Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213954.roa
File: AS213954.roa (raw, json)
Hash identifier: llfijzSbVbIcNES4vWEfHi9s0BXXkDSYxKya5B1lPWg=
Subject key identifier: A0:F4:51:A7:34:D9:8E:19:69:DB:C8:F6:27:0C:F3:2D:FB:59:C1:28
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 72F89D4664027184C04A40CD476818DD93652129
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213954.roa
Signing time: Thu 10 Sep 2026 19:09:08 +0000
ROA not before: Thu 10 Sep 2026 19:04:08 +0000
ROA not after: Thu 09 Sep 2027 19:09:08 +0000
asID: 213954
IP address blocks: 2a0f:85c1:8c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f8:9d:46:64:02:71:84:c0:4a:40:cd:47:68:18:dd:93:65:21:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 10 19:04:08 2026 GMT
Not After : Sep 9 19:09:08 2027 GMT
Subject: CN=A0F451A734D98E1969DBC8F6270CF32DFB59C128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:5e:2e:f1:46:bf:de:61:87:15:34:6f:bd:
24:3c:aa:fc:cd:1c:cb:a2:e9:96:f8:b4:7f:3d:25:
21:ec:07:fd:a8:8f:ea:95:0e:d5:c5:fd:b7:c4:de:
cd:a5:47:cc:ae:78:86:fd:ea:80:d5:0f:e8:82:3c:
84:83:29:d6:8b:98:bf:d8:4a:5a:be:d2:84:22:ae:
13:e4:7f:36:32:7a:80:dc:0d:ae:46:1c:8e:98:3e:
bf:fc:96:2a:b6:b6:bd:3a:37:11:68:37:d8:d4:5e:
f2:b6:3c:dd:3a:30:e5:5e:7c:88:e4:15:bb:79:21:
39:c7:72:68:e4:a5:1a:ab:b7:fc:be:11:01:61:54:
b5:19:dc:9e:b7:5d:9b:c7:ac:2e:1d:7e:e0:4f:95:
71:fa:40:06:e6:c6:fd:93:f3:c2:0f:e9:4f:6b:0b:
f4:e7:e9:86:31:34:6c:c4:c4:30:89:dd:e3:38:f6:
ce:10:6b:bc:3d:d1:43:13:d7:b7:f8:d0:ec:f5:cd:
54:04:72:b0:72:00:e3:4e:a9:b6:81:eb:11:43:36:
c8:a6:5d:91:24:2e:86:3e:00:d7:28:1d:93:57:3a:
20:2b:4d:94:80:5e:61:97:52:86:25:9c:08:68:df:
d7:cc:7c:f3:2f:46:d1:f4:96:6f:1c:73:70:ca:bd:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:51:A7:34:D9:8E:19:69:DB:C8:F6:27:0C:F3:2D:FB:59:C1:28
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8c4::/48
Signature Algorithm: sha256WithRSAEncryption
03:a3:cf:37:78:3d:7f:94:5b:82:92:1f:b0:47:81:18:46:f5:
e1:75:02:76:ee:2d:3e:03:4a:f0:9d:0f:c2:60:41:a8:53:41:
80:32:d9:bc:3f:59:ac:38:41:b0:c0:36:86:d2:c5:11:3a:1e:
dc:f8:6b:11:2c:1a:19:11:79:49:09:e0:43:28:de:0a:86:f5:
45:3b:10:d7:ec:1a:d0:25:99:dc:df:4f:5b:c5:03:8f:41:e8:
58:b3:24:d4:8f:74:b0:29:fb:05:79:33:f2:78:18:7e:fd:4e:
f8:e3:af:da:64:fa:85:58:f8:26:fb:b1:4e:29:ce:33:4c:5a:
fe:42:4e:1d:14:42:08:8c:ab:b8:0c:80:d4:a9:6d:7f:0b:ef:
bd:4d:2b:db:a4:77:8f:fb:ad:4f:20:60:ca:2e:dd:31:0d:4b:
d2:ff:74:11:61:88:ba:c5:e4:cc:61:fd:c8:d2:28:68:48:80:
e8:65:b3:36:cf:a0:11:c2:09:ac:7d:03:34:70:aa:09:cf:ab:
ab:c2:62:c9:64:7b:31:06:07:8c:1f:c0:89:08:05:b6:c3:27:
ed:c2:a0:f8:74:4a:a9:1d:91:ce:bf:13:28:d2:26:fe:46:9c:
72:1d:c2:b9:68:a0:56:10:89:b9:80:08:e1:80:4f:25:d7:01:
ed:d6:e1:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUcvidRmQCcYTASkDNR2gY3ZNlISkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA5MTAxOTA0MDhaFw0yNzA5MDkxOTA5MDhaMDMxMTAvBgNV
BAMTKEEwRjQ1MUE3MzREOThFMTk2OURCQzhGNjI3MENGMzJERkI1OUMxMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDF4u8Ua/3mGHFTRvvSQ8qvzN
HMui6Zb4tH89JSHsB/2oj+qVDtXF/bfE3s2lR8yueIb96oDVD+iCPISDKdaLmL/Y
Slq+0oQirhPkfzYyeoDcDa5GHI6YPr/8liq2tr06NxFoN9jUXvK2PN06MOVefIjk
Fbt5ITnHcmjkpRqrt/y+EQFhVLUZ3J63XZvHrC4dfuBPlXH6QAbmxv2T88IP6U9r
C/Tn6YYxNGzExDCJ3eM49s4Qa7w90UMT17f40Oz1zVQEcrByAONOqbaB6xFDNsim
XZEkLoY+ANcoHZNXOiArTZSAXmGXUoYlnAho39fMfPMvRtH0lm8cc3DKvdzRAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUoPRRpzTZjhlp28j2JwzzLftZwSgwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzOTU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQjEMA0GCSqGSIb3DQEBCwUAA4IBAQADo883eD1/lFuCkh+wR4EYRvXhdQJ27i0+
A0rwnQ/CYEGoU0GAMtm8P1msOEGwwDaG0sUROh7c+GsRLBoZEXlJCeBDKN4KhvVF
OxDX7BrQJZnc309bxQOPQehYsyTUj3SwKfsFeTPyeBh+/U7446/aZPqFWPgm+7FO
Kc4zTFr+Qk4dFEIIjKu4DIDUqW1/C++9TSvbpHeP+61PIGDKLt0xDUvS/3QRYYi6
xeTMYf3I0ihoSIDoZbM2z6ARwgmsfQM0cKoJz6urwmLJZHsxBgeMH8CJCAW2wyft
wqD4dEqpHZHOvxMo0ib+RpxyHcK5aKBWEIm5gAjhgE8l1wHt1uFB
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:49:55 2026 by rpki-client