Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213977.roa
File: AS213977.roa (raw, json)
Hash identifier: MGJdtQpCOsAonOOm5Sq90AUi8VLV0PEUSETl2ch3JXw=
Subject key identifier: 1E:70:2B:BE:73:92:42:9A:15:7A:79:4D:18:A5:CD:0E:13:CE:26:CB
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 689BF9959DB58A966356AD5E7EA75FC2254D6031
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213977.roa
Signing time: Thu 10 Sep 2026 19:09:08 +0000
ROA not before: Thu 10 Sep 2026 19:04:08 +0000
ROA not after: Thu 09 Sep 2027 19:09:08 +0000
asID: 213977
IP address blocks: 2a0f:85c1:8c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9b:f9:95:9d:b5:8a:96:63:56:ad:5e:7e:a7:5f:c2:25:4d:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 10 19:04:08 2026 GMT
Not After : Sep 9 19:09:08 2027 GMT
Subject: CN=1E702BBE7392429A157A794D18A5CD0E13CE26CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:01:91:6b:e1:6d:c6:3d:bf:61:a4:88:1c:cc:
d8:cf:a7:0e:81:df:3a:9a:e6:20:32:21:d1:b3:24:
0a:0f:e9:47:71:6b:5c:ff:6c:6a:c2:ed:3c:77:7f:
6c:d7:f9:2d:6b:ce:2b:a6:5e:96:76:5e:7e:ab:6b:
0e:7f:c0:7a:bb:9b:37:80:d3:a0:da:2f:95:13:69:
6d:c8:97:a7:6c:bb:e5:16:8d:13:cf:ba:93:24:31:
65:c2:48:d7:c7:fb:b5:5a:26:07:d6:1c:8b:c2:2e:
3c:bf:0a:cc:54:92:97:66:53:b7:a1:b4:ca:7e:ff:
d0:80:03:7b:78:83:b2:91:f2:e5:c2:38:25:28:75:
cb:d8:bf:73:d8:93:33:17:db:1f:f3:28:2e:37:fc:
f9:8a:bc:b4:75:99:86:c5:73:c6:7a:6a:68:4b:6a:
8b:c5:d8:1b:0c:80:b2:c8:51:55:f6:14:d1:33:7a:
bf:15:95:71:84:16:54:d6:78:a3:8e:6e:72:bb:32:
05:74:b4:c6:d1:63:61:da:31:b8:24:5f:86:af:ef:
fe:bc:8d:e9:ff:ac:3e:11:30:18:db:7d:50:20:a7:
5d:17:5d:23:ad:76:0e:77:8a:af:80:00:3b:97:46:
15:3e:ec:b8:3c:72:94:9d:6f:7d:18:ed:4a:ae:11:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:70:2B:BE:73:92:42:9A:15:7A:79:4D:18:A5:CD:0E:13:CE:26:CB
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213977.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8c1::/48
Signature Algorithm: sha256WithRSAEncryption
da:c8:8f:d7:54:23:88:89:55:d9:76:65:ec:6f:d3:8d:11:61:
88:e4:be:be:b4:51:c8:90:cf:a9:5d:1f:af:07:ec:11:2e:6c:
83:16:c2:63:1c:ca:82:e8:62:8e:10:bc:08:4e:24:6d:2d:b4:
b1:26:c1:6d:65:28:e9:fe:21:ba:5a:96:a0:62:46:76:bf:19:
52:88:b8:06:b7:83:e6:94:99:8b:d0:fc:7c:ac:fa:40:f0:d9:
22:53:df:f0:fd:1d:41:74:93:7d:9f:ab:60:d0:22:12:97:69:
75:35:fe:78:f0:52:20:2b:b1:c5:55:b4:46:13:ca:64:7c:96:
ef:69:ff:7e:11:9e:c2:c1:69:19:a9:8d:5a:4f:f2:b7:26:f8:
0f:ac:42:f0:b5:66:29:12:96:2c:a9:43:50:8e:5d:70:dd:35:
39:bb:93:c6:93:31:7c:48:f3:01:c9:83:9d:ee:2b:aa:e1:4c:
27:cb:bf:97:28:a8:e7:3f:14:e3:1b:3f:cf:15:4c:20:62:e5:
d2:d9:99:c6:48:08:64:70:16:e7:bf:c3:7c:b7:49:60:07:a6:
b1:9e:5a:ee:cb:61:6f:db:26:f4:58:c4:db:a7:4a:9b:4b:b8:
e3:63:aa:b7:e1:d6:9d:70:4f:43:cc:d3:0f:f6:ab:f8:3b:4c:
e5:7d:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:25 2026 by rpki-client