Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213124.roa
File: AS213124.roa (raw, json)
Hash identifier: l6YrRtsWXhGBvsWLLpCr33AGKJbhvJaeho/I7x1j914=
Subject key identifier: E2:D5:BE:ED:06:43:71:02:DA:1F:E4:9A:13:0C:48:50:FD:B1:B3:DF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5117905638A155D5DA76089F7275E88992E55C32
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213124.roa
Signing time: Wed 11 Mar 2026 13:08:29 +0000
ROA not before: Wed 11 Mar 2026 13:03:29 +0000
ROA not after: Wed 10 Mar 2027 13:08:29 +0000
asID: 213124
IP address blocks: 2a0f:85c1:ba9::/48 maxlen: 48
2a0f:85c1:bb9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:17:90:56:38:a1:55:d5:da:76:08:9f:72:75:e8:89:92:e5:5c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 11 13:03:29 2026 GMT
Not After : Mar 10 13:08:29 2027 GMT
Subject: CN=E2D5BEED06437102DA1FE49A130C4850FDB1B3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:ea:1c:5d:1d:62:65:4d:8f:18:14:c9:2f:
0f:4f:ef:5a:4f:83:35:d4:3e:bb:db:09:aa:fd:be:
a9:da:4d:7b:98:57:96:0d:62:b7:fd:ea:5b:36:e2:
31:b9:2c:90:f4:b3:96:12:dd:67:43:15:3c:d4:71:
14:af:1c:30:ea:84:db:17:b0:3a:a5:06:66:00:bf:
7d:53:42:1e:3b:9a:4e:4a:94:e4:d9:65:9e:3d:0d:
8d:c2:12:73:0a:6a:fd:57:f3:38:05:99:c7:1d:cb:
b6:b3:66:ac:60:01:55:b2:eb:77:09:4a:ab:8d:c1:
27:48:b8:c8:89:ba:43:19:a0:97:09:91:fa:a5:02:
55:35:c7:bf:3e:82:7f:c6:69:e3:5d:4e:3b:ee:c4:
a1:54:fd:8c:12:64:de:af:b2:c7:f4:45:d7:61:3a:
76:a9:9d:81:a6:41:81:0e:54:f5:e4:cd:12:17:ac:
63:19:32:99:16:6b:52:15:cc:bb:57:d1:6a:e6:00:
90:c5:36:30:01:8a:42:77:cd:6a:b4:8e:69:0b:5c:
84:c0:2e:ea:80:b1:93:a7:0b:43:b0:12:e2:ed:3e:
eb:a5:a0:4c:f2:0a:1e:75:08:5d:4f:cd:26:ba:db:
52:58:48:50:91:7d:34:b3:64:62:b4:bc:43:2a:55:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D5:BE:ED:06:43:71:02:DA:1F:E4:9A:13:0C:48:50:FD:B1:B3:DF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213124.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ba9::/48
2a0f:85c1:bb9::/48
Signature Algorithm: sha256WithRSAEncryption
5c:98:e1:86:29:d4:a5:13:2c:69:74:32:7c:cf:9e:94:96:9c:
9e:26:dd:b5:8d:b8:7a:5d:b6:eb:da:92:26:78:af:a4:d9:fd:
8b:50:fb:76:93:79:df:c6:86:17:1a:3c:c8:c3:66:f9:54:72:
60:b6:d7:41:25:10:ee:d8:29:88:27:05:33:dc:87:b0:d2:fa:
da:47:8d:6c:91:71:ab:8c:ae:5f:01:78:69:09:f2:e4:16:d5:
9e:81:e0:0b:42:13:8e:2e:c5:62:3c:1c:5f:ce:97:4e:f2:31:
a3:86:a6:53:9a:96:46:e6:5c:e6:1c:52:f2:04:09:26:37:a7:
bc:cd:53:b8:0f:42:40:19:2c:a7:ef:3c:63:c3:86:26:a3:f7:
aa:4e:ba:aa:1a:19:0b:34:01:dc:a6:dc:f1:df:65:35:ad:ff:
0d:f8:c9:80:41:42:70:8c:4c:0f:3e:86:18:e6:26:1c:61:73:
6a:9a:ba:da:2d:99:98:4a:18:2c:c5:fd:8d:63:1f:62:d0:bb:
f6:97:b5:eb:74:e0:d5:be:2a:4b:92:84:df:4f:0a:55:aa:b8:
9f:fa:09:5c:c1:d4:db:30:08:09:20:0a:e3:06:af:d5:e2:91:
85:e4:8c:21:7a:9c:9f:7b:2d:c8:3a:7b:63:ac:84:32:99:ec:
ee:8b:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:32:02 2026 by rpki-client