Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213323.roa
File: AS213323.roa (raw, json)
Hash identifier: vlvghqBNkmqxyGKtgxJYRXEUWFbXrrW3bP81H9MWVfA=
Subject key identifier: A9:8C:E1:B4:C7:AF:AF:1A:8A:F2:F9:72:6B:B1:3B:C1:30:C9:DA:EF
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3C02CB4559C208299497BDC7C292961E63B85086
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213323.roa
Signing time: Tue 22 Sep 2026 20:06:53 +0000
ROA not before: Tue 22 Sep 2026 20:01:53 +0000
ROA not after: Tue 21 Sep 2027 20:06:53 +0000
asID: 213323
IP address blocks: 2a14:7583:5600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:02:cb:45:59:c2:08:29:94:97:bd:c7:c2:92:96:1e:63:b8:50:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 22 20:01:53 2026 GMT
Not After : Sep 21 20:06:53 2027 GMT
Subject: CN=A98CE1B4C7AFAF1A8AF2F9726BB13BC130C9DAEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:a5:ef:f2:11:ae:d9:e1:a8:06:3f:6d:9d:
77:99:68:a5:c9:06:5c:fd:5f:51:3a:4b:25:20:54:
3e:02:27:2d:44:30:da:b2:bc:25:1e:1f:bb:b6:b3:
75:d6:28:26:14:48:34:05:50:46:74:36:5e:0f:e7:
bb:b1:67:14:72:69:6b:c4:8c:88:84:7f:12:10:30:
72:56:58:6c:0b:4d:08:1d:ad:2d:ae:a3:ab:85:3c:
4f:3d:a7:41:be:28:e1:7f:79:05:38:7f:b4:82:52:
dc:88:d2:98:06:88:34:1a:09:ad:e1:50:5d:ee:ea:
35:1c:02:a7:38:1b:22:cb:c1:52:a2:65:fe:1a:03:
18:02:e4:80:95:e5:d9:15:24:79:95:ff:59:59:a4:
ea:35:e0:73:41:58:0e:d2:31:7c:eb:8b:20:da:69:
55:74:ac:9e:5c:0d:26:c9:dc:4a:98:01:91:59:f3:
b7:ef:14:bf:26:17:40:bb:9b:47:1f:86:60:3a:36:
92:e8:c5:01:36:cc:0c:2e:5c:92:a0:a9:e2:40:ce:
fb:ea:fd:74:7b:e5:1b:22:eb:67:0c:ad:f1:3b:9b:
cd:fd:89:83:d3:e2:d3:e0:9b:90:86:88:e6:90:ed:
56:49:d2:b4:b2:1d:09:9a:28:e6:47:ba:75:ae:98:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:E1:B4:C7:AF:AF:1A:8A:F2:F9:72:6B:B1:3B:C1:30:C9:DA:EF
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:5600::/40
Signature Algorithm: sha256WithRSAEncryption
1f:a8:72:a1:9a:8a:7e:be:86:dd:fd:48:21:15:ad:1b:a6:71:
ac:96:66:d7:bc:b2:1d:bc:f4:f5:c2:c3:d0:d5:3c:88:02:6c:
a8:1b:f8:95:bb:73:13:0b:1c:41:d8:60:d4:99:c4:35:a7:40:
5c:e3:52:6a:d0:07:ef:77:e8:55:21:3c:92:f6:3d:dd:f9:39:
1b:13:c9:cc:5d:97:01:12:20:3f:15:fb:96:d5:5e:b2:42:25:
68:77:f6:3d:65:21:c8:b4:a0:9f:dc:53:75:3a:4b:b7:e8:ba:
5c:35:0d:7c:96:2a:34:85:04:4a:60:44:ef:1b:a9:47:13:7e:
68:b7:21:9c:f2:5a:33:33:15:c1:7b:89:91:8a:cf:7d:2d:83:
4f:7e:74:6e:c3:1b:a0:33:14:fa:cc:a3:d4:c1:73:b3:04:f5:
26:6f:70:3b:d0:44:20:ab:93:f7:e2:48:b1:9a:3a:5d:ce:f3:
42:82:c1:3c:bb:bf:cd:05:75:db:3a:28:89:b4:ef:30:33:65:
04:6b:ca:1b:8f:4d:04:bd:63:f1:ec:ad:9e:39:b2:a9:34:93:
59:1d:f6:05:8d:46:22:09:34:67:68:18:13:d3:1a:76:36:a9:
3e:af:f5:ea:fd:8d:01:b0:5e:b7:6f:7d:01:e6:39:0a:86:04:
5c:89:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:35 2026 by rpki-client