Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1299.roa
File: AS1299.roa (raw, json)
Hash identifier: pqzvFtMcDe7nx28X2iPBc58KjiGjEtOEZtofrdz3+4s=
Subject key identifier: DE:42:06:C4:11:D5:99:12:8B:1C:53:7D:8F:92:03:05:B1:2E:22:6F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 01CD06BA941C6B7C56F8D2467E2CA78493D02F92
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1299.roa
Signing time: Thu 28 May 2026 13:53:59 +0000
ROA not before: Thu 28 May 2026 13:48:59 +0000
ROA not after: Thu 27 May 2027 13:53:59 +0000
asID: 1299
IP address blocks: 82.41.72.0/24 maxlen: 24
82.41.98.0/24 maxlen: 24
82.41.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:cd:06:ba:94:1c:6b:7c:56:f8:d2:46:7e:2c:a7:84:93:d0:2f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 28 13:48:59 2026 GMT
Not After : May 27 13:53:59 2027 GMT
Subject: CN=DE4206C411D599128B1C537D8F920305B12E226F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:aa:c4:5d:ec:d0:a3:8f:19:a1:bb:02:07:
ca:e2:cd:b5:0a:8d:ac:cf:55:b8:78:32:30:6b:8f:
ed:30:68:ca:9c:63:8d:55:ba:a1:22:5f:88:29:a7:
d3:d1:14:ea:00:cf:05:45:f5:87:5f:f4:d8:96:9b:
9d:89:3e:c1:41:ca:11:79:ff:34:4f:25:3f:31:45:
82:5c:c0:a8:8f:90:70:5a:ca:96:25:b3:4f:40:04:
60:46:18:33:99:2c:f3:7f:f9:6e:f8:ca:6e:c3:26:
0a:ce:ea:93:b2:15:84:0f:24:ef:34:e1:4c:d7:9b:
9a:c5:8e:5a:a5:d7:a6:dc:a2:df:3d:40:76:1b:49:
04:64:7f:89:d1:01:0b:56:71:42:53:59:fe:56:c4:
92:70:ea:74:4d:e8:bc:22:45:1e:dc:62:08:23:3a:
24:13:98:77:f6:ef:52:ec:c6:c8:d1:4a:29:15:dc:
c9:dd:a1:7e:1b:6e:88:26:9a:92:78:b7:09:5a:ad:
bf:b6:16:a0:5a:72:54:4c:df:9e:cc:17:c3:1c:9f:
87:7c:d8:b8:af:92:cf:21:a1:13:5c:07:30:85:b2:
06:9b:7b:95:55:e0:c4:6e:71:9b:23:47:40:1f:4a:
14:bc:c8:a5:3d:0c:0c:c9:b4:4d:c7:ef:aa:32:4a:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:42:06:C4:11:D5:99:12:8B:1C:53:7D:8F:92:03:05:B1:2E:22:6F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.72.0/24
82.41.98.0/24
82.41.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e9:a2:4c:84:b5:7f:52:44:33:24:0c:7e:ba:fd:e3:9c:8e:
18:fd:ea:b6:15:e3:fd:8e:b4:3a:35:ca:29:ab:60:b4:da:c9:
5f:17:9b:a7:23:b8:dc:33:88:64:c7:07:7f:55:5d:02:c2:2f:
e8:9d:10:21:cf:c3:d7:01:99:05:93:1a:9d:e8:51:13:f0:cd:
22:5e:04:b9:47:b4:c0:60:a9:15:89:d2:bb:d5:fc:21:b1:aa:
81:31:92:dd:48:74:70:cf:03:a2:bf:21:f0:10:ad:c2:ff:4e:
71:95:7b:7f:b8:39:30:7d:cd:ce:17:12:c3:2c:3e:84:f9:9a:
98:36:39:96:9c:b1:7b:b2:70:25:4c:fd:87:e5:d0:56:d4:8f:
6a:8e:34:c1:44:5c:dc:db:44:e9:ee:b2:1e:d5:f7:c1:39:39:
9c:dc:f0:ee:2d:bd:f2:60:46:ca:c8:7a:81:af:64:dc:3c:2d:
2e:a5:e0:a1:40:e7:67:fb:9b:e0:a1:85:45:2b:27:14:29:00:
4b:cb:02:5a:8c:9b:17:70:42:72:86:3e:81:b0:f4:12:d1:d9:
92:f0:e6:a1:0e:60:12:7b:c7:b2:ca:40:a4:67:e4:5c:61:03:
b1:84:4e:72:3c:1a:9f:16:d1:d6:8a:7b:f2:a0:75:39:db:be:
8f:a5:c8:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:29 2026 by rpki-client