Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213840.roa
File: AS213840.roa (raw, json)
Hash identifier: pQi4aSi3kGIXUBynQ6U+LeestKUhE7jU1nRCFiuL8Is=
Subject key identifier: 92:C8:B8:57:42:C6:28:02:31:CA:42:E8:15:0A:B7:51:A1:BC:4F:CF
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 287783DDD85424FCA5EF358B645F0E6E327D5A3C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213840.roa
Signing time: Tue 09 Jun 2026 18:53:15 +0000
ROA not before: Tue 09 Jun 2026 18:48:15 +0000
ROA not after: Tue 08 Jun 2027 18:53:15 +0000
asID: 213840
IP address blocks: 141.11.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:77:83:dd:d8:54:24:fc:a5:ef:35:8b:64:5f:0e:6e:32:7d:5a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 9 18:48:15 2026 GMT
Not After : Jun 8 18:53:15 2027 GMT
Subject: CN=92C8B85742C6280231CA42E8150AB751A1BC4FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:27:c6:7e:ad:a6:9f:70:27:2e:4a:19:fd:
1a:4a:30:c9:a7:74:7b:d3:a3:45:8d:b3:27:ad:58:
1d:17:b5:7f:60:d2:40:a1:5a:48:9b:ea:2a:4d:60:
6f:33:f4:40:87:5f:c6:d2:eb:fe:29:a3:f9:25:58:
94:99:6c:05:3e:7b:d0:80:cc:ee:2f:7f:d7:17:b5:
61:5f:30:03:2a:23:e3:ee:31:5e:e4:be:c3:c7:ca:
89:8e:f0:e1:4d:f2:8c:6f:04:63:77:ad:10:ee:c9:
e0:0d:b9:1e:b7:62:8e:1e:29:f6:2d:ec:f4:ea:d1:
5d:f5:c8:69:5d:94:10:42:1e:2f:1d:43:d6:27:7a:
83:d8:8b:ea:bc:3f:e0:c7:40:53:30:e2:dc:b6:f4:
da:88:9d:84:1f:47:64:a9:27:76:3b:81:75:77:98:
9e:26:85:48:66:04:c8:5f:29:87:f6:bc:c4:26:58:
7d:77:2d:09:a5:ff:fe:11:94:ef:72:1b:fe:64:65:
7f:33:bc:5e:9e:76:f3:c0:67:cf:9a:2d:27:9c:0e:
f3:5b:56:f9:d1:a5:1d:a2:f3:fc:69:1e:3f:95:08:
40:97:be:63:de:2c:96:95:66:a8:d9:43:6a:02:92:
99:53:f7:6c:26:08:b7:0a:df:80:69:02:65:5d:8a:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C8:B8:57:42:C6:28:02:31:CA:42:E8:15:0A:B7:51:A1:BC:4F:CF
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.50.0/24
Signature Algorithm: sha256WithRSAEncryption
95:12:dd:0a:51:ba:6a:c7:cb:3c:3e:d4:34:a7:4b:1e:6c:e7:
fb:d8:f7:5a:bd:53:2c:d3:1d:f0:18:e5:e3:f1:74:7b:e6:93:
ba:a9:69:c3:e7:c3:30:bf:6c:6d:4c:de:3a:fe:d4:56:fd:a9:
09:ce:97:4c:ca:26:49:ad:fe:56:a0:87:42:5d:99:e4:00:4b:
87:6d:c6:e8:75:ff:f1:5e:b9:46:c0:bd:77:73:7c:56:c2:35:
85:7a:d9:fe:4f:12:4b:fb:f7:00:5e:d5:2b:8c:77:cd:2a:02:
d0:59:f6:1a:66:ac:e8:0a:28:91:85:65:76:d7:8c:7a:01:20:
63:94:3e:3d:01:b4:c8:cb:a3:52:5a:b4:14:cf:0f:fe:74:c3:
0e:a8:f4:d8:82:40:49:d6:52:e1:3b:db:41:11:5e:1f:12:a1:
c5:b7:8b:04:c2:a8:f4:bf:cc:bf:da:31:17:9a:6d:9e:c1:3d:
ee:9e:2e:10:a1:da:56:ed:51:27:c4:18:b5:03:82:32:84:49:
af:d3:c6:86:42:88:a8:8a:5b:8a:7c:ac:5d:93:a4:f9:5c:68:
ed:0d:53:fc:d2:d4:bd:c3:1f:41:b1:66:da:37:aa:cc:50:ed:
d4:67:03:0f:7b:2d:a3:07:1a:11:09:1c:a8:db:4f:7c:58:51:
ad:f8:44:8f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKHeD3dhUJPyl7zWLZF8ObjJ9WjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA2MDkxODQ4MTVaFw0yNzA2MDgxODUzMTVaMDMxMTAvBgNV
BAMTKDkyQzhCODU3NDJDNjI4MDIzMUNBNDJFODE1MEFCNzUxQTFCQzRGQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0ifGfq2mn3AnLkoZ/RpKMMmn
dHvTo0WNsyetWB0XtX9g0kChWkib6ipNYG8z9ECHX8bS6/4po/klWJSZbAU+e9CA
zO4vf9cXtWFfMAMqI+PuMV7kvsPHyomO8OFN8oxvBGN3rRDuyeANuR63Yo4eKfYt
7PTq0V31yGldlBBCHi8dQ9YneoPYi+q8P+DHQFMw4ty29NqInYQfR2SpJ3Y7gXV3
mJ4mhUhmBMhfKYf2vMQmWH13LQml//4RlO9yG/5kZX8zvF6edvPAZ8+aLSecDvNb
VvnRpR2i8/xpHj+VCECXvmPeLJaVZqjZQ2oCkplT92wmCLcK34BpAmVdilhjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUksi4V0LGKAIxykLoFQq3UaG8T88wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjEzODQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsy
MA0GCSqGSIb3DQEBCwUAA4IBAQCVEt0KUbpqx8s8PtQ0p0sebOf72PdavVMs0x3w
GOXj8XR75pO6qWnD58Mwv2xtTN46/tRW/akJzpdMyiZJrf5WoIdCXZnkAEuHbcbo
df/xXrlGwL13c3xWwjWFetn+TxJL+/cAXtUrjHfNKgLQWfYaZqzoCiiRhWV214x6
ASBjlD49AbTIy6NSWrQUzw/+dMMOqPTYgkBJ1lLhO9tBEV4fEqHFt4sEwqj0v8y/
2jEXmm2ewT3uni4QodpW7VEnxBi1A4IyhEmv08aGQoioiluKfKxdk6T5XGjtDVP8
0tS9wx9BsWbaN6rMUO3UZwMPey2jBxoRCRyo2098WFGt+ESP
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:08 2026 by rpki-client