Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213607.roa
File: AS213607.roa (raw, json)
Hash identifier: fWdk3Os38tj9fsUtDqjAOZVeoSogYSH+p1H1v55lmvY=
Subject key identifier: 90:9C:04:70:11:06:C7:83:73:C1:AC:59:40:EA:ED:3B:B0:DE:AA:13
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 74C1B9456B03D0C3F7FE200187C16B2BFB758607
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213607.roa
Signing time: Fri 19 Jun 2026 11:47:47 +0000
ROA not before: Fri 19 Jun 2026 11:42:47 +0000
ROA not after: Fri 18 Jun 2027 11:47:47 +0000
asID: 213607
IP address blocks: 143.14.149.0/24 maxlen: 24
155.117.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c1:b9:45:6b:03:d0:c3:f7:fe:20:01:87:c1:6b:2b:fb:75:86:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 19 11:42:47 2026 GMT
Not After : Jun 18 11:47:47 2027 GMT
Subject: CN=909C04701106C78373C1AC5940EAED3BB0DEAA13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:5d:c6:82:32:e9:61:a9:60:09:a8:55:10:
1a:81:f9:f5:f7:4e:41:ca:c9:2b:b6:d3:be:c3:d3:
fb:a5:36:55:13:5a:07:a1:80:6b:49:7d:ac:6b:f1:
65:77:55:41:22:a2:94:8b:70:de:c2:9f:40:47:ca:
d6:72:dc:99:1c:b4:14:28:32:34:66:44:dc:1f:f5:
07:ba:83:1c:7f:f3:91:fc:a1:56:88:2a:bb:55:89:
98:2d:f0:e0:91:09:9a:94:95:9c:f1:d9:4b:e5:62:
14:72:23:fc:4f:e0:fc:9e:09:c7:fc:d1:13:64:32:
5b:1c:01:30:b4:d8:a9:11:dd:75:2e:cc:e7:08:0f:
2c:2f:fc:0d:74:a0:48:df:57:b8:b3:e2:91:ab:da:
3b:35:6d:c0:1c:be:c1:ec:ee:d6:aa:b4:cd:d1:c0:
61:a9:98:f7:58:67:ef:70:31:25:86:d5:08:4a:cc:
f4:45:2e:ac:e6:5f:8f:0f:f2:44:7c:1f:a8:4e:1f:
cd:23:14:39:4b:74:9f:6b:86:b7:69:9e:cb:ca:b0:
7b:ca:2c:b3:04:46:43:5f:4b:48:2a:e5:18:ea:23:
e6:71:5b:33:2c:77:49:7f:b8:80:81:45:a8:0a:9e:
45:9b:cd:63:d3:f4:b8:96:eb:b0:16:51:f5:c5:46:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:04:70:11:06:C7:83:73:C1:AC:59:40:EA:ED:3B:B0:DE:AA:13
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.149.0/24
155.117.193.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0e:5c:56:f1:fd:15:1e:16:e7:4e:77:97:fe:84:86:04:d2:
96:24:e7:c3:81:45:79:00:ad:3c:9b:dc:d4:a0:eb:31:0f:35:
ee:53:72:a9:96:41:85:39:c9:9e:6b:ee:cc:04:ff:c2:b6:33:
e6:bc:e5:03:ee:58:5d:e2:33:28:38:f5:a1:24:ea:e6:e5:c4:
a5:06:35:f0:c9:b0:d1:72:09:db:96:c7:6e:61:fd:45:db:4e:
de:bd:49:08:29:9a:f0:c8:dc:c2:23:d2:a3:2c:ff:a3:95:ee:
3d:44:8c:a7:65:78:79:05:f8:a0:59:ec:da:8a:33:93:bf:13:
72:43:d1:8e:46:27:10:ef:75:70:93:4a:3d:75:da:e3:0c:81:
93:30:71:97:40:0f:08:3a:2d:bc:04:73:19:4f:36:13:cc:23:
c6:12:62:cd:da:42:42:88:c6:64:2b:f4:c1:18:3e:b1:d4:bc:
ca:0d:86:5d:83:0d:9c:cf:a5:79:9e:a4:2d:52:6a:81:9b:be:
28:1e:4a:40:1d:10:5e:b3:5d:b6:ba:57:3b:3c:30:30:a2:23:
a1:db:17:71:0a:b9:6a:01:98:7c:b8:fe:a6:d7:27:f4:83:60:
23:f1:79:27:0a:86:d7:d7:bc:1b:0e:d6:f6:3b:2d:fb:77:1a:
c3:94:dd:53
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUdMG5RWsD0MP3/iABh8FrK/t1hgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MTkxMTQyNDdaFw0yNzA2MTgxMTQ3NDdaMDMxMTAvBgNV
BAMTKDkwOUMwNDcwMTEwNkM3ODM3M0MxQUM1OTQwRUFFRDNCQjBERUFBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWHV3GgjLpYalgCahVEBqB+fX3
TkHKySu2077D0/ulNlUTWgehgGtJfaxr8WV3VUEiopSLcN7Cn0BHytZy3JkctBQo
MjRmRNwf9Qe6gxx/85H8oVaIKrtViZgt8OCRCZqUlZzx2UvlYhRyI/xP4PyeCcf8
0RNkMlscATC02KkR3XUuzOcIDywv/A10oEjfV7iz4pGr2js1bcAcvsHs7taqtM3R
wGGpmPdYZ+9wMSWG1QhKzPRFLqzmX48P8kR8H6hOH80jFDlLdJ9rhrdpnsvKsHvK
LLMERkNfS0gq5RjqI+ZxWzMsd0l/uICBRagKnkWbzWPT9LiW67AWUfXFRnINAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUkJwEcBEGx4NzwaxZQOrtO7DeqhMwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEzNjA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjw6V
AwQAm3XBMA0GCSqGSIb3DQEBCwUAA4IBAQBKDlxW8f0VHhbnTneX/oSGBNKWJOfD
gUV5AK08m9zUoOsxDzXuU3KplkGFOcmea+7MBP/CtjPmvOUD7lhd4jMoOPWhJOrm
5cSlBjXwybDRcgnblsduYf1F207evUkIKZrwyNzCI9KjLP+jle49RIynZXh5Bfig
WezaijOTvxNyQ9GORicQ73Vwk0o9ddrjDIGTMHGXQA8IOi28BHMZTzYTzCPGEmLN
2kJCiMZkK/TBGD6x1LzKDYZdgw2cz6V5nqQtUmqBm74oHkpAHRBes122ulc7PDAw
oiOh2xdxCrlqAZh8uP6m1yf0g2Aj8XknCobX17wbDtb2Oy37dxrDlN1T
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:08:14 2026 by rpki-client