Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399011.roa
File: AS399011.roa (raw, json)
Hash identifier: FHmZQPQ+kzVg+sUQ54L3WfOvcKy4shnBiKC3TFd0d3M=
Subject key identifier: 64:F0:6E:9B:8B:59:BF:52:DF:5F:EA:5E:B9:A7:C6:44:A0:07:36:5C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1FDF8F27418D833743AB703B80355DC2F3C13619
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399011.roa
Signing time: Fri 18 Jul 2025 07:49:03 +0000
ROA not before: Fri 18 Jul 2025 07:44:03 +0000
ROA not after: Fri 17 Jul 2026 07:49:03 +0000
asID: 399011
IP address blocks: 2a13:9500:b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:df:8f:27:41:8d:83:37:43:ab:70:3b:80:35:5d:c2:f3:c1:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 18 07:44:03 2025 GMT
Not After : Jul 17 07:49:03 2026 GMT
Subject: CN=64F06E9B8B59BF52DF5FEA5EB9A7C644A007365C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:cf:fe:c6:ba:e5:88:4c:af:5b:19:dc:0e:
3b:6e:06:e8:57:26:38:61:6a:45:17:73:5f:37:80:
6b:4a:46:4d:bd:8b:1e:9d:a3:5f:a6:22:ec:15:f5:
75:f0:f1:d7:7c:3c:1e:3e:00:a4:3c:7e:8c:86:f1:
31:01:cc:cf:23:b7:c5:69:77:ec:03:8d:4f:1f:59:
ce:c1:0d:47:f6:3f:73:d7:06:43:32:4b:84:22:29:
da:32:3f:2a:69:16:26:ab:46:ab:be:0f:6b:53:df:
9d:0c:43:f5:8c:b4:c6:45:78:c4:11:30:dd:6d:bc:
3e:4b:88:ff:de:83:64:08:fa:f9:9f:86:0b:5b:2e:
cd:5d:7a:65:e5:db:a8:8b:f3:05:54:40:60:b3:2f:
60:4c:04:d8:71:27:9c:5b:f4:41:e1:53:11:99:b6:
36:45:1d:2b:56:29:87:97:42:5a:a2:8c:7b:ba:23:
26:97:48:08:81:1a:f7:07:fd:96:80:88:a2:45:14:
f7:68:86:28:8b:0e:39:dd:eb:27:0e:ce:7f:79:62:
b5:5d:44:ff:7a:bb:0b:26:a5:cf:cd:95:75:63:c5:
8b:b0:47:d2:9e:9d:52:7c:44:7f:ab:cf:97:06:4b:
c3:8b:d7:b2:1d:0c:18:ac:83:51:1f:17:fe:61:8a:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:6E:9B:8B:59:BF:52:DF:5F:EA:5E:B9:A7:C6:44:A0:07:36:5C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b4::/48
Signature Algorithm: sha256WithRSAEncryption
46:35:c2:5a:b8:f6:d0:43:2e:f4:43:89:63:91:f9:70:46:92:
df:0d:95:82:bd:7e:10:49:b1:fb:e4:93:20:5f:61:8d:f5:18:
4e:5b:57:b6:4b:2b:19:76:4a:ee:1d:73:ac:72:bf:8d:94:29:
2b:58:2f:16:8f:ed:84:a6:92:10:80:ce:9a:79:62:73:30:0b:
82:0f:96:c9:c3:cb:06:86:fa:e0:c6:9f:04:ea:f9:f0:c8:df:
93:c3:f8:08:a1:24:a5:20:f6:9c:7a:bd:8b:7d:6a:38:d1:bc:
a9:8d:18:72:21:ed:18:4f:46:a2:8d:96:ff:a7:3e:dc:aa:38:
ff:1d:14:77:bb:7d:72:b4:d5:db:d6:9e:dd:a3:18:9a:8d:0b:
3f:e7:77:ec:fd:9e:d7:e5:f7:f1:2a:50:19:e8:29:69:37:4b:
4e:ca:08:7d:aa:70:a2:2b:6d:10:0a:ad:2a:72:8c:3d:78:4d:
58:98:48:4b:2e:fc:e6:4d:30:64:a3:50:35:ae:80:1b:be:a8:
6a:aa:5a:38:9f:33:99:2a:f3:1a:e8:c3:11:54:1a:b2:b6:11:
4c:ac:89:ed:97:32:02:f5:d0:96:54:8f:2c:a0:2d:73:ab:7f:
d1:ba:5f:6c:6b:b6:6f:02:ba:ae:dd:6c:88:a6:0c:1d:2a:16:
9c:25:67:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUH9+PJ0GNgzdDq3A7gDVdwvPBNhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA3MTgwNzQ0MDNaFw0yNjA3MTcwNzQ5MDNaMDMxMTAvBgNV
BAMTKDY0RjA2RTlCOEI1OUJGNTJERjVGRUE1RUI5QTdDNjQ0QTAwNzM2NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQM/+xrrliEyvWxncDjtuBuhX
JjhhakUXc183gGtKRk29ix6do1+mIuwV9XXw8dd8PB4+AKQ8foyG8TEBzM8jt8Vp
d+wDjU8fWc7BDUf2P3PXBkMyS4QiKdoyPyppFiarRqu+D2tT350MQ/WMtMZFeMQR
MN1tvD5LiP/eg2QI+vmfhgtbLs1demXl26iL8wVUQGCzL2BMBNhxJ5xb9EHhUxGZ
tjZFHStWKYeXQlqijHu6IyaXSAiBGvcH/ZaAiKJFFPdohiiLDjnd6ycOzn95YrVd
RP96uwsmpc/NlXVjxYuwR9KenVJ8RH+rz5cGS8OL17IdDBisg1EfF/5hikqxAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUZPBum4tZv1LfX+peuafGRKAHNlwwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk5MDExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAC0MA0GCSqGSIb3DQEBCwUAA4IBAQBGNcJauPbQQy70Q4ljkflwRpLfDZWCvX4Q
SbH75JMgX2GN9RhOW1e2SysZdkruHXOscr+NlCkrWC8Wj+2EppIQgM6aeWJzMAuC
D5bJw8sGhvrgxp8E6vnwyN+Tw/gIoSSlIPacer2LfWo40bypjRhyIe0YT0aijZb/
pz7cqjj/HRR3u31ytNXb1p7doxiajQs/53fs/Z7X5ffxKlAZ6ClpN0tOygh9qnCi
K20QCq0qcow9eE1YmEhLLvzmTTBko1A1roAbvqhqqlo4nzOZKvMa6MMRVBqythFM
rIntlzIC9dCWVI8soC1zq3/Rul9sa7ZvArqu3WyIpgwdKhacJWfm
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:47 2025 by rpki-client