Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
File: AS213896.roa (raw, json)
Hash identifier: RD1D4uB9tc3VPr+fxmGZC4uGo//cbHPj+qCc25cilr0=
Subject key identifier: B9:72:97:DF:CB:3A:C9:B6:A1:90:4B:62:B2:CD:23:F5:EB:B4:07:F5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 06328EE94589343AADCDEC16A5188FA20207A25C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
Signing time: Wed 14 Oct 2026 10:42:37 +0000
ROA not before: Wed 14 Oct 2026 10:37:37 +0000
ROA not after: Wed 13 Oct 2027 10:42:37 +0000
asID: 213896
IP address blocks: 82.24.88.0/24 maxlen: 24
84.75.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:32:8e:e9:45:89:34:3a:ad:cd:ec:16:a5:18:8f:a2:02:07:a2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 14 10:37:37 2026 GMT
Not After : Oct 13 10:42:37 2027 GMT
Subject: CN=B97297DFCB3AC9B6A1904B62B2CD23F5EBB407F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:e7:87:3e:f3:cd:76:e5:0b:9b:81:b0:7c:
66:52:6e:52:85:3a:08:35:30:ce:c8:bc:8d:c8:71:
e3:41:66:51:dc:0f:15:45:9d:51:8a:3f:bf:ee:b8:
f2:39:b2:1e:ec:5b:3b:73:67:c3:12:a1:6a:96:00:
e8:46:7a:c7:03:b9:25:7e:98:c7:b3:b7:eb:ed:b8:
5b:92:5e:6c:b5:45:14:1f:6c:43:75:15:13:5c:75:
72:df:37:54:9a:56:05:c5:20:c7:f0:69:51:e4:48:
98:a8:2a:de:12:e6:e5:a7:ec:c4:96:01:18:da:35:
9c:aa:8f:8a:d7:92:b3:6d:55:83:cd:00:4d:b8:da:
56:7d:e7:eb:26:44:56:70:a4:2d:e4:34:6e:94:5c:
e8:eb:6c:f3:7e:ca:d3:4e:d1:47:6a:31:c7:4e:59:
fe:aa:31:87:d4:4d:e1:29:7a:9b:2d:73:73:12:2b:
77:85:a7:e4:f5:92:6f:c6:8a:c5:fd:ba:ed:b7:b3:
6d:6c:f1:46:f0:70:97:02:c3:9b:f6:8e:f6:c2:6c:
b1:84:e3:42:b1:1d:0e:e6:b9:ff:cf:db:1b:e8:12:
e1:da:e6:e7:d8:8d:58:cb:52:6f:29:96:97:28:ba:
1b:59:2f:79:d5:08:53:92:e8:be:aa:f9:14:b8:45:
8a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:97:DF:CB:3A:C9:B6:A1:90:4B:62:B2:CD:23:F5:EB:B4:07:F5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.88.0/24
84.75.210.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a8:3a:47:2a:1e:f6:fa:16:1a:0b:60:b8:75:b9:ab:37:fc:
30:0f:6f:59:54:e5:10:cc:04:f9:a5:17:54:f7:56:58:0f:fe:
7a:63:b3:df:7a:bc:f2:8b:71:e5:73:23:7c:11:d7:0a:57:1d:
0e:4b:23:bb:79:2a:26:1a:6a:9a:35:5c:ff:2b:5d:92:ac:e7:
e9:74:74:83:6a:a6:ae:b1:75:c1:c4:ed:87:af:ad:b9:5c:82:
73:19:f2:3b:3e:dc:83:85:bf:07:b7:ea:79:46:7a:af:b6:f6:
a8:4b:4d:5d:4d:12:21:de:1a:9f:11:3c:f7:70:01:ae:ab:2d:
e1:69:5c:83:ff:30:87:3e:ec:88:55:69:bb:1e:27:60:0a:81:
fc:7e:fe:e4:c9:40:d9:17:03:df:17:04:45:b7:53:5e:0a:37:
00:c2:0d:4d:23:88:f5:aa:15:d4:da:52:0a:26:0c:1c:5b:0f:
6a:14:94:a9:d3:3e:a7:b3:17:4d:0a:fe:5b:7c:a7:36:5f:2e:
83:87:cb:49:37:d2:ae:be:91:7e:fc:b4:3d:a3:3f:91:51:b4:
d1:8e:fc:d5:e0:b8:59:81:a8:16:7f:66:3b:ab:a1:f2:8f:cf:
e5:9c:d1:e5:e9:00:b3:25:57:ec:37:7d:e1:ba:1f:af:2f:e5:
b3:96:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:14:03 2026 by rpki-client