:ba:f6:
f4:b1:b4:6e:e3:0d:45:88:f0:d9:67:26:d5:39:15:
8e:28:4a:69:e1:d5:61:cc:e1:a4:55:1e:dd:66:23:
c8:fe:82:a2:00:2b:92:0a:aa:61:cf:d4:98:5e:8d:
59:d8:79:60:a2:11:87:43:37:92:06:cd:df:30:8e:
c3:c6:e1:a0:df:d8:eb:35:2a:f1:13:b2:60:6f:34:
2d:ca:92:9b:e2:16:20:7d:14:91:81:13:d0:73:f4:
77:ac:d0:b4:f3:9d:70:df:bd:25:3b:20:43:0b:1f:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:57:F3:39:41:38:BA:0A:F1:F6:6F:DD:2D:FE:F1:1F:F0:BC:97:77
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b36::/48
Signature Algorithm: sha256WithRSAEncryption
5f:65:2f:94:dd:ee:2b:03:ef:15:bc:a9:d8:4d:ea:0c:67:3f:
ab:94:f1:59:6f:75:a8:bc:a6:57:f6:09:85:ab:ac:be:8e:54:
44:1e:97:4a:1c:f4:83:14:e7:14:37:75:9d:72:22:07:b2:2f:
79:aa:22:ed:f7:87:7b:ae:a6:58:fe:b3:a3:57:55:59:4e:4e:
91:88:43:ab:38:39:bb:23:a8:65:56:82:3b:72:d6:60:09:36:
dc:1f:77:b5:f9:15:f1:53:71:23:73:13:0c:2c:38:c5:05:09:
7e:b4:4d:03:1d:0a:fc:1d:93:69:93:66:85:6c:11:b0:d2:2f:
9c:8b:28:34:18:28:79:6d:78:02:a3:94:d3:7c:15:bc:37:7b:
1c:e7:0e:ed:ad:aa:66:c0:a8:7f:26:d4:52:8c:8f:4b:03:98:
ce:82:e2:ca:cc:b8:98:84:da:8b:63:ce:b8:7b:4b:97:67:12:
51:2e:ba:d4:d1:46:ea:6c:f8:7c:79:d9:dc:08:2c:a9:98:4b:
0d:38:3e:a5:35:dd:ac:6a:6c:d2:74:42:52:bf:b3:ea:2d:73:
c5:79:a3:10:db:64:ef:91:e4:49:0e:76:72:2b:16:b6:bc:94:
25:92:dc:60:c3:f4:b7:1c:e2:0b:ec:91:0b:60:dd:00:5d:9c:
25:55:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:38 2026 by rpki-client