Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213906.roa
File: AS213906.roa (raw, json)
Hash identifier: owjNB99gGMeM3p/n6g0cvFZWamy9dDrEkyZMD4AVE5Q=
Subject key identifier: 3C:8C:1D:5F:21:24:2A:C9:E9:23:FF:06:FE:9B:C1:6F:FE:58:D0:22
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 74BF484D0CE04C5624CB9550FE1B3E01E6C6DAED
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213906.roa
Signing time: Thu 10 Sep 2026 19:09:08 +0000
ROA not before: Thu 10 Sep 2026 19:04:08 +0000
ROA not after: Thu 09 Sep 2027 19:09:08 +0000
asID: 213906
IP address blocks: 2a0f:85c1:8c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:bf:48:4d:0c:e0:4c:56:24:cb:95:50:fe:1b:3e:01:e6:c6:da:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 10 19:04:08 2026 GMT
Not After : Sep 9 19:09:08 2027 GMT
Subject: CN=3C8C1D5F21242AC9E923FF06FE9BC16FFE58D022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:ea:4d:13:a8:7c:ba:1e:21:11:60:0b:3d:
c8:c5:9c:6e:65:0a:17:86:0b:0c:df:fb:43:4b:37:
5c:1c:28:89:28:b6:93:d5:37:80:4b:fa:72:aa:0c:
c5:69:7b:0a:65:7b:22:6b:14:b8:e8:df:f6:5b:06:
fb:c6:40:cd:97:09:a6:ca:fb:ee:14:bc:c8:00:c8:
8b:e0:90:38:51:26:a3:7b:16:05:c0:34:5b:a9:f8:
dd:4d:88:4e:21:c9:23:af:a4:dd:f4:a2:db:8b:db:
ae:16:2d:82:21:0c:53:b3:35:ca:99:80:2f:72:72:
1b:6c:65:93:38:bb:8c:9c:4b:0c:a2:55:75:94:99:
ee:13:88:f4:82:ec:8a:44:c5:da:96:1c:ac:57:bb:
93:27:28:1b:a0:d4:54:f8:18:86:81:bb:e2:3f:70:
5d:68:6f:67:b3:ad:6c:f5:68:43:c0:79:f5:32:49:
49:a7:a4:cc:d5:3a:e9:10:c1:48:63:a4:bc:06:b8:
50:0e:e5:c7:c8:4f:3e:c6:d1:0c:5a:66:ba:85:07:
5e:4d:00:d2:7d:7c:d7:33:64:45:df:81:e0:f8:4a:
95:9b:47:5d:e4:ce:e6:7a:23:bc:6f:ee:24:01:ec:
4d:18:00:40:40:da:fa:b6:88:c5:2f:ac:02:d0:0e:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:1D:5F:21:24:2A:C9:E9:23:FF:06:FE:9B:C1:6F:FE:58:D0:22
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8c5::/48
Signature Algorithm: sha256WithRSAEncryption
ba:35:74:d0:7f:ee:5a:9f:bd:db:b1:2a:2d:1f:ea:45:b7:d0:
ae:f9:ec:8c:42:54:c4:c9:e8:ab:b0:b6:ee:f0:20:ac:38:be:
31:1e:39:31:2e:e6:de:49:c8:b4:0a:c9:81:4a:bd:a2:b7:48:
a4:e2:99:40:56:6b:cf:a1:fa:f9:bd:97:07:9f:a7:f6:30:f5:
d5:02:21:84:24:04:06:cc:a9:8c:8b:b4:20:16:ed:fc:e5:9b:
29:da:86:c6:27:45:33:9a:5f:66:53:2b:1e:ab:d7:97:4c:33:
22:13:8c:6f:d0:bd:71:86:63:93:56:d0:d2:1b:cc:51:d0:3b:
24:81:07:13:6b:b7:6a:75:9c:93:de:45:af:38:b5:17:74:80:
5c:c3:19:c2:c6:d3:41:28:f8:9b:92:b4:d3:45:eb:0e:ed:76:
3c:f3:11:06:a3:d6:38:d3:72:71:92:a2:f6:b3:60:54:b0:ec:
63:ec:f2:61:bc:74:da:f2:81:c7:c9:0e:db:c0:a1:7f:7a:35:
28:25:de:08:37:e6:0e:10:8e:aa:16:38:59:6e:1b:8a:07:0c:
0d:f7:60:ef:8e:ab:b1:dd:6d:49:a0:4e:2f:76:cd:8b:93:fb:
35:e3:4a:24:5c:c0:0d:7c:d8:d7:22:72:fd:98:0a:cd:a0:98:
f1:0b:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:41:12 2026 by rpki-client