Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214918.roa
File: AS214918.roa (raw, json)
Hash identifier: Z2xAhGtnRR6Ukr/Qdw9ybZq6Ncc3j5//HhLZ5oc1AUQ=
Subject key identifier: BE:89:6D:C6:7C:4C:E1:60:76:50:95:A1:21:77:7F:1F:F2:C3:4F:C4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 065201ED52EA97876064D50E8FDDEAEEDEF50DAE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214918.roa
Signing time: Fri 08 May 2026 18:06:44 +0000
ROA not before: Fri 08 May 2026 18:01:44 +0000
ROA not after: Fri 07 May 2027 18:06:44 +0000
asID: 214918
IP address blocks: 2a13:9500:172::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:52:01:ed:52:ea:97:87:60:64:d5:0e:8f:dd:ea:ee:de:f5:0d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 18:01:44 2026 GMT
Not After : May 7 18:06:44 2027 GMT
Subject: CN=BE896DC67C4CE160765095A121777F1FF2C34FC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:73:d0:eb:d7:c2:6b:3b:41:5b:a6:45:04:
30:5a:9a:b1:0b:f4:a0:83:8a:87:c7:38:f4:9a:34:
e5:06:9e:bb:06:62:46:72:8a:da:32:ae:12:88:80:
97:e4:8d:07:52:3f:f1:c8:c8:c1:b1:f2:8b:67:60:
3b:87:42:e4:7c:d7:8a:34:1c:7b:f1:be:72:3f:4b:
9a:0c:65:8d:88:73:e3:b3:18:78:3c:ec:46:ef:ca:
25:75:e0:69:f6:e4:2b:b0:f9:98:ab:c2:5f:e2:ea:
1b:0c:26:ff:59:07:27:da:2b:67:d0:63:66:c5:53:
b3:48:0d:d2:c4:d7:34:4c:9e:3b:4c:77:84:88:75:
12:6d:cd:50:c5:9a:2d:7d:4c:b2:a7:9a:9f:d2:8c:
1e:7c:62:db:d1:ec:91:22:0b:48:2a:55:a8:3a:be:
79:97:f2:5d:20:f5:aa:bf:e5:c5:e9:33:60:f7:cb:
11:30:de:3d:60:3e:08:c3:92:89:19:aa:c3:9b:ca:
ea:20:f8:5f:77:03:1e:91:43:2f:e0:c5:d5:f9:0c:
45:77:21:ff:43:5e:1a:e0:34:2a:06:a3:86:ac:dd:
76:94:0a:5e:4c:71:a3:9a:2a:fd:80:05:57:cc:7f:
e0:73:9c:5f:83:21:f5:d5:e9:76:8b:4a:de:21:7c:
95:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:6D:C6:7C:4C:E1:60:76:50:95:A1:21:77:7F:1F:F2:C3:4F:C4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214918.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:172::/48
Signature Algorithm: sha256WithRSAEncryption
61:1b:62:45:25:6d:2f:09:05:bc:60:9b:ba:90:e3:2d:f9:08:
a6:38:07:f7:95:06:8b:c3:c7:79:3c:6f:b5:3d:2a:78:72:84:
5d:af:10:d4:fb:ba:ee:10:ab:89:a5:90:be:c5:31:71:4b:3a:
d4:58:45:2c:09:70:fd:73:e5:f6:7a:63:10:55:00:be:59:b0:
a8:68:a0:e8:f3:a7:3f:87:1b:b5:a2:63:fc:b6:19:c0:47:a9:
bc:af:3a:89:f5:c6:e4:d8:7e:39:31:bb:7d:59:77:6e:7d:3e:
77:0d:84:45:20:32:8f:2d:f5:48:53:57:c2:71:30:c7:b1:e3:
f4:0a:69:45:d5:39:75:01:b8:97:f7:3e:33:96:d8:1d:02:49:
4c:e1:38:2c:d9:56:d1:cf:7c:8a:7f:1e:35:36:42:5b:6d:59:
3d:a9:be:5a:3c:39:d9:10:4d:fa:0e:50:bc:f9:37:21:1a:c5:
13:45:5a:a6:a3:6f:0a:f2:66:67:2a:47:db:21:1c:c2:e3:ce:
d0:54:0b:d5:e8:93:4d:25:d9:11:bc:9d:a4:29:cb:0c:38:64:
d1:5f:7d:45:b7:62:f3:2b:5c:a2:29:4b:01:40:10:ef:61:54:
0b:e4:ee:26:07:e8:49:3e:2a:8e:9d:a0:51:5f:96:42:86:3a:
d7:a7:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:53 2026 by rpki-client