Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147261.roa
File: AS147261.roa (raw, json)
Hash identifier: BgPvbYIYIa2Pb6ChrxXe/0sjrHXTl8B2KNXesiOH+Zg=
Subject key identifier: 28:05:46:4E:D6:5C:A1:3D:B1:B1:41:71:C7:6D:EF:C9:C2:DA:40:9F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 542A59ED7F171F6F4A8E73BCFF55CF0EF7AE3D7C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147261.roa
Signing time: Tue 26 Aug 2025 14:38:37 +0000
ROA not before: Tue 26 Aug 2025 14:33:37 +0000
ROA not after: Tue 25 Aug 2026 14:38:37 +0000
asID: 147261
IP address blocks: 2a13:9500:cd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2a:59:ed:7f:17:1f:6f:4a:8e:73:bc:ff:55:cf:0e:f7:ae:3d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 26 14:33:37 2025 GMT
Not After : Aug 25 14:38:37 2026 GMT
Subject: CN=2805464ED65CA13DB1B14171C76DEFC9C2DA409F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:6b:be:79:3c:64:9f:e7:86:22:6e:f3:83:
40:0e:f3:38:b3:8f:34:f9:23:7d:e8:25:4d:e8:68:
79:4b:fb:b2:8c:b7:bc:d2:6f:c5:1f:d5:74:c5:9f:
c0:33:07:58:ff:ff:cb:ea:55:bd:8c:c4:22:f0:7d:
17:9f:98:36:0d:80:9b:eb:da:e4:c5:ea:42:37:e7:
0d:ed:31:70:bc:f9:ad:d0:d5:da:2d:da:ec:79:ed:
ca:ce:e8:82:c6:f7:e4:25:27:e3:d0:73:99:db:ad:
48:67:52:b0:55:d9:33:23:a0:82:ca:94:3b:6b:50:
d8:0d:90:ce:31:58:7e:0d:a8:66:88:49:df:f2:82:
43:88:08:7a:8c:4e:8c:be:27:be:db:b2:d4:b5:f1:
31:4f:18:33:d8:58:b0:bf:42:7d:86:ff:54:bb:75:
1e:6f:60:63:68:00:2e:25:92:8a:07:ca:ab:e0:a5:
99:ec:99:90:a6:ec:e5:30:0e:cd:17:c1:33:a0:96:
dd:9f:5c:db:e2:3a:58:d2:25:1b:57:76:8a:a6:22:
87:ac:66:7b:3b:89:34:7a:53:5c:da:e8:5f:9f:98:
8f:1b:01:9b:08:d1:69:1e:a4:e7:24:bc:eb:c6:93:
a3:2f:5e:15:ff:35:f7:dc:f7:77:28:be:9f:d9:8d:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:46:4E:D6:5C:A1:3D:B1:B1:41:71:C7:6D:EF:C9:C2:DA:40:9F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147261.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:cd::/48
Signature Algorithm: sha256WithRSAEncryption
3d:18:55:b9:bf:84:16:2c:c6:dc:ac:f0:37:f5:50:da:02:11:
9e:0f:99:30:9f:de:8a:94:e8:52:3f:c7:ee:5d:9a:32:01:0d:
52:98:51:33:f2:3d:6e:01:de:4f:a3:02:2e:76:c0:8e:bf:2f:
00:c1:55:31:ab:b5:39:ff:87:d6:2d:e1:ef:3c:3a:19:cd:fe:
98:df:e9:7a:56:16:cd:8f:34:52:0e:20:0c:73:70:61:16:68:
02:93:ff:02:62:a2:ef:59:fe:54:c5:b5:f9:9a:59:d6:c5:78:
12:3c:d7:2a:b8:a1:d8:6f:14:7f:c8:d7:c6:d1:4d:51:43:27:
7d:d6:74:ed:3a:d2:4d:bc:75:fb:49:f1:68:ed:d9:2d:b5:48:
d7:c3:c8:06:ed:9b:52:6b:c3:ee:54:d8:33:68:55:f3:bf:e9:
46:74:7d:12:81:67:88:5a:87:ac:c7:e6:f8:36:f2:54:ff:55:
11:35:c5:f0:24:9d:c6:c2:92:69:b0:03:a3:6e:fa:ba:f4:40:
66:d9:b0:9f:22:2a:59:1f:3b:e4:20:89:cf:20:c9:81:ff:1a:
2e:fc:c1:2c:31:28:8f:22:05:31:44:ab:fe:c4:c0:b1:c0:69:
64:73:24:59:7e:55:b7:6c:5c:05:82:f3:d9:06:de:d6:c5:07:
da:39:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:46:07 2025 by rpki-client