Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213460.roa
File: AS213460.roa (raw, json)
Hash identifier: fcQTq+LSNJxWH0DRfabbEpBSszzKTjLRJ2C6RviFw1s=
Subject key identifier: B8:83:17:70:37:88:63:BC:1C:8D:58:0B:DB:69:9E:33:80:95:FF:9E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0B38E7C3257AF71A8B33A0D6A0A36959859DAEC9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213460.roa
Signing time: Sun 25 Oct 2026 00:01:11 +0000
ROA not before: Sat 24 Oct 2026 23:56:11 +0000
ROA not after: Sun 24 Oct 2027 00:01:11 +0000
asID: 213460
IP address blocks: 2a13:9500:1b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:38:e7:c3:25:7a:f7:1a:8b:33:a0:d6:a0:a3:69:59:85:9d:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 24 23:56:11 2026 GMT
Not After : Oct 24 00:01:11 2027 GMT
Subject: CN=B8831770378863BC1C8D580BDB699E338095FF9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:78:e0:6c:87:f8:89:50:56:0d:d9:1a:23:
18:55:d4:30:80:8e:18:28:3a:7f:b3:7c:01:c0:b7:
81:6d:7b:f0:e0:42:a4:fc:5b:54:ca:37:85:9a:f1:
6e:95:5c:94:26:87:5a:a8:0e:74:a7:e4:22:da:84:
bf:07:0f:f6:e9:de:a7:e7:eb:30:fc:13:48:fb:4c:
f2:dc:db:5a:46:93:9b:05:d6:94:99:ed:dc:2c:7b:
43:df:e5:35:c1:34:5b:0f:d5:97:82:89:41:4e:af:
28:51:2a:e4:c6:fa:5b:d5:46:a9:8e:6d:7e:f7:46:
bc:3d:9d:60:fd:8c:27:07:e0:03:f1:0e:78:5a:21:
f9:85:d8:72:f6:01:7d:8a:2a:0b:48:e3:5b:b0:00:
7d:77:fd:fe:8e:34:3c:12:b3:70:64:dc:45:68:d3:
e8:a5:f8:fb:57:41:6a:13:c4:11:2e:bc:d2:19:44:
dd:40:59:96:5e:0d:5e:ee:a2:fc:85:7a:ba:61:86:
44:56:cd:cd:8c:d5:4e:ed:ef:47:44:59:c2:79:39:
41:20:5a:b9:23:2d:52:d5:20:04:22:73:65:8d:ae:
a6:a2:07:cf:64:0e:3d:e5:c9:87:ab:49:6d:82:55:
74:08:e2:91:7c:95:90:87:ba:7c:9a:aa:e9:15:16:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:17:70:37:88:63:BC:1C:8D:58:0B:DB:69:9E:33:80:95:FF:9E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213460.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1b0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:fa:f3:4c:98:99:f8:5a:f6:e9:fe:f0:2b:e1:33:24:91:82:
0a:b7:58:44:0e:17:44:fa:e5:97:cc:05:be:41:3c:13:b7:6e:
c0:a0:17:42:32:e7:ca:c4:8a:19:09:43:0a:84:80:79:f6:1d:
46:32:ba:f7:36:ef:01:1d:46:e3:d0:cb:a4:76:d8:ae:5e:5b:
04:3a:c8:ab:32:85:c2:2c:41:77:fb:16:55:da:d4:71:51:1a:
77:36:f0:24:e2:68:e0:ed:e7:a4:4e:0d:58:59:18:ca:c1:da:
a0:58:7a:f7:1b:88:90:d5:74:a2:97:a3:4c:da:c8:04:7e:42:
32:18:4f:7b:49:d6:4f:c1:11:a3:b1:6a:56:75:e2:24:bd:62:
38:e4:d8:6a:56:88:81:98:c5:46:0b:81:63:5e:29:08:fa:74:
8b:78:f1:6a:79:6e:d7:4d:12:eb:2b:66:af:b5:0c:be:c3:03:
4d:86:2a:6c:d4:44:f6:51:fc:65:61:b2:a3:94:91:ca:e4:e8:
1a:64:6e:14:84:a2:80:30:a9:69:7b:b8:09:76:cf:bc:1c:9f:
ee:da:aa:3a:bd:e7:da:93:70:76:76:b7:35:55:a5:4f:66:29:
19:c3:90:d3:eb:37:a7:c9:64:4f:28:a7:40:82:40:eb:28:b2:
b9:6b:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:16 2026 by rpki-client