Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: GuPiiDS/6cNqM31DvguF6ljfDNXYA24xmx+XrxdiFOk=
Subject key identifier: 5D:25:65:0D:A9:96:6C:F5:D9:2E:B7:55:E3:EE:20:93:0B:A8:98:B4
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6DB2A2D97C4E68E07AED894C902C03AEAAF840E8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213476.roa
Signing time: Mon 07 Sep 2026 08:23:35 +0000
ROA not before: Mon 07 Sep 2026 08:18:35 +0000
ROA not after: Mon 06 Sep 2027 08:23:35 +0000
asID: 213476
IP address blocks: 51.194.104.0/22 maxlen: 24
51.194.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b2:a2:d9:7c:4e:68:e0:7a:ed:89:4c:90:2c:03:ae:aa:f8:40:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 7 08:18:35 2026 GMT
Not After : Sep 6 08:23:35 2027 GMT
Subject: CN=5D25650DA9966CF5D92EB755E3EE20930BA898B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:fd:7a:de:9c:22:bd:fa:c9:26:2a:a7:68:
85:70:a7:7d:6e:07:2f:af:e7:aa:b8:40:14:e6:55:
e4:21:22:98:f6:0d:b8:db:aa:3f:69:be:6a:7b:96:
1d:57:bc:42:f0:3c:57:21:cc:6d:4d:7a:ce:33:47:
b8:13:81:71:84:98:a9:38:13:f9:8c:70:bf:b6:23:
ee:c1:30:ba:f5:86:fb:56:f6:89:6e:da:7b:70:43:
1d:0d:d8:f0:b6:c7:e2:6c:3d:54:de:d8:29:70:7a:
3d:3f:ee:9e:35:09:6d:7e:ed:b5:14:f0:ec:cb:81:
7d:a7:6c:3a:e6:73:7e:8c:f6:74:7e:c3:cf:e0:f9:
ab:c2:ee:09:9b:19:1a:bf:56:d4:b1:93:fb:1e:f0:
8d:c3:53:6c:07:77:7a:80:47:3a:e8:44:69:92:28:
df:12:a7:d5:a8:ee:d7:a0:ff:7e:0a:1c:6c:1f:19:
6e:e4:fb:3d:53:87:73:e3:6e:7c:ed:ec:25:e2:f9:
33:c8:f5:70:74:78:67:c7:aa:f2:43:ff:62:a7:57:
51:34:0c:9e:8a:3d:83:97:af:44:9f:a3:c4:9b:b5:
51:f4:f9:58:d6:fc:b9:3c:de:7e:ca:c0:a0:50:0c:
b6:db:41:2b:1c:75:ac:a6:c8:6f:60:e6:3b:a7:7a:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:25:65:0D:A9:96:6C:F5:D9:2E:B7:55:E3:EE:20:93:0B:A8:98:B4
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.104.0/22
51.194.233.0/24
Signature Algorithm: sha256WithRSAEncryption
12:05:c9:2a:c6:94:a3:e8:8c:5d:85:2b:d0:d8:12:25:92:03:
5f:5b:25:12:f6:a2:01:f1:e7:b3:5d:65:0c:bc:c9:49:df:6d:
19:19:3b:18:13:7e:6b:11:4d:5f:10:dd:53:d3:86:06:08:25:
80:79:b7:ce:df:8a:fd:d3:20:c1:f7:80:9c:7d:73:38:14:8c:
0c:a0:0d:be:93:3c:26:69:21:c0:2a:a9:d0:41:a5:63:ef:db:
0a:33:eb:a2:cc:4d:a0:40:25:6c:bf:84:77:c6:1d:a6:f1:5a:
4f:31:bb:b0:05:7b:0c:9a:fe:3b:a6:9e:18:23:0d:58:69:31:
18:7c:8b:cf:0c:ff:e4:7f:94:16:d3:94:e5:57:07:84:e4:93:
9f:3b:50:7e:f0:eb:fd:8c:95:ce:b7:f9:74:b3:a9:d4:40:46:
cf:7e:de:ac:eb:6e:33:40:1e:60:a8:4d:4b:52:9a:4f:5f:4e:
df:37:2c:6b:a1:d3:d1:af:f9:00:12:64:12:58:5b:8d:f8:d2:
87:75:dc:c8:58:bd:4e:a1:86:86:76:60:48:f4:20:ca:24:98:
53:34:97:f2:fe:5f:1c:51:4e:ea:79:f9:c0:3b:02:c3:39:ec:
55:5f:cc:39:00:fc:72:e9:aa:0f:ce:f9:33:4e:23:90:9c:ff:
99:6f:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:42:13 2026 by rpki-client