Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213413.roa
File: AS213413.roa (raw, json)
Hash identifier: lJdYU7/4T4APC/ccs2hLT/j7ltza1asIH4kMHv8HqH8=
Subject key identifier: F0:1B:D0:AD:A5:83:C9:73:87:4A:42:F3:7D:5F:FA:F1:34:85:D3:20
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 169BED1459DD5F051B447AD1AA75BF16CBB6ED28
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213413.roa
Signing time: Sun 26 Jul 2026 16:11:03 +0000
ROA not before: Sun 26 Jul 2026 16:06:03 +0000
ROA not after: Sun 25 Jul 2027 16:11:03 +0000
asID: 213413
IP address blocks: 2a14:7584:2fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9b:ed:14:59:dd:5f:05:1b:44:7a:d1:aa:75:bf:16:cb:b6:ed:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 26 16:06:03 2026 GMT
Not After : Jul 25 16:11:03 2027 GMT
Subject: CN=F01BD0ADA583C973874A42F37D5FFAF13485D320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:42:05:4c:60:e9:ce:67:15:0e:fb:31:19:
7b:0a:5a:ab:a3:08:74:73:ce:9c:40:af:a6:cb:a8:
71:93:7c:4e:8c:e6:10:6c:87:49:2e:37:a4:51:7b:
1c:5e:7e:4d:30:a1:bf:82:3d:86:09:8e:46:c3:30:
14:a3:23:fa:f9:1b:51:cf:d7:56:22:8c:7a:f2:0c:
54:df:42:20:a6:3f:f1:91:01:c9:7f:7d:7d:14:94:
de:f0:6b:8c:32:c3:dc:22:5a:ef:a3:c9:3a:1f:45:
1d:58:48:42:f8:9e:02:97:c8:3d:83:03:c3:74:09:
2b:99:0e:30:b1:88:fd:36:0d:31:0f:56:7f:c1:70:
4a:55:bd:2b:53:6d:54:84:76:92:f3:c7:77:8b:fa:
8c:47:82:0f:b6:09:59:49:f4:ef:ca:08:c6:6a:57:
d9:f8:78:ab:3f:55:7f:7f:5d:2b:82:09:c9:d1:ca:
0d:05:70:a4:1d:cd:23:40:94:92:1c:60:c6:db:ce:
31:55:4a:5d:b0:33:47:03:da:bd:d8:38:3f:61:53:
82:4c:00:8a:bd:3e:b6:78:fe:db:37:47:34:13:19:
f0:7a:bd:5a:6c:c1:59:55:fd:c1:53:ff:be:0e:fd:
72:65:54:11:6b:e7:72:d3:04:b6:e1:44:fa:94:8d:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:D0:AD:A5:83:C9:73:87:4A:42:F3:7D:5F:FA:F1:34:85:D3:20
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:2fff::/48
Signature Algorithm: sha256WithRSAEncryption
0c:dd:cf:8f:ad:b5:b4:c5:e2:f0:63:e4:95:a0:50:6e:39:c6:
c4:e9:64:48:00:88:44:de:9f:26:0c:85:fc:e8:63:ba:15:b8:
d0:19:d5:d1:0f:33:78:3f:71:26:07:17:ec:38:d8:f5:c9:5c:
96:c6:a4:d8:de:c4:c0:3a:06:23:be:9a:13:82:09:cb:6c:1a:
f7:8d:1e:71:51:08:e2:ea:d5:63:61:f5:0d:3f:18:2d:b3:20:
a3:5d:3a:a4:eb:d8:86:28:b9:8d:01:eb:b1:d3:f5:37:d3:c7:
e9:32:f2:57:9e:3e:f5:83:4a:8c:74:d6:67:8c:34:11:42:63:
b5:c2:94:a6:fe:d6:3f:42:58:5f:cb:eb:38:5e:9e:d3:28:b9:
8e:44:2a:17:ea:f8:bc:33:5c:1b:6e:a3:ff:91:e8:c1:ed:90:
eb:df:26:6e:89:71:1c:30:e1:b3:c9:ad:c3:b9:92:2b:06:ac:
cc:97:37:c7:a6:b5:c4:fe:ba:b0:b2:bb:43:01:92:f3:8a:3a:
ee:46:b9:9e:36:f5:f2:f9:76:57:d5:ea:00:cb:6b:d4:e7:ef:
54:51:d5:b0:3e:9b:3c:3c:20:bc:2e:c9:3f:9f:49:25:f8:b1:
39:34:29:71:75:66:10:40:c1:3a:6b:0e:c4:8e:d2:2d:63:6a:
ac:40:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:21:55 2026 by rpki-client