Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213200.roa
File: AS213200.roa (raw, json)
Hash identifier: wc1qSVMGlCDfGlLAN6fzCaSn1ZVpb55VdFwBuTvUqDc=
Subject key identifier: 5A:48:8C:43:BF:07:3F:E4:7E:49:E0:E5:A5:DA:E4:E2:13:FF:1F:5C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 11F5A1E9E3B5575EDE26796713E1D6A33EB2F66C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213200.roa
Signing time: Sun 12 Jul 2026 17:49:09 +0000
ROA not before: Sun 12 Jul 2026 17:44:09 +0000
ROA not after: Sun 11 Jul 2027 17:49:09 +0000
asID: 213200
IP address blocks: 143.14.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f5:a1:e9:e3:b5:57:5e:de:26:79:67:13:e1:d6:a3:3e:b2:f6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 12 17:44:09 2026 GMT
Not After : Jul 11 17:49:09 2027 GMT
Subject: CN=5A488C43BF073FE47E49E0E5A5DAE4E213FF1F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:73:e8:7a:70:00:4c:5c:3c:20:fa:d4:bd:
7c:58:90:02:83:99:44:9e:52:7c:28:8f:4b:67:33:
f1:0d:fe:cd:f5:8d:68:02:57:bc:9f:01:25:57:01:
64:36:15:1e:d8:cd:85:7d:08:33:d6:26:fb:6e:71:
fc:78:88:6c:de:4f:04:e7:dc:bf:47:59:d5:1d:b5:
63:cd:21:98:4d:b8:79:57:80:d2:7a:8d:2f:f5:6e:
dc:b4:c1:b3:b4:c5:1d:9f:3b:bb:39:50:14:39:02:
c4:d9:31:35:11:fb:03:43:b0:48:1a:c4:72:d9:a2:
55:65:df:c1:61:c2:b8:06:6c:52:df:82:ca:89:fe:
02:c4:09:9e:75:9c:65:f5:61:d4:db:94:4f:ac:02:
5f:f6:b5:da:a1:1d:e2:ed:8c:a2:8a:0f:d2:1b:40:
1b:e9:2f:63:5c:34:3f:c8:30:81:e0:37:72:d8:28:
58:76:74:f2:8a:f0:ae:3a:f3:48:ad:f1:4f:1c:df:
7e:e6:36:c9:e7:b0:6d:40:91:de:68:12:88:71:35:
5b:91:de:1d:99:a0:75:d2:bf:60:d6:73:65:b0:a4:
5b:39:c1:e5:67:ef:4a:e0:b8:93:5e:22:63:00:5c:
bf:98:b6:64:4c:f9:13:37:85:0d:58:21:0b:5c:79:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:8C:43:BF:07:3F:E4:7E:49:E0:E5:A5:DA:E4:E2:13:FF:1F:5C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:76:02:cc:92:a0:8b:11:20:bb:29:22:49:e6:ce:48:18:1c:
5c:44:d4:f6:88:cf:a7:2a:83:ea:ff:14:25:70:e8:9e:51:75:
b1:37:b6:93:7d:f9:55:e5:50:35:58:8a:61:f0:e2:72:e6:32:
ed:22:61:98:28:ef:93:e1:a2:90:b8:e3:cf:1d:30:b3:53:36:
4f:36:a4:7d:ee:df:b7:ba:58:71:56:ad:82:fd:07:b3:7b:67:
54:d3:ee:7c:34:d3:d5:19:42:6c:13:df:0b:cd:d6:d9:7e:f7:
c1:25:4c:da:51:2d:a9:03:06:72:99:dd:ca:97:5d:95:2a:b6:
a3:e6:0f:8b:22:ea:36:81:ab:24:55:41:70:ad:fe:c2:1c:86:
20:7b:86:62:f4:11:f1:73:87:b6:08:c2:48:5d:83:0f:63:03:
cd:ca:b7:4d:8b:a8:65:5d:4b:a1:72:41:cd:44:36:01:d3:42:
b8:63:9a:ba:a0:15:7f:e9:99:9f:82:19:d7:aa:ea:fc:da:0e:
d7:c8:93:58:b8:88:96:06:30:c4:fd:52:a7:f2:3b:40:9e:ba:
96:92:28:b7:a2:a3:b7:85:34:d2:ad:c2:dc:1e:42:d4:44:70:
66:f6:a3:c2:5a:f7:48:d7:4e:15:fd:b1:68:16:a3:d6:e9:69:
25:22:7e:2a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUEfWh6eO1V17eJnlnE+HWoz6y9mwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTIxNzQ0MDlaFw0yNzA3MTExNzQ5MDlaMDMxMTAvBgNV
BAMTKDVBNDg4QzQzQkYwNzNGRTQ3RTQ5RTBFNUE1REFFNEUyMTNGRjFGNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3o3PoenAATFw8IPrUvXxYkAKD
mUSeUnwoj0tnM/EN/s31jWgCV7yfASVXAWQ2FR7YzYV9CDPWJvtucfx4iGzeTwTn
3L9HWdUdtWPNIZhNuHlXgNJ6jS/1bty0wbO0xR2fO7s5UBQ5AsTZMTUR+wNDsEga
xHLZolVl38FhwrgGbFLfgsqJ/gLECZ51nGX1YdTblE+sAl/2tdqhHeLtjKKKD9Ib
QBvpL2NcND/IMIHgN3LYKFh2dPKK8K4680it8U8c337mNsnnsG1Akd5oEohxNVuR
3h2ZoHXSv2DWc2WwpFs5weVn70rguJNeImMAXL+YtmRM+RM3hQ1YIQtcef7bAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUWkiMQ78HP+R+SeDlpdrk4hP/H1wwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEzMjAwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw4s
MA0GCSqGSIb3DQEBCwUAA4IBAQCidgLMkqCLESC7KSJJ5s5IGBxcRNT2iM+nKoPq
/xQlcOieUXWxN7aTfflV5VA1WIph8OJy5jLtImGYKO+T4aKQuOPPHTCzUzZPNqR9
7t+3ulhxVq2C/Qeze2dU0+58NNPVGUJsE98LzdbZfvfBJUzaUS2pAwZymd3Kl12V
Kraj5g+LIuo2gaskVUFwrf7CHIYge4Zi9BHxc4e2CMJIXYMPYwPNyrdNi6hlXUuh
ckHNRDYB00K4Y5q6oBV/6ZmfghnXqur82g7XyJNYuIiWBjDE/VKn8jtAnrqWkii3
oqO3hTTSrcLcHkLURHBm9qPCWvdI104V/bFoFqPW6WklIn4q
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:06:50 2026 by rpki-client