Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213690.roa
File: AS213690.roa (raw, json)
Hash identifier: 3O00jfNw7SObGn80gaZehhMjcODI76fQNBEiCo/NyJw=
Subject key identifier: 1A:7C:31:95:EB:E2:37:98:DE:D0:96:C2:AA:75:D5:91:C3:7E:3D:AA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2AA9DC690E465E263F358EA8103E730A97730A89
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213690.roa
Signing time: Thu 30 Apr 2026 16:47:07 +0000
ROA not before: Thu 30 Apr 2026 16:42:07 +0000
ROA not after: Thu 29 Apr 2027 16:47:07 +0000
asID: 213690
IP address blocks: 146.103.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a9:dc:69:0e:46:5e:26:3f:35:8e:a8:10:3e:73:0a:97:73:0a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 30 16:42:07 2026 GMT
Not After : Apr 29 16:47:07 2027 GMT
Subject: CN=1A7C3195EBE23798DED096C2AA75D591C37E3DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:18:b3:da:91:30:a9:c1:9f:9b:3d:dd:8d:
f6:ed:19:0a:ee:87:6b:82:c2:a5:96:4b:7b:3c:7e:
96:84:5d:bf:46:7f:26:77:16:89:4f:9e:8a:54:56:
ab:95:d4:89:77:67:9f:ab:0a:87:67:7a:da:ba:45:
b5:11:01:bd:6f:0d:e8:8a:2f:27:69:85:1f:a0:25:
39:3f:0f:e5:c1:85:c2:a9:b4:90:9e:19:01:8d:ec:
8e:70:ce:a5:ba:92:a7:2b:b6:83:03:f1:62:29:a1:
20:d5:df:85:2c:60:d0:11:cc:5a:b8:e7:ce:6d:58:
fb:95:4e:cd:ce:f0:3f:0d:76:62:9c:78:9b:16:25:
c1:8c:84:b6:21:66:37:96:3d:34:82:1c:b8:99:bc:
89:a5:85:d1:9c:57:0f:d0:ad:c5:b3:be:12:23:48:
44:da:75:24:f4:9b:35:ec:0c:2d:04:32:28:7d:f6:
db:9c:a4:96:07:54:33:63:16:f9:78:09:36:e1:8b:
7f:46:10:1d:43:e2:19:4b:3a:90:9c:bf:2d:33:d2:
75:fb:90:dc:28:aa:e8:66:a8:39:c0:a5:2e:fa:b7:
07:28:54:5e:d2:ca:11:df:ca:54:3b:11:c5:3c:f6:
d1:95:a5:fc:48:15:44:b5:bb:fb:1e:a5:b4:70:68:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:31:95:EB:E2:37:98:DE:D0:96:C2:AA:75:D5:91:C3:7E:3D:AA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:15:19:51:8d:55:e2:c2:af:85:18:d6:fd:ad:45:1f:08:83:
c5:43:b8:fb:48:cb:74:8f:8f:86:66:75:5a:e0:2b:ee:5c:e0:
fa:49:c6:80:8f:82:6d:ed:43:8a:14:b0:9b:79:5c:3c:c2:0a:
f4:ba:ae:2b:e7:16:7a:43:13:fa:10:1d:9c:18:d9:2a:ab:fb:
dd:2d:e0:e4:aa:d2:86:45:e9:2c:80:b2:7c:0b:d3:ce:eb:55:
1f:51:e8:41:f6:1f:27:c1:ad:1a:4f:99:de:5f:11:86:7b:2c:
0a:eb:db:ea:17:3c:ee:23:77:4d:a9:71:4a:2c:2a:e2:4a:12:
3e:b6:ed:e2:b5:90:60:94:3b:4d:44:74:fb:6e:cb:2e:7f:a0:
c1:15:52:6d:99:18:3d:9e:31:1b:06:ab:46:5f:ac:da:e2:f7:
c0:b6:fd:ed:86:10:b1:51:b0:79:ef:9d:9a:d0:31:6e:57:25:
35:94:b2:e3:22:6b:b3:68:b0:66:2a:c1:c5:41:99:20:c5:c4:
b3:74:87:92:be:de:8a:40:0d:9d:4f:20:13:14:55:21:2d:90:
59:9b:6d:55:82:07:84:8e:43:33:57:64:13:26:b9:fb:b8:25:
93:f3:86:37:f8:ad:0a:08:b1:c1:8d:03:77:53:49:42:ca:9d:
12:02:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:12:05 2026 by rpki-client