Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214402.roa
File: AS214402.roa (raw, json)
Hash identifier: UKBCr8WPkBJT8JQsgmd5T6OAi1DWuoeZ7ottSiq4GAw=
Subject key identifier: BE:EC:C5:9D:92:62:22:6B:8B:0F:06:74:8F:CA:AA:9F:5C:A2:9F:EA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3363172F492F946ED39C72ED90F63896207CCE53
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214402.roa
Signing time: Tue 22 Sep 2026 14:49:35 +0000
ROA not before: Tue 22 Sep 2026 14:44:35 +0000
ROA not after: Tue 21 Sep 2027 14:49:35 +0000
asID: 214402
IP address blocks: 2a13:9500:43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:63:17:2f:49:2f:94:6e:d3:9c:72:ed:90:f6:38:96:20:7c:ce:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 14:44:35 2026 GMT
Not After : Sep 21 14:49:35 2027 GMT
Subject: CN=BEECC59D9262226B8B0F06748FCAAA9F5CA29FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:4f:31:23:67:19:e8:94:d7:2b:43:07:9e:
8d:d1:22:76:c1:a6:10:60:cb:49:03:b5:a7:0f:77:
0c:d6:e3:f9:5f:7a:e4:9a:3f:a4:e2:ec:50:0f:73:
1d:ca:7e:88:d4:2e:e6:97:c6:87:cc:61:38:8f:c5:
e6:44:6c:cc:e4:f0:84:3c:5a:5b:5b:f0:8c:f5:15:
8b:41:0a:3f:9e:97:6e:35:73:bc:43:27:23:e1:21:
1b:bb:82:e4:55:15:35:c1:fb:3e:96:86:8b:ce:7b:
a0:81:3c:1e:54:66:75:ae:9d:9a:8e:d8:a3:b9:65:
ae:d8:b3:a0:12:fa:20:57:2b:0b:96:57:20:b3:c7:
e6:ba:32:a9:2e:f4:06:ad:4e:a4:40:89:76:50:fe:
16:97:d1:fb:9f:20:9a:8a:22:60:73:78:40:50:b8:
c0:ae:43:76:29:e3:83:3c:05:e4:63:76:a3:ec:f2:
e6:b7:76:06:c9:89:21:67:df:88:01:9a:e5:6a:81:
1c:9a:64:89:b0:20:98:62:39:61:5f:50:4e:5e:54:
1b:42:b3:04:e3:c2:e6:80:56:24:39:34:c0:d2:67:
4c:a5:0a:ae:7a:5a:63:40:fa:4e:13:32:2a:bd:eb:
20:0b:3e:ec:1f:72:ec:28:0c:49:5a:30:ad:de:dc:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EC:C5:9D:92:62:22:6B:8B:0F:06:74:8F:CA:AA:9F:5C:A2:9F:EA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:43::/48
Signature Algorithm: sha256WithRSAEncryption
1f:a4:b6:a8:db:d0:ba:97:4a:51:d7:f1:f8:c1:0b:a6:9e:b6:
89:59:44:26:ec:07:4a:03:2e:2d:4e:2c:dc:08:4e:03:3c:bc:
e8:ba:f9:05:44:75:e8:f4:22:8a:ad:46:2e:fe:3b:b3:86:98:
a1:cc:36:c5:da:2b:ca:ab:8b:b2:66:5c:79:d6:68:71:da:f2:
9a:58:62:9c:a1:18:ce:3c:b9:a2:dc:33:d0:7a:4e:f8:29:52:
8f:a1:f8:b3:26:da:35:17:3b:a2:e2:d2:bf:34:61:80:99:48:
fd:7f:e3:b6:05:e4:ef:8b:15:d5:09:c1:d0:2f:24:2f:bd:42:
fd:02:0e:a4:1b:94:bd:6b:d0:4c:84:12:d8:6d:79:ee:63:1e:
1a:e9:f4:d3:fd:57:1a:ae:a1:9f:69:51:c3:f1:18:bd:61:00:
10:43:ec:27:2a:f2:45:06:a1:35:c9:21:aa:fa:85:73:66:d1:
5d:c9:38:11:b8:b2:17:e4:ae:68:af:39:b2:df:1f:df:38:69:
0a:a5:b6:9e:ee:41:fa:99:4f:01:db:00:45:f3:31:18:24:7a:
ff:c0:62:e6:ea:e9:8d:a2:7f:12:a5:b3:ba:04:fd:b9:c3:44:
59:b6:5c:b5:07:08:0b:7f:ad:fa:03:aa:66:e8:86:71:9d:57:
db:fc:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:46:13 2026 by rpki-client