Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213734.roa
File: AS213734.roa (raw, json)
Hash identifier: 0O++5TUjg9Z5TuWZAdQqq1MRFNOEgPgJwllcfIsQuyg=
Subject key identifier: ED:B7:43:B6:FD:7C:88:D1:6B:01:EC:0B:D7:82:EA:C0:0F:A9:4D:D3
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4ED8B3F6B07BC98DC0C6160E4B88585D20AA6A2D
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213734.roa
Signing time: Sat 14 Feb 2026 00:00:14 +0000
ROA not before: Fri 13 Feb 2026 23:55:14 +0000
ROA not after: Sat 13 Feb 2027 00:00:14 +0000
asID: 213734
IP address blocks: 143.20.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d8:b3:f6:b0:7b:c9:8d:c0:c6:16:0e:4b:88:58:5d:20:aa:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Feb 13 23:55:14 2026 GMT
Not After : Feb 13 00:00:14 2027 GMT
Subject: CN=EDB743B6FD7C88D16B01EC0BD782EAC00FA94DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:84:7e:6d:72:7a:89:db:3e:93:c4:3a:b2:
54:f2:bd:a0:f1:a5:59:c2:3d:13:d0:0b:be:81:20:
ba:38:ae:bc:58:17:f4:34:08:d1:b2:cd:e1:09:b0:
00:f9:fd:d4:77:55:8c:6b:72:db:d4:c2:ee:0a:18:
b8:97:cd:04:32:e0:ed:e5:58:1a:9e:a4:1e:74:dd:
ba:61:a7:a9:47:b0:4a:2e:b2:f7:71:cf:28:fe:db:
90:a8:2c:ca:85:6a:4b:b5:e0:6f:c5:3d:ff:94:74:
c7:e5:b6:06:07:67:cd:28:69:7f:80:42:ed:48:96:
d6:22:c0:f5:05:84:9e:03:cb:2b:fc:d8:6f:a5:ea:
30:e1:b5:72:56:d9:b5:51:35:e9:70:dc:49:9e:47:
96:57:13:d8:31:ef:c5:93:f2:bd:53:e7:90:f7:d0:
e4:53:5a:96:18:2f:24:73:78:28:3a:b2:10:df:78:
0c:97:10:74:30:3a:84:2a:ee:67:c1:3b:fe:24:2c:
b9:7f:9c:ca:89:27:6e:03:40:8e:16:06:95:56:70:
48:45:e4:db:08:f7:b1:64:7b:e3:09:5b:72:d0:4f:
6f:6e:52:d8:9d:3c:aa:ae:c1:a2:c9:bc:29:8b:cf:
2a:3b:4a:d7:82:5b:9e:6b:5d:f8:5d:68:53:db:3b:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B7:43:B6:FD:7C:88:D1:6B:01:EC:0B:D7:82:EA:C0:0F:A9:4D:D3
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.8.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a8:e2:d6:3c:65:98:fd:a2:76:cd:ac:22:f0:57:a3:2f:78:
21:72:9e:a5:41:b3:05:1f:d2:05:58:23:ce:ef:40:23:2f:d3:
08:fc:63:9e:04:65:66:00:84:52:fd:9b:e8:ee:03:bb:61:a3:
e5:a0:75:50:b7:94:e0:b8:71:17:af:5e:d8:21:4e:06:ba:fe:
2d:e4:24:1b:be:ae:8b:8e:35:57:c9:82:05:ef:7a:07:37:7b:
1f:a8:dc:62:71:f1:07:7b:0e:74:1e:3b:67:d4:61:24:a0:c9:
29:51:e3:a8:b2:24:d4:7c:82:88:6b:29:c0:e1:d0:ba:20:3c:
4f:af:5f:4b:77:0d:f6:1d:e0:24:12:63:7b:f1:1b:f3:f7:d5:
4e:0f:d1:7e:96:ec:bd:99:49:f3:94:df:8c:cf:5b:42:66:f5:
61:06:88:cd:2f:46:d0:ff:6b:11:45:fa:13:1b:b0:74:9d:1d:
82:31:c0:3c:c5:87:fe:c1:12:14:fe:39:66:63:d0:4b:0a:0c:
62:0e:8c:9b:ce:5a:5c:dc:f2:19:36:eb:24:73:56:9c:81:8c:
d3:45:89:fa:9b:0a:1c:42:f2:e8:49:94:b4:0f:a5:d7:48:34:
16:ca:d6:03:64:c0:e7:0b:d8:29:99:be:01:33:b5:d7:b5:34:
27:22:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:24 2026 by rpki-client