Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213413.roa
File: AS213413.roa (raw, json)
Hash identifier: BGDG/XMW1gVN5bc7Ji6D3snZ5gXNnk2hy7xoZ9ExR3k=
Subject key identifier: 9C:87:33:E6:7C:96:03:7A:B1:7D:C7:2C:AB:81:5B:6A:D0:7C:AD:21
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7EB0F4011B6BAB52A074279009D5A2E4675BB197
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213413.roa
Signing time: Thu 19 Feb 2026 20:19:24 +0000
ROA not before: Thu 19 Feb 2026 20:14:24 +0000
ROA not after: Thu 18 Feb 2027 20:19:24 +0000
asID: 213413
IP address blocks: 2a14:7580:5000::/36 maxlen: 36
2a14:7580:5000::/40 maxlen: 40
2a14:7584:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b0:f4:01:1b:6b:ab:52:a0:74:27:90:09:d5:a2:e4:67:5b:b1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 19 20:14:24 2026 GMT
Not After : Feb 18 20:19:24 2027 GMT
Subject: CN=9C8733E67C96037AB17DC72CAB815B6AD07CAD21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:78:87:96:b7:c9:ca:5d:bf:12:6c:47:1a:
cb:ae:74:f0:3f:06:eb:2c:8a:dc:88:1f:9c:95:86:
be:25:12:10:73:b2:47:b1:0e:c1:5a:e5:5b:73:40:
49:31:24:4a:9e:63:4d:a7:c8:ce:82:3e:e5:13:52:
be:aa:b3:6d:20:fe:9d:81:eb:66:64:0d:87:0d:9d:
fd:3e:17:7d:f5:85:3d:b1:9d:e3:ba:f2:0a:e7:05:
dd:1e:28:30:82:c0:e6:5f:b4:05:b0:3b:07:4a:34:
16:73:46:0a:bd:b1:69:d4:a4:29:3a:7f:d2:00:80:
66:e5:d7:c7:23:73:14:64:bd:70:96:29:24:ad:14:
6e:0c:e7:b1:d9:62:86:b6:3f:8b:32:a2:e8:ba:53:
63:67:b4:8b:ca:a1:41:b7:f5:9d:65:83:e3:bd:db:
b7:0b:94:a7:34:1c:b8:03:f5:62:1d:e4:de:ea:52:
76:46:d6:03:9f:91:39:6e:4d:11:ea:91:21:fd:dc:
7c:24:ad:4b:53:88:ad:bc:17:8b:02:aa:71:59:96:
b3:18:67:d5:fd:91:4d:80:f7:4a:5b:92:88:5a:ac:
0e:95:87:09:90:39:6d:15:0a:d5:26:0b:57:11:46:
38:cb:b9:fb:c2:6a:0a:e2:bd:1b:9c:66:aa:1e:86:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:33:E6:7C:96:03:7A:B1:7D:C7:2C:AB:81:5B:6A:D0:7C:AD:21
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:5000::/36
2a14:7584:2000::/36
Signature Algorithm: sha256WithRSAEncryption
83:22:b6:93:32:91:19:1a:02:e5:54:7d:88:e8:3a:74:e0:b9:
55:d0:b5:99:50:70:bc:ea:7f:af:c1:78:3c:28:3f:31:f1:e9:
2a:56:cf:e7:4f:b1:5a:d4:5a:9c:21:fd:5f:a4:44:cd:ef:f4:
64:08:8d:30:9f:92:e9:ff:ef:54:9d:b7:b9:2e:63:08:e4:00:
94:d6:0f:95:48:65:cf:ac:32:49:de:e6:de:45:ee:f0:3a:e2:
3a:88:d0:58:4d:a0:fc:c9:d6:ad:3d:cc:54:cf:22:be:63:26:
51:e0:42:12:69:bf:0b:76:cb:96:ff:b1:39:5e:ef:d8:88:7c:
7f:74:91:7d:3a:e5:28:02:ab:c3:04:95:b5:05:e5:e3:c2:81:
3c:45:4b:ec:3b:61:19:b8:ad:ae:43:a5:56:42:40:c8:ac:89:
f5:08:e4:3a:39:ed:da:c9:ac:a9:85:a9:47:56:32:13:df:53:
c8:e1:7c:30:c1:49:ec:a9:d9:56:a6:68:68:74:5a:2a:91:a3:
50:de:c2:b5:0f:89:97:d7:d1:ef:cc:01:b8:81:48:9a:99:24:
ff:55:59:d4:2b:b7:16:37:40:d7:c2:04:a0:0a:c3:b7:46:db:
0e:6b:23:91:b4:6a:2d:91:ae:09:29:26:05:a4:c7:a0:35:87:
62:ed:94:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:58:01 2026 by rpki-client