Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401905.roa
File: AS401905.roa (raw, json)
Hash identifier: wBmbXjcl2Vyc9y+HNUdCLKstsUaop6idc8ciRvv0l+c=
Subject key identifier: 36:FE:6E:9E:E8:4B:FC:C8:F5:0F:8B:A7:E0:3D:65:A6:92:57:D3:59
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 025F99A35C3493F4359F1E53A719E86CC65E9F3D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401905.roa
Signing time: Tue 13 Oct 2026 07:48:38 +0000
ROA not before: Tue 13 Oct 2026 07:43:38 +0000
ROA not after: Tue 12 Oct 2027 07:48:38 +0000
asID: 401905
IP address blocks: 2a13:9500:1ee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5f:99:a3:5c:34:93:f4:35:9f:1e:53:a7:19:e8:6c:c6:5e:9f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 13 07:43:38 2026 GMT
Not After : Oct 12 07:48:38 2027 GMT
Subject: CN=36FE6E9EE84BFCC8F50F8BA7E03D65A69257D359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:b5:ef:12:98:cb:a2:f6:5b:b8:b6:56:9d:
99:d3:99:61:e0:f6:0c:fd:5d:8a:39:c8:1f:a4:db:
4f:29:60:db:c2:c2:6a:be:f8:e3:3f:32:b7:59:61:
60:52:9a:72:0d:d8:84:e5:5d:13:b4:da:6c:0c:ac:
40:9d:d9:82:f5:c9:a8:80:85:14:03:93:32:0c:e4:
00:9f:40:61:28:4e:ce:c6:7f:c0:72:c3:d1:ca:2b:
f2:65:82:93:c0:73:7a:24:1d:12:76:ed:bc:e1:d6:
75:a7:17:a6:26:09:d3:68:a9:1b:17:45:39:45:55:
6b:4f:c6:0a:9d:ef:6f:3d:4e:29:e1:70:60:2c:e8:
08:e9:48:fb:9c:ca:0e:bd:71:18:ad:67:70:52:c4:
7f:42:f8:cc:48:d5:db:6b:44:0f:0a:0f:28:02:3d:
8d:7e:3e:09:5a:45:cb:12:e9:c9:53:16:35:3c:ba:
d9:f9:b3:33:35:cb:09:8b:d3:8d:eb:97:b6:c0:6e:
34:ea:07:c0:28:ed:b1:3b:e5:73:24:73:01:b2:53:
af:2f:0c:82:ed:b9:26:90:5e:93:20:ad:d1:4d:9a:
c4:95:d4:88:f5:b1:03:47:91:2d:bf:61:a3:59:33:
e4:7b:87:fd:ce:b2:6c:8d:18:d7:8e:63:d5:f5:79:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FE:6E:9E:E8:4B:FC:C8:F5:0F:8B:A7:E0:3D:65:A6:92:57:D3:59
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1ee::/48
Signature Algorithm: sha256WithRSAEncryption
9f:44:30:41:31:92:ab:b6:72:5b:d6:53:45:95:0b:f0:29:d7:
79:58:53:a0:03:39:d4:6d:0a:37:8b:f4:11:95:6f:7d:0c:53:
4f:10:3e:6b:06:a0:5f:52:40:a9:42:35:c5:e3:11:13:f3:dd:
db:9b:2c:6e:bd:3e:6c:ce:bb:8d:7c:fd:1d:51:6a:cb:25:13:
cb:58:5b:d5:1a:1a:ab:38:93:34:c3:47:b4:d7:14:1c:8f:a9:
d6:83:cf:02:cc:50:ed:e5:68:c9:4f:52:bf:9d:3c:7a:66:72:
68:d3:a3:e5:2d:94:ff:c3:96:5a:dc:4d:be:97:93:92:17:f9:
4a:22:de:af:fb:1d:86:9c:9f:bb:9b:95:0d:1e:c1:18:25:25:
87:6e:96:33:b1:32:4a:53:2d:b8:b4:1c:cd:e2:14:f3:f6:f5:
3a:80:b0:b3:79:91:3c:12:84:53:fc:c7:e6:eb:ed:36:bc:19:
ad:00:0b:ed:62:d3:04:56:b3:33:21:01:de:30:3e:03:02:d9:
4e:bc:a3:8a:0d:ba:5b:ef:5a:42:9d:2c:88:b6:01:6a:f4:83:
31:13:1b:e9:c5:a0:b4:51:26:5e:7e:7d:99:2f:6e:9f:07:28:
f8:5e:1a:64:c3:0d:3f:4c:0b:e2:81:8d:0e:2d:bd:c9:61:1b:
bc:a5:97:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:13:17 2026 by rpki-client