Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213430.roa
File: AS213430.roa (raw, json)
Hash identifier: wpFqdXOS+zVNiM1c32EFu44h/JajBAH7SB7HTqaf2qU=
Subject key identifier: 9F:69:88:4F:28:9A:4B:3E:EA:53:A9:7E:73:51:65:9C:8D:2D:83:EB
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 23FF762E1C0C82FD4EDAE0CCAA73BF150096AFCB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213430.roa
Signing time: Mon 06 Jul 2026 02:04:56 +0000
ROA not before: Mon 06 Jul 2026 01:59:56 +0000
ROA not after: Mon 05 Jul 2027 02:04:56 +0000
asID: 213430
IP address blocks: 2a14:7581:9fa0::/44 maxlen: 48
2a14:7581:9fb0::/44 maxlen: 48
2a14:7583:ef80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ff:76:2e:1c:0c:82:fd:4e:da:e0:cc:aa:73:bf:15:00:96:af:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 6 01:59:56 2026 GMT
Not After : Jul 5 02:04:56 2027 GMT
Subject: CN=9F69884F289A4B3EEA53A97E7351659C8D2D83EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:e0:c2:dd:9d:63:e5:f4:3a:f4:99:e8:e7:
98:d9:db:f7:63:dc:8e:ef:fa:ff:9e:6b:fd:b4:d4:
0e:69:72:1d:5c:21:65:04:52:e1:8a:71:d6:57:4c:
83:95:df:cb:1e:4b:44:cd:3e:9b:4d:da:de:24:ec:
34:c9:3c:07:94:70:f9:e3:65:6c:1c:76:9e:5c:0d:
3e:0b:7e:a2:25:b2:bf:07:a5:e2:8a:6b:86:b6:f8:
e6:f2:3a:04:9b:3e:75:af:29:70:6a:9a:d8:16:de:
53:f4:e0:24:aa:85:b0:b4:1f:5c:a5:35:ea:d6:f3:
0c:f3:5b:ca:08:5d:66:18:59:55:11:0e:0a:0e:bf:
fe:c2:1e:43:da:e6:c7:f6:45:0a:cd:7e:e4:f0:cd:
e2:72:5d:35:50:db:3f:2c:48:e5:df:6c:44:6a:b0:
79:c2:38:3e:0c:05:9e:6b:fd:be:58:d0:02:49:30:
7e:4a:6a:02:c2:93:cb:de:7d:69:66:b0:b0:77:be:
42:e9:48:74:56:fc:7e:0f:74:2d:f3:a3:ce:f3:67:
07:73:a9:ee:77:08:74:db:e3:31:c1:18:2c:62:59:
59:b4:dd:fe:68:fc:72:89:de:8a:8b:56:9f:89:0f:
c2:aa:71:d7:5d:cb:87:09:65:25:d6:a1:9b:f9:79:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:69:88:4F:28:9A:4B:3E:EA:53:A9:7E:73:51:65:9C:8D:2D:83:EB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9fa0::/43
2a14:7583:ef80::/44
Signature Algorithm: sha256WithRSAEncryption
74:56:dd:58:e8:57:57:12:87:2c:89:2c:ed:a9:c8:95:53:d0:
b7:c7:4b:5f:70:95:8e:0e:98:aa:25:00:87:41:13:5e:a0:60:
20:2b:1d:e6:97:fa:fa:a3:56:ec:27:63:d9:6d:f6:70:49:ae:
4f:f9:99:4e:53:21:d9:ec:dd:61:14:5b:af:8d:74:94:a8:41:
22:5c:bd:c7:98:46:ce:fd:82:65:40:7b:9c:3b:c4:cc:23:a3:
3e:b2:00:72:20:ca:b9:c3:54:ce:e1:ee:95:be:e4:9d:ed:6d:
7d:99:df:b2:d6:85:af:48:4c:d5:2a:8a:81:29:cc:ae:a0:de:
92:be:d8:d5:15:62:ab:33:85:a5:ff:38:49:b2:64:ae:b5:39:
ab:91:5f:03:f2:a0:a5:55:db:f1:4d:5c:1e:63:e2:8e:41:d0:
58:1b:49:65:f3:82:90:08:29:ba:59:0f:be:46:86:52:08:57:
14:dd:99:f1:66:f7:f3:11:fd:9a:d8:3b:71:7e:74:8d:19:7c:
ba:07:57:19:cc:e2:4f:26:37:b1:6c:d8:ad:d3:3f:d1:f7:04:
95:8f:c0:87:21:4c:84:c9:a0:70:84:3f:d5:98:28:28:ad:c1:
2a:b6:e3:a7:dc:bf:01:19:33:d5:68:02:7d:c1:e5:f1:e3:22:
05:c9:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:36 2026 by rpki-client