Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213738.roa
File: AS213738.roa (raw, json)
Hash identifier: rVwiHalJcpQpqeIiwiqP3Ya6AuCXt+qRh1QbCiA1WbA=
Subject key identifier: 90:00:21:FB:93:FE:45:31:D2:91:33:4D:8F:A8:24:8F:D7:7F:21:35
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1F0AA14950C41E9339C4D861B629243B176FBCAD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213738.roa
Signing time: Wed 23 Sep 2026 06:49:35 +0000
ROA not before: Wed 23 Sep 2026 06:44:35 +0000
ROA not after: Wed 22 Sep 2027 06:49:35 +0000
asID: 213738
IP address blocks: 2a13:9500:fd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0a:a1:49:50:c4:1e:93:39:c4:d8:61:b6:29:24:3b:17:6f:bc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 23 06:44:35 2026 GMT
Not After : Sep 22 06:49:35 2027 GMT
Subject: CN=900021FB93FE4531D291334D8FA8248FD77F2135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:f7:ac:43:bb:39:d7:cf:ac:33:6d:92:5b:
90:19:ff:8a:e4:fc:18:fd:13:7a:b3:6c:c9:64:b5:
ce:fd:3d:74:b8:d4:53:be:30:bb:e0:e4:b9:3a:03:
fd:90:31:8d:c1:36:97:9d:09:fd:52:ac:54:86:d7:
d6:ab:ef:f3:b5:c7:9e:b0:ea:24:70:0a:b1:b1:43:
e6:f7:3d:d5:f8:3f:ae:c1:f4:cf:33:03:47:ca:1c:
e2:8f:9c:0d:8b:43:64:55:fa:b7:5e:ca:d7:70:c7:
92:04:ae:aa:cc:64:84:9b:66:56:ba:d1:08:4a:63:
0c:8f:50:c4:21:82:d4:9b:58:8d:75:a6:01:bd:5c:
c2:0a:bd:8f:04:dd:ba:f1:3f:d8:37:e5:c2:15:38:
ba:b2:01:1f:d4:6b:c3:1f:c2:b7:f6:55:9d:02:0f:
4d:0f:74:8b:41:49:45:6d:dd:5d:2a:9e:c6:73:a5:
dd:80:04:14:e7:f6:fb:87:d3:5b:62:60:d3:9e:00:
cd:eb:11:c8:03:30:6b:2a:19:71:7b:49:ab:d1:59:
e9:f2:4f:33:e2:fd:a9:89:df:38:b6:d2:58:c3:a2:
d5:92:fb:5c:80:48:cd:91:f8:ee:e3:e9:06:57:0b:
0e:05:a6:ce:f3:28:aa:a2:f5:f3:34:b2:80:fd:ef:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:21:FB:93:FE:45:31:D2:91:33:4D:8F:A8:24:8F:D7:7F:21:35
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:fd::/48
Signature Algorithm: sha256WithRSAEncryption
1b:fd:d3:4b:e9:d3:40:06:b8:b5:ac:d6:ee:b1:5f:da:df:3b:
02:f5:ec:11:85:79:a4:a0:d4:98:41:26:d6:17:de:99:b1:1e:
3d:1e:a5:9a:c0:54:82:94:a1:f6:ae:93:6d:cc:63:40:61:42:
15:39:b9:5b:1b:1d:05:66:53:d3:12:68:9f:a2:94:43:a6:2e:
a6:4c:41:82:c9:fe:19:25:e4:0c:04:4a:b7:ca:88:c0:42:dd:
79:50:ca:08:08:42:ea:ee:e5:24:9c:bd:a5:92:77:e7:15:3a:
50:3c:8d:7f:34:35:60:69:54:d1:f4:f6:34:65:b4:e1:4e:98:
1f:f9:b3:9b:9c:71:a9:d0:53:01:1f:d3:4c:c1:a0:92:27:56:
20:6f:7e:39:6b:29:0c:26:6f:a3:d4:70:d0:47:46:40:18:09:
e1:90:e9:c5:2a:55:61:34:e0:89:fc:b7:5d:37:42:ef:82:17:
3c:4d:7c:3a:78:00:86:b4:69:9b:17:31:79:df:0c:28:31:76:
52:78:f1:bf:a2:4f:98:13:3c:3e:4d:81:d5:d2:d0:90:28:24:
48:85:b9:ba:b6:08:49:c2:3b:ee:36:eb:26:e0:5e:90:9e:df:
e1:a9:43:89:89:73:4d:66:3c:9d:f4:33:cb:fa:cd:d4:78:81:
0a:69:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:07:42 2026 by rpki-client