Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213734.roa
File: AS213734.roa (raw, json)
Hash identifier: t0ObTixO/3XnFAxIyY6EqsgwClbwa2ew0aJbKylvjlY=
Subject key identifier: D3:A7:F9:7A:AF:78:2C:79:2C:D7:E0:17:AE:CC:F5:1B:C0:3D:B7:C0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 66415A998D4D1FEE89C398DECEB8DB31E41945D0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213734.roa
Signing time: Sat 21 Mar 2026 13:42:55 +0000
ROA not before: Sat 21 Mar 2026 13:37:55 +0000
ROA not after: Sat 20 Mar 2027 13:42:55 +0000
asID: 213734
IP address blocks: 155.117.138.0/24 maxlen: 24
155.117.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:41:5a:99:8d:4d:1f:ee:89:c3:98:de:ce:b8:db:31:e4:19:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 21 13:37:55 2026 GMT
Not After : Mar 20 13:42:55 2027 GMT
Subject: CN=D3A7F97AAF782C792CD7E017AECCF51BC03DB7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:28:74:29:eb:4f:cc:5c:df:05:7a:f9:0a:
b3:27:57:38:83:14:53:8a:fd:59:18:3d:c8:02:e4:
b3:8e:aa:de:0a:18:36:a4:95:b6:f5:31:a9:30:b9:
c3:e2:66:2a:c3:64:e6:0d:92:e2:e6:cc:a6:5e:cf:
31:54:6c:26:c2:11:ec:c7:07:e1:da:c7:19:07:4f:
64:4e:94:90:ad:cf:e0:1c:39:8f:74:a9:01:bc:a0:
e3:45:00:8b:74:7d:c8:b3:2e:2d:1b:e8:89:9f:e5:
46:d2:4d:4e:c0:77:42:59:c4:7c:cf:66:9a:cd:25:
0f:96:b7:c7:4a:db:9f:bc:41:0b:13:56:cb:ac:d6:
7f:eb:59:30:62:64:3a:b4:4f:7e:0e:ed:9e:82:8b:
2f:42:99:3a:c6:27:2b:ce:ee:2b:93:59:5d:15:5a:
08:df:96:68:e4:72:39:6b:fc:9a:24:83:69:54:9b:
42:d6:11:da:ca:da:40:4b:01:42:6b:3a:03:65:28:
ea:fe:07:65:b4:04:1a:9f:ba:36:35:4d:8f:85:d1:
26:7e:c8:36:4e:33:56:41:a8:40:cf:66:74:6c:88:
36:b3:7c:70:2f:72:c4:c1:70:c1:de:48:ef:30:fd:
cf:c3:89:84:14:5c:e7:a9:da:07:4d:49:82:42:e5:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:F9:7A:AF:78:2C:79:2C:D7:E0:17:AE:CC:F5:1B:C0:3D:B7:C0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.138.0/24
155.117.143.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cd:3f:7d:0a:b5:0c:95:84:a3:8d:ba:47:49:ad:17:9e:ed:
23:a0:b1:db:9e:53:ce:70:ed:83:88:03:55:51:cc:d6:3e:7d:
c7:b9:ae:73:b3:ca:a1:80:1e:51:24:ec:6b:45:0b:ca:99:f8:
78:de:4a:5c:e2:d9:7f:1a:3f:57:6e:06:06:fc:c6:2d:86:57:
99:9e:79:96:7b:59:17:aa:40:6c:75:c1:c8:78:70:f4:8c:da:
62:d1:6d:a1:4c:07:b6:4c:a9:a7:93:f0:d5:6e:82:35:1d:e1:
1d:23:fc:84:c6:4e:77:f2:c3:2c:82:a6:b4:d6:09:8e:8b:8a:
3e:a8:c7:45:4e:71:e5:0b:1f:fa:f6:64:e5:0e:28:31:db:d2:
aa:be:e0:50:e4:8f:41:df:ad:78:0f:33:b6:a7:56:c7:a3:87:
ef:9c:a0:16:22:3b:62:3c:58:4c:26:db:83:d1:75:45:fe:f6:
77:01:39:38:30:19:0b:16:a5:33:9e:8e:a4:4e:d8:86:68:8f:
90:41:08:69:0a:00:4e:30:94:3c:d4:a4:0e:da:35:d6:19:6a:
60:d4:b3:24:7b:33:c1:51:33:21:a4:2f:df:e9:fc:4c:76:f0:
d4:de:88:9e:21:a0:a2:f4:eb:4a:83:e0:e4:bd:1e:50:5b:b3:
25:e4:e1:52
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUZkFamY1NH+6Jw5jezrjbMeQZRdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAzMjExMzM3NTVaFw0yNzAzMjAxMzQyNTVaMDMxMTAvBgNV
BAMTKEQzQTdGOTdBQUY3ODJDNzkyQ0Q3RTAxN0FFQ0NGNTFCQzAzREI3QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXCh0KetPzFzfBXr5CrMnVziD
FFOK/VkYPcgC5LOOqt4KGDaklbb1MakwucPiZirDZOYNkuLmzKZezzFUbCbCEezH
B+HaxxkHT2ROlJCtz+AcOY90qQG8oONFAIt0fcizLi0b6Imf5UbSTU7Ad0JZxHzP
ZprNJQ+Wt8dK25+8QQsTVsus1n/rWTBiZDq0T34O7Z6Ciy9CmTrGJyvO7iuTWV0V
Wgjflmjkcjlr/Jokg2lUm0LWEdrK2kBLAUJrOgNlKOr+B2W0BBqfujY1TY+F0SZ+
yDZOM1ZBqEDPZnRsiDazfHAvcsTBcMHeSO8w/c/DiYQUXOep2gdNSYJC5XZlAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU06f5eq94LHks1+AXrsz1G8A9t8AwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEzNzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAm3WK
AwQAm3WPMA0GCSqGSIb3DQEBCwUAA4IBAQCRzT99CrUMlYSjjbpHSa0Xnu0joLHb
nlPOcO2DiANVUczWPn3Hua5zs8qhgB5RJOxrRQvKmfh43kpc4tl/Gj9XbgYG/MYt
hleZnnmWe1kXqkBsdcHIeHD0jNpi0W2hTAe2TKmnk/DVboI1HeEdI/yExk538sMs
gqa01gmOi4o+qMdFTnHlCx/69mTlDigx29KqvuBQ5I9B3614DzO2p1bHo4fvnKAW
IjtiPFhMJtuD0XVF/vZ3ATk4MBkLFqUzno6kTtiGaI+QQQhpCgBOMJQ81KQO2jXW
GWpg1LMkezPBUTMhpC/f6fxMdvDU3oieIaCi9OtKg+DkvR5QW7Ml5OFS
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:31:14 2026 by rpki-client