Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13847.roa
File: AS13847.roa (raw, json)
Hash identifier: 96lCTSTOpNtnhsIHSeaF0ICPpeK91e0eVqxQ3HylZiM=
Subject key identifier: 2B:29:E7:42:E7:C1:7E:E3:EF:1B:BD:7E:AC:12:E0:59:77:4C:1B:BB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2A61A0CF274FDA525DBFAA91C0927E1303E36EFE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13847.roa
Signing time: Sun 31 Aug 2025 12:37:38 +0000
ROA not before: Sun 31 Aug 2025 12:32:38 +0000
ROA not after: Sun 30 Aug 2026 12:37:38 +0000
asID: 13847
IP address blocks: 2a13:9500:d2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:61:a0:cf:27:4f:da:52:5d:bf:aa:91:c0:92:7e:13:03:e3:6e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 31 12:32:38 2025 GMT
Not After : Aug 30 12:37:38 2026 GMT
Subject: CN=2B29E742E7C17EE3EF1BBD7EAC12E059774C1BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:ac:c3:cc:55:e5:62:96:87:9a:b3:6f:5e:
a8:4e:c9:c9:93:c1:ee:a9:49:97:5e:34:16:5a:a2:
7d:c1:40:c6:18:50:96:fc:9e:07:22:cd:3b:6a:44:
4b:dd:cc:85:91:b7:db:fb:5c:fe:bf:6a:81:f0:cd:
2c:b1:76:41:97:99:99:65:ed:31:60:57:58:3d:1d:
9d:59:01:31:8f:03:e1:99:a4:71:2f:6c:0b:e5:b5:
4e:46:bb:a2:8a:c7:b0:3a:98:e9:a5:2e:66:60:58:
e4:86:19:a7:7f:ae:91:3f:fa:63:41:90:bb:ea:8c:
04:f5:90:29:7b:28:21:5f:b5:65:c1:97:df:eb:d1:
b4:4c:fe:b7:10:0e:91:92:51:34:4b:42:74:91:f2:
99:fa:5b:bc:eb:83:21:9c:34:14:a4:18:a3:47:64:
2b:c0:e9:b0:fe:fd:f6:19:88:2c:bf:83:bb:be:6a:
e9:f0:9b:1d:30:6e:7f:6c:54:8b:c9:b3:0d:62:44:
e4:b1:e2:4c:bd:a0:79:f1:0b:c0:44:fb:c3:39:3c:
c3:e6:f7:d8:e6:ea:a8:4d:ce:9f:65:da:ed:78:fc:
8a:3c:e5:2b:50:94:f4:f7:5f:9d:44:84:0a:ed:90:
cc:11:9b:a6:18:5a:f8:a9:3b:3c:ce:13:aa:48:9d:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:E7:42:E7:C1:7E:E3:EF:1B:BD:7E:AC:12:E0:59:77:4C:1B:BB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:d2::/48
Signature Algorithm: sha256WithRSAEncryption
3b:5e:65:c1:0e:67:a2:e7:40:05:9a:47:6c:20:e5:cb:1f:a2:
da:bc:4a:69:b5:18:3b:5d:36:51:1e:44:96:76:f0:3d:cc:50:
71:be:3b:18:a0:23:bb:f8:d7:81:a5:22:a2:6a:80:66:14:6d:
3a:c1:1c:40:ab:8c:7a:9f:89:38:86:03:21:1c:78:54:98:fc:
70:e2:c4:9e:41:94:4b:ff:4f:e6:72:8a:1e:e8:e1:f2:54:71:
46:e1:51:49:83:ff:6b:62:6f:e4:f1:d1:0d:99:a7:3e:b2:13:
00:ef:74:df:2d:9d:42:3b:13:3f:f6:dd:fe:0d:81:98:00:08:
b3:b6:58:f7:d8:6b:ce:52:30:bc:7a:04:32:bf:14:63:97:50:
ad:56:66:5c:e3:77:31:e1:ea:09:d2:bf:7a:e7:4f:67:59:de:
8a:a7:22:3a:90:e8:6c:fd:58:fe:b1:59:ab:9c:e2:5b:91:c6:
14:79:e0:e7:81:73:49:d3:2d:4d:42:74:fb:b0:69:68:77:10:
f7:c6:ba:d4:66:d9:87:cf:df:4e:29:60:c1:89:1b:ca:ee:4f:
b0:83:3f:c0:5e:a7:4a:74:3e:97:03:18:81:52:37:81:44:61:
5c:fc:c9:46:4b:3e:c1:6f:a5:e6:9f:07:2b:46:c6:65:53:b3:
4d:b1:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:47:14 2025 by rpki-client