Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213293.roa
File: AS213293.roa (raw, json)
Hash identifier: zNr0qMbIy1pHUn7L+BepcJV5QF3SEM69CCXBc85pBtk=
Subject key identifier: 1C:2D:6C:1F:90:BF:0A:F4:0A:2F:97:D7:9A:6D:5F:D7:18:66:B9:63
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 429E2F1A6AF9378DC5F8F370097F671BD56AE199
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213293.roa
Signing time: Sat 25 Apr 2026 00:31:39 +0000
ROA not before: Sat 25 Apr 2026 00:26:39 +0000
ROA not after: Sat 24 Apr 2027 00:31:39 +0000
asID: 213293
IP address blocks: 2a14:7580:e700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9e:2f:1a:6a:f9:37:8d:c5:f8:f3:70:09:7f:67:1b:d5:6a:e1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 25 00:26:39 2026 GMT
Not After : Apr 24 00:31:39 2027 GMT
Subject: CN=1C2D6C1F90BF0AF40A2F97D79A6D5FD71866B963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:e9:c4:51:06:4b:78:a9:83:2b:48:52:44:
14:a9:e5:68:f2:68:5a:65:54:b3:e3:97:5d:dd:0e:
a1:38:aa:c1:20:b1:db:36:ca:a0:ed:8e:fb:ae:18:
c1:43:8d:67:02:4a:39:e5:34:1c:79:85:5f:5a:3c:
a2:47:76:10:5b:47:70:27:a6:64:06:f9:76:3f:8b:
8d:8d:0f:9c:0c:7c:0c:71:02:82:e4:4e:9d:0a:e1:
40:29:1a:a7:37:9f:7c:fa:cd:19:ba:7f:07:9c:a4:
7d:f3:dc:90:ff:f9:4f:5c:9b:f0:1b:a8:e7:3b:19:
5b:e9:4c:a9:b9:9c:3d:fe:39:4c:00:fa:d9:e4:a5:
96:10:33:f3:14:55:2c:c7:5c:0f:aa:b9:b8:d1:62:
3a:9b:50:95:cb:33:19:67:b9:ee:52:fd:4b:c6:ea:
e1:b8:83:e9:83:1c:5c:4b:a0:30:ad:15:a1:09:db:
fd:77:b5:7d:39:ec:23:50:51:82:27:8b:ba:44:19:
c9:28:65:65:64:ca:bf:53:08:b0:ba:80:cc:07:55:
18:dd:81:77:a3:cb:0d:57:be:55:ef:6d:11:06:db:
62:44:47:80:a1:9b:4a:84:ab:1f:46:8f:0c:88:d4:
54:12:e6:ec:7f:c2:8d:57:a9:1d:a8:72:bb:e6:6e:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:6C:1F:90:BF:0A:F4:0A:2F:97:D7:9A:6D:5F:D7:18:66:B9:63
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:e700::/40
Signature Algorithm: sha256WithRSAEncryption
88:14:21:61:f1:c9:18:c8:f7:12:79:d9:9f:01:4e:61:fc:40:
1a:61:c3:62:69:00:7b:46:68:ac:04:b9:a9:04:ef:d6:17:75:
d2:cc:5d:94:76:15:e4:a0:0c:d3:ac:0c:33:c7:90:20:3c:36:
2b:21:90:00:9a:22:eb:a1:e4:ba:49:c7:ca:45:fb:19:b4:14:
0a:0b:b6:e1:47:b6:65:c1:8e:84:4b:4f:c0:49:66:1e:f9:62:
6b:ce:de:c6:18:33:ea:33:5d:e2:6b:17:94:8e:10:84:14:54:
bb:02:50:06:c1:e8:a2:6b:97:2b:ab:9c:c4:a3:42:66:84:58:
c2:59:da:d7:b3:b8:df:3b:e6:2d:4b:92:6a:0c:dc:3a:f1:d3:
d1:8e:5e:15:b3:9b:c0:88:4d:51:c2:83:4f:2b:9d:c2:ae:a2:
26:ef:8b:ce:b3:45:d0:dc:ab:3d:ba:c4:2e:95:c8:2f:67:25:
17:41:10:13:83:eb:7a:14:80:21:d8:a6:82:af:f2:23:34:b3:
73:af:f4:73:a4:38:51:60:23:4d:0d:87:3f:51:68:31:9b:2c:
ff:50:88:2e:69:03:2b:83:22:13:86:d2:30:db:6c:e4:33:da:
5d:1d:f3:54:9f:5a:af:3a:67:cd:34:76:d9:6c:bd:06:fe:90:
78:ae:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:10:41 2026 by rpki-client