Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213124.roa
File: AS213124.roa (raw, json)
Hash identifier: dRSlBILaxA2QHfbxENtZg2uiQ57fMXMxr1LB+ntGxAE=
Subject key identifier: 12:75:BD:19:02:5C:0E:8E:46:5B:D5:38:03:7A:8B:C2:40:C4:32:F2
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1707792AEEFE70E71B7384F4A0AC888E698788C6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213124.roa
Signing time: Mon 12 Oct 2026 07:00:16 +0000
ROA not before: Mon 12 Oct 2026 06:55:16 +0000
ROA not after: Mon 11 Oct 2027 07:00:16 +0000
asID: 213124
IP address blocks: 2a14:7583:6000::/36 maxlen: 48
2a14:7583:7000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:07:79:2a:ee:fe:70:e7:1b:73:84:f4:a0:ac:88:8e:69:87:88:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 12 06:55:16 2026 GMT
Not After : Oct 11 07:00:16 2027 GMT
Subject: CN=1275BD19025C0E8E465BD538037A8BC240C432F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:8d:2c:fc:a5:e6:d2:36:fc:5f:4b:86:4d:
4f:55:2c:e0:7e:f1:52:0d:c1:54:9e:40:a5:6d:ea:
2d:b1:e4:c7:bb:e3:35:94:e3:c2:48:2e:2d:23:7f:
45:51:59:d1:00:95:69:19:ac:58:7b:7f:b2:fa:1b:
eb:ab:95:4e:a8:a7:12:d4:d4:aa:c4:89:1c:af:38:
f7:ac:6a:36:5c:ff:5e:cc:7b:6f:3c:dc:99:3e:b6:
55:fa:f6:03:7a:44:33:57:39:31:0d:98:28:88:03:
a9:5a:4c:1a:9d:53:3a:c2:6d:5a:ed:6a:d2:81:ab:
5b:52:bf:fc:3f:cc:c8:0c:35:ea:6a:da:db:16:7b:
fd:d3:ac:9e:8c:e5:a2:7e:03:db:79:c2:44:54:7c:
82:fe:cc:e5:6b:be:27:83:fb:9c:96:62:bf:a4:78:
b6:3e:99:31:b4:5a:19:90:06:29:5d:7e:29:20:27:
fe:da:32:cc:96:81:11:a8:f9:26:0b:15:9d:b0:f8:
30:cf:77:1b:d8:1b:9e:a4:5f:2a:64:d9:7d:df:36:
18:69:ab:75:03:60:45:be:6a:9f:f3:59:a5:1d:11:
61:2c:43:98:9d:22:5c:c6:48:e8:41:a4:78:0f:85:
6f:e4:34:4b:4d:fe:0d:43:4d:5d:3e:7e:db:72:a9:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:75:BD:19:02:5C:0E:8E:46:5B:D5:38:03:7A:8B:C2:40:C4:32:F2
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213124.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:6000::/35
Signature Algorithm: sha256WithRSAEncryption
7a:cd:2c:99:23:50:67:9e:e6:3b:76:f2:22:3c:2e:3d:bc:bf:
d1:f4:79:d5:7c:1d:60:b7:03:bd:bf:39:2f:b8:ef:98:00:e0:
31:25:6c:67:43:34:44:de:43:81:ed:b7:32:ef:27:2f:f6:9f:
92:16:8f:0d:76:1f:45:cc:d7:8f:1a:ba:79:90:03:d1:f1:89:
68:05:cd:62:b5:f6:aa:fd:ca:67:f4:12:2b:ae:5b:84:ed:a9:
13:94:db:28:19:88:b3:27:51:fd:03:3f:eb:19:69:3f:15:e4:
b4:83:51:67:04:23:1e:a4:b6:d4:23:9a:9d:e2:9b:81:05:4f:
46:d2:74:70:2f:fd:5a:62:d6:2a:5b:51:73:65:8c:58:dc:35:
f4:02:4d:4e:be:83:39:b8:98:1a:90:c0:bb:53:91:8e:ce:ce:
ab:43:3d:9f:d7:ac:41:52:9d:e4:05:20:3d:26:a0:5c:fe:72:
5e:48:90:07:c9:81:3e:16:e8:7a:e2:b9:4f:c8:73:09:22:4a:
83:17:1c:52:4a:3c:d3:4e:bc:2b:1d:1a:7a:82:25:d3:c6:77:
e5:e3:97:f3:6b:c7:1e:ed:c4:3e:2a:b0:77:95:95:4b:32:1c:
c3:39:b5:0d:f6:6e:28:db:74:43:7e:66:71:22:bb:d5:85:6b:
dc:25:d9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:14:20 2026 by rpki-client