Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397032.roa
File: AS397032.roa (raw, json)
Hash identifier: H7hkUiJUm1dT6WL2xbBP+MjEGeThfxQXW5rSSUBf1z4=
Subject key identifier: CD:F0:FB:78:EA:B2:AB:95:AF:15:C6:E4:5C:E5:76:45:B2:9C:13:84
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 08838DD0950F995C2F9ECFB3D0764BBCEF337F67
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397032.roa
Signing time: Fri 02 Oct 2026 17:04:15 +0000
ROA not before: Fri 02 Oct 2026 16:59:15 +0000
ROA not after: Fri 01 Oct 2027 17:04:15 +0000
asID: 397032
IP address blocks: 2a13:9500:1e9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:83:8d:d0:95:0f:99:5c:2f:9e:cf:b3:d0:76:4b:bc:ef:33:7f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 2 16:59:15 2026 GMT
Not After : Oct 1 17:04:15 2027 GMT
Subject: CN=CDF0FB78EAB2AB95AF15C6E45CE57645B29C1384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:83:e1:28:04:df:64:0f:4e:2c:63:14:ba:
8d:c2:22:3e:81:53:aa:58:b5:fa:23:f2:20:6d:f6:
cf:eb:cf:b5:fb:92:f6:29:79:d9:e4:60:3b:6e:88:
ac:9e:8f:78:9f:7b:a7:92:81:c4:00:65:dd:29:f6:
bd:12:91:a2:e2:de:48:64:97:b5:b8:b6:dc:71:85:
0e:d7:d9:5f:14:8a:be:e0:7b:ab:ee:d5:af:80:5a:
12:b3:af:12:57:81:0c:61:4e:fd:81:ce:11:06:16:
97:2a:04:96:7a:35:d4:82:b8:17:58:38:76:ed:43:
b3:fa:0f:c5:5c:fb:1e:57:36:d2:19:2b:3f:c9:85:
51:f7:99:2d:69:7d:4a:5a:9b:ea:11:3c:e3:5e:67:
43:08:d0:98:17:ae:2d:32:63:a3:76:15:ca:c8:04:
c1:e6:b2:f5:60:b8:2c:8e:70:33:8d:ca:32:f3:03:
f0:74:46:f7:46:63:7d:ac:41:29:3a:b5:97:a1:69:
14:1a:2e:6e:ef:05:a1:5e:f7:97:7c:d9:cc:38:ea:
92:46:c7:18:cd:4d:fc:7a:58:e1:4a:ef:e7:be:7f:
af:12:4f:5b:ec:f7:98:4c:ed:3c:e4:cf:f2:ca:cc:
2b:26:05:e9:d2:06:7c:dd:5d:82:7b:b6:69:32:b6:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:FB:78:EA:B2:AB:95:AF:15:C6:E4:5C:E5:76:45:B2:9C:13:84
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1e9::/48
Signature Algorithm: sha256WithRSAEncryption
a7:25:56:40:1d:51:8d:eb:28:9a:2e:a2:12:e8:b8:85:9c:8d:
61:1a:a0:a9:fb:20:fb:02:60:99:7d:ce:b9:db:2e:e2:27:95:
49:56:94:ee:65:db:af:88:a8:04:f1:89:67:cf:ca:39:2a:46:
e6:ea:f5:9b:69:b8:66:05:19:7e:29:7d:18:e4:a3:18:37:a7:
b4:9c:cd:1f:80:57:10:71:c5:5c:72:e5:89:55:bd:4b:74:c7:
78:60:b9:3c:8f:8c:71:15:b8:35:ef:db:37:d4:31:61:f9:a6:
d6:5d:a3:7a:58:ad:48:8f:f5:c5:b1:0e:32:b1:d9:f8:25:34:
8f:53:33:3b:e9:63:b5:ce:73:74:44:33:c2:8d:06:c3:9b:8c:
37:c8:98:09:b8:1b:ac:b9:3e:82:7b:cc:ac:c3:ac:82:5b:02:
51:b4:25:9d:8e:76:0b:91:bb:a2:61:ba:f6:3b:f9:e9:9f:22:
26:b1:62:0f:14:99:1c:9e:8a:dc:1b:50:80:e7:33:39:9a:ba:
a7:b2:ba:56:bf:d6:bc:a7:0f:58:48:cf:17:65:c9:c3:23:92:
cc:57:2a:83:93:af:33:e2:80:b0:29:b6:2d:f6:72:e8:0f:a7:
d7:d1:19:34:62:19:bf:88:dd:04:f1:f9:0b:eb:6d:96:e4:1b:
ae:e7:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:13:07 2026 by rpki-client