Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
File: AS213896.roa (raw, json)
Hash identifier: dVQpDvrgBw4bfEr3prxcGgLUhBrUWmn5tGLWLfNzdWM=
Subject key identifier: 1D:5E:26:14:5C:70:49:74:C3:D5:4D:9C:FD:7E:47:CD:03:73:F3:CE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 143E07E3AC59F7B0522A566ADC57121A680D3A26
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
Signing time: Fri 08 May 2026 19:47:11 +0000
ROA not before: Fri 08 May 2026 19:42:11 +0000
ROA not after: Fri 07 May 2027 19:47:11 +0000
asID: 213896
IP address blocks: 82.24.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3e:07:e3:ac:59:f7:b0:52:2a:56:6a:dc:57:12:1a:68:0d:3a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 19:42:11 2026 GMT
Not After : May 7 19:47:11 2027 GMT
Subject: CN=1D5E26145C704974C3D54D9CFD7E47CD0373F3CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:54:20:32:66:61:ae:7c:3c:34:11:54:d4:
e0:28:cc:22:cc:2b:09:3c:fe:54:04:fb:43:f9:ae:
c6:ec:58:a5:d4:ca:d1:d9:d8:db:44:9b:e2:da:27:
ab:8e:f5:7f:15:01:04:25:e7:f3:95:51:69:ab:da:
56:c7:d1:0d:e8:b4:55:9f:b2:31:95:e8:ca:ee:93:
35:8d:a5:bb:f2:52:df:7f:5c:88:ae:00:95:ba:8c:
95:db:3c:9c:48:5f:29:23:17:ec:32:6f:fe:fd:f3:
cc:90:51:20:a7:bf:6b:96:53:c1:88:d2:64:3c:3b:
77:76:51:c1:bd:9b:81:95:58:5a:b1:a1:40:3a:97:
de:a0:5c:91:bc:b8:bf:31:da:ba:8d:40:64:72:13:
f0:f2:02:9d:4d:12:47:81:6b:80:0c:15:2f:9e:60:
ca:b6:f5:13:a4:e2:2f:7c:08:bf:10:ad:0c:b2:10:
9f:54:a5:2e:94:94:b6:3a:7f:77:cb:c6:60:fe:c9:
ec:d2:4a:ff:d0:70:ec:aa:b1:be:d1:fd:c4:6d:7f:
b8:5c:10:d7:b8:ea:24:40:6b:c1:6d:87:6f:32:2f:
d6:85:57:b0:c3:fa:c8:cf:b4:99:22:a3:a6:31:69:
a5:ff:bc:80:9a:46:a4:88:98:97:14:7b:de:cf:59:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:26:14:5C:70:49:74:C3:D5:4D:9C:FD:7E:47:CD:03:73:F3:CE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.88.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ed:b5:8c:0a:ba:db:f5:de:d7:db:08:da:9b:b9:44:b9:81:
de:1c:bd:89:b5:1f:cb:44:a1:fe:69:5c:88:4b:2e:63:09:a7:
cb:0b:92:8f:95:4d:9c:c4:fc:3c:0c:4a:8e:6a:1a:14:47:f4:
a2:27:5b:7b:c2:b1:e7:2b:f3:fd:e7:83:cb:ea:9a:1b:e7:bd:
f7:9d:8d:41:53:fc:17:9a:93:04:88:d7:ba:38:b1:86:d8:f5:
e7:52:36:a7:1c:eb:93:3c:13:44:65:fc:05:ea:f6:af:11:0a:
0c:c8:25:b6:74:66:c4:5f:0f:86:b4:aa:ce:a6:8c:6c:d9:6d:
12:2f:8a:87:c4:e1:b0:f0:77:89:81:45:a6:28:24:fb:b0:97:
cb:eb:da:a9:f8:86:aa:1e:6e:a9:76:b9:50:96:61:64:2a:30:
f1:e2:af:c6:5d:64:8d:6a:83:08:f8:2f:ac:7f:5b:0f:42:b7:
7f:86:3e:95:37:56:2b:6c:c7:02:97:47:77:40:c5:ac:8e:ea:
bf:9c:22:b7:ee:a6:9d:c5:2f:56:99:9c:22:d8:61:f7:4d:46:
7a:46:d8:3d:3c:ad:72:90:e4:41:69:df:78:15:74:c7:c7:bf:
af:27:6c:4c:11:14:77:0d:29:c0:9a:ba:3d:63:b6:b9:74:b6:
7b:66:a7:28
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUFD4H46xZ97BSKlZq3FcSGmgNOiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MDgxOTQyMTFaFw0yNzA1MDcxOTQ3MTFaMDMxMTAvBgNV
BAMTKDFENUUyNjE0NUM3MDQ5NzRDM0Q1NEQ5Q0ZEN0U0N0NEMDM3M0YzQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNh1QgMmZhrnw8NBFU1OAozCLM
Kwk8/lQE+0P5rsbsWKXUytHZ2NtEm+LaJ6uO9X8VAQQl5/OVUWmr2lbH0Q3otFWf
sjGV6MrukzWNpbvyUt9/XIiuAJW6jJXbPJxIXykjF+wyb/7988yQUSCnv2uWU8GI
0mQ8O3d2UcG9m4GVWFqxoUA6l96gXJG8uL8x2rqNQGRyE/DyAp1NEkeBa4AMFS+e
YMq29ROk4i98CL8QrQyyEJ9UpS6UlLY6f3fLxmD+yezSSv/QcOyqsb7R/cRtf7hc
ENe46iRAa8Fth28yL9aFV7DD+sjPtJkio6YxaaX/vICaRqSImJcUe97PWd+DAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUHV4mFFxwSXTD1U2c/X5HzQNz884wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzODk2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhhY
MA0GCSqGSIb3DQEBCwUAA4IBAQA87bWMCrrb9d7X2wjam7lEuYHeHL2JtR/LRKH+
aVyISy5jCafLC5KPlU2cxPw8DEqOahoUR/SiJ1t7wrHnK/P954PL6pob5733nY1B
U/wXmpMEiNe6OLGG2PXnUjanHOuTPBNEZfwF6vavEQoMyCW2dGbEXw+GtKrOpoxs
2W0SL4qHxOGw8HeJgUWmKCT7sJfL69qp+IaqHm6pdrlQlmFkKjDx4q/GXWSNaoMI
+C+sf1sPQrd/hj6VN1YrbMcCl0d3QMWsjuq/nCK37qadxS9WmZwi2GH3TUZ6Rtg9
PK1ykORBad94FXTHx7+vJ2xMERR3DSnAmro9Y7a5dLZ7Zqco
-----END CERTIFICATE-----
Generated at Wed May 13 08:43:11 2026 by rpki-client