Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213617.roa
File: AS213617.roa (raw, json)
Hash identifier: ClBei68R1hJ7/n9Lttu70Gulk3grgSS7FBvmaHMq8v4=
Subject key identifier: F2:32:C4:9B:9B:E8:8B:34:C1:02:30:F3:44:E8:A4:F8:AA:5E:4E:BD
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 74D56F6BC3A898D9CB872215A2A55E821CDF5696
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213617.roa
Signing time: Sat 24 Oct 2026 17:49:50 +0000
ROA not before: Sat 24 Oct 2026 17:44:50 +0000
ROA not after: Sat 23 Oct 2027 17:49:50 +0000
asID: 213617
IP address blocks: 2a14:7581:9b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 11:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d5:6f:6b:c3:a8:98:d9:cb:87:22:15:a2:a5:5e:82:1c:df:56:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 24 17:44:50 2026 GMT
Not After : Oct 23 17:49:50 2027 GMT
Subject: CN=F232C49B9BE88B34C10230F344E8A4F8AA5E4EBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:8b:db:4e:77:75:65:35:d9:89:3d:bf:f5:
0a:2a:61:8f:d1:a5:9f:e3:0b:fa:a2:b0:c6:0b:e9:
ed:ec:1c:ff:a0:6d:de:55:6f:cd:4f:df:2f:5f:0e:
b8:87:50:9b:1b:2d:f9:0d:42:38:00:66:95:57:23:
e5:d9:2e:cb:87:bd:25:d0:b6:66:ae:e8:48:b2:33:
a9:e7:38:1e:76:58:04:66:65:18:4c:9f:10:23:24:
55:86:5f:25:22:d1:d5:b4:1e:a8:b8:bf:4c:d9:d5:
58:dc:55:ad:19:e4:0c:6c:63:b5:5d:4b:2a:22:4e:
a3:15:62:7f:c3:99:5d:54:26:20:20:7b:59:28:31:
dc:bf:54:73:a5:a2:15:d4:9c:c7:ab:e8:7c:7b:be:
20:29:ec:20:80:93:66:a2:d4:42:5a:9d:46:43:81:
59:1d:73:f6:f3:02:6c:58:6c:ea:f7:5e:5c:4c:9c:
78:bd:84:f8:ea:a2:43:eb:2a:3d:fe:49:65:f5:7e:
06:e8:6c:fa:bb:b0:60:56:92:b2:8c:79:ac:35:d1:
bc:ec:4a:9f:1e:ce:4b:f4:0d:ae:73:c8:7f:59:46:
76:18:4e:fa:f1:57:d1:4c:6c:ff:17:2e:64:67:8c:
92:c8:cc:6c:c6:65:79:7d:29:12:5f:09:68:ec:1d:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:32:C4:9B:9B:E8:8B:34:C1:02:30:F3:44:E8:A4:F8:AA:5E:4E:BD
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9b00::/40
Signature Algorithm: sha256WithRSAEncryption
50:5f:5c:eb:08:3b:65:a9:74:ed:a8:03:8b:87:54:fa:0c:4f:
bf:66:ba:65:3e:b5:a7:54:d3:d2:75:02:48:68:4b:a3:68:ab:
bb:02:2c:9a:73:7b:4d:92:6e:35:d1:38:18:51:7e:b2:f2:40:
fe:7a:b4:79:69:38:ea:70:b7:bf:1c:c4:6f:15:e9:8b:24:ed:
57:2e:5d:1a:0c:2e:ba:a5:06:6b:a7:f9:b2:6a:5d:70:21:64:
03:52:cd:3e:3a:77:8f:54:f7:ab:1c:f4:20:c6:56:5b:c3:0b:
b7:e6:d9:19:67:04:5b:07:cd:77:a4:7a:de:b3:ce:f0:2a:b1:
cb:d5:2e:e4:29:63:ed:28:4a:a9:5f:be:71:36:95:33:f3:4b:
dc:64:ad:19:cb:fd:7e:86:13:1b:e4:ca:e5:ef:df:ef:73:02:
a5:7f:18:07:11:44:45:30:24:a7:e8:34:57:de:ba:6e:47:17:
33:06:91:13:0d:97:22:78:d4:ca:52:07:7e:8a:17:d6:57:c5:
af:dc:d2:92:25:b7:85:88:b3:34:3d:55:e4:9b:e8:fa:64:67:
8f:4b:a1:7c:c4:66:21:d8:c9:2f:ce:20:33:2f:16:2e:36:38:
56:16:0c:68:47:97:27:ac:db:f7:35:b7:7e:39:e1:34:8a:61:
23:de:05:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 16:56:56 2026 by rpki-client