Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS996.roa
File: AS996.roa (raw, json)
Hash identifier: mEbXIUxone4xDjQ2tfIFkPiUHzHY554+9hRlpNSzzy4=
Subject key identifier: D9:AD:EA:9A:E9:33:4D:5C:22:54:E9:B9:2D:7A:2B:E4:3A:47:5E:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 43B8E31EA1DE9B9100527AB21C69062B5CF052FD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS996.roa
Signing time: Mon 12 Oct 2026 02:49:36 +0000
ROA not before: Mon 12 Oct 2026 02:44:36 +0000
ROA not after: Mon 11 Oct 2027 02:49:36 +0000
asID: 996
IP address blocks: 82.24.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b8:e3:1e:a1:de:9b:91:00:52:7a:b2:1c:69:06:2b:5c:f0:52:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 12 02:44:36 2026 GMT
Not After : Oct 11 02:49:36 2027 GMT
Subject: CN=D9ADEA9AE9334D5C2254E9B92D7A2BE43A475E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:96:43:52:a2:50:b9:75:2f:14:e6:4d:ec:
c2:07:9a:7c:6b:6e:71:9f:32:15:e2:9d:54:91:08:
8e:b0:81:44:15:a0:df:2d:96:96:a4:a5:d5:e5:d1:
d0:a5:aa:89:70:63:df:db:27:66:77:a3:c4:f6:e0:
06:c3:f9:e2:70:04:08:e0:f6:09:41:84:e5:10:8d:
4e:88:97:cc:f2:26:61:49:62:43:3b:32:14:50:51:
e9:f8:af:7c:5e:d2:c3:6b:d0:4e:20:a4:72:c2:0f:
1f:6e:1c:cc:d6:51:42:a4:4c:be:83:64:5d:fc:dc:
c6:a9:f4:0a:70:05:b5:a8:16:3f:ee:db:fa:bb:e1:
c4:09:a3:eb:0b:e6:0f:f8:01:f9:a6:16:df:83:be:
75:00:08:00:b5:f8:e1:47:69:ee:09:a8:c3:b7:6e:
4e:78:24:f9:e7:64:77:54:f2:22:3d:1a:ac:84:a7:
64:e6:e0:27:8c:e7:88:aa:f5:3d:7e:42:96:35:5a:
68:6f:8f:93:48:d0:0d:e9:f1:1e:aa:c1:68:00:1c:
0d:89:5f:c3:8b:bf:87:d8:5b:4b:d2:24:c8:c3:14:
46:a1:e6:5d:b8:d9:bd:a3:2e:68:9e:c9:d4:84:7d:
48:eb:50:e3:c2:42:50:ab:a7:cb:aa:c7:ce:e5:2b:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AD:EA:9A:E9:33:4D:5C:22:54:E9:B9:2D:7A:2B:E4:3A:47:5E:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.0.0/22
Signature Algorithm: sha256WithRSAEncryption
03:31:42:ce:6c:76:bf:d8:4d:93:fa:96:68:35:b8:92:8b:2d:
0a:a1:06:8a:58:1e:cd:e7:a2:58:38:d0:65:24:ce:26:98:72:
a7:fe:e9:9f:6e:36:68:12:28:56:3d:79:1a:c2:cb:90:6b:d9:
10:8c:2d:79:f8:49:39:0c:30:f4:87:57:cd:45:f0:fb:e7:95:
a4:9a:bf:71:0d:1f:0e:44:f5:1d:55:4f:3a:b6:8d:4c:90:72:
22:fc:46:47:e4:d3:0f:44:56:74:68:8b:4a:33:56:3a:64:c0:
d0:17:8d:47:f5:a2:44:38:c6:de:63:10:1c:80:9c:10:1a:3d:
5b:e2:fd:07:5f:65:10:15:c6:a9:c0:c8:a2:d4:5b:a1:c5:e8:
27:92:1f:ea:a1:c0:eb:0a:46:0f:f2:59:d2:d2:a0:4a:89:0e:
34:42:99:d4:5f:87:cd:5c:88:4b:16:eb:ef:44:e8:df:7c:8d:
9d:3a:fa:fa:e7:25:71:14:54:70:48:e4:3b:c3:17:13:1f:22:
4b:70:94:a3:71:6d:6a:d4:76:10:b1:4e:e7:eb:01:37:3d:e1:
96:ad:29:29:7c:45:86:8f:d2:56:94:06:c0:53:8a:49:fe:28:
2d:49:23:cf:00:5a:32:f6:ee:10:ee:f7:7f:10:c6:8d:99:2e:
84:8c:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:52:24 2026 by rpki-client