Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1994.roa
File: AS1994.roa (raw, json)
Hash identifier: Uwg8sZCjGvgkDywnLkTlmqg2wM9zrIq9itzBd3wh7gs=
Subject key identifier: 6D:DD:0F:0C:A1:CC:35:5E:68:E7:43:11:25:B7:B1:FB:72:12:15:7F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 314213A6339D060A3D28A34CDF5DFBA6A26881AD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1994.roa
Signing time: Mon 10 Aug 2026 15:49:29 +0000
ROA not before: Mon 10 Aug 2026 15:44:29 +0000
ROA not after: Mon 09 Aug 2027 15:49:29 +0000
asID: 1994
IP address blocks: 2a13:9500:1ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:42:13:a6:33:9d:06:0a:3d:28:a3:4c:df:5d:fb:a6:a2:68:81:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 10 15:44:29 2026 GMT
Not After : Aug 9 15:49:29 2027 GMT
Subject: CN=6DDD0F0CA1CC355E68E7431125B7B1FB7212157F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:6a:7b:f0:a5:f2:c8:a6:e5:64:fe:1d:ed:
09:0a:50:3b:36:81:cc:d3:77:f7:79:ca:6d:9e:be:
11:61:3d:81:15:06:d4:c9:e5:f3:27:e0:0f:81:e8:
0b:e8:b6:9e:92:2d:cd:13:a1:69:3d:b3:00:94:d7:
c7:bb:a7:12:f6:f6:46:be:87:57:d5:1c:73:05:51:
eb:81:90:bd:09:90:2d:6f:22:74:cf:03:b1:e9:74:
36:7c:24:72:b1:50:3b:95:ea:fe:02:89:b8:19:54:
c0:73:26:c8:75:fd:ea:46:8c:20:ef:57:74:bb:38:
15:c0:18:4e:a5:64:b3:6e:0d:e7:5f:9b:49:ad:11:
58:32:cf:59:ee:ba:a7:49:2f:22:d2:e6:bb:4f:1d:
8a:1a:0c:7f:76:49:4c:6a:28:8a:10:63:63:40:9e:
c3:7f:35:68:43:bc:27:c3:d8:0b:b7:ad:b1:64:cc:
c3:1f:76:2f:78:4b:51:ba:68:0e:9d:75:74:57:25:
ac:a8:ba:9d:5f:cd:d8:f0:6e:59:5e:62:f2:fc:6d:
9e:36:d1:86:3a:47:19:35:9b:8b:59:71:0b:f9:51:
e8:8d:29:91:f8:0b:69:f0:79:77:9c:7a:a2:53:3b:
1c:5b:2e:09:87:d0:34:f6:10:d1:fb:42:9d:90:16:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:0F:0C:A1:CC:35:5E:68:E7:43:11:25:B7:B1:FB:72:12:15:7F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1ba::/48
Signature Algorithm: sha256WithRSAEncryption
9b:10:38:24:6b:f7:62:11:20:b1:a4:c2:bc:02:3b:1a:a3:ac:
ce:07:da:10:1e:02:44:c1:1e:0c:ad:b4:16:f6:11:8b:dc:a8:
1d:7d:b0:66:dd:38:be:49:e7:fb:ba:00:e1:f5:ac:21:97:16:
16:03:b7:74:c8:96:67:7a:e9:8a:ff:cf:3b:1b:65:29:e5:64:
c7:f4:18:4b:45:21:89:0a:b5:ad:6f:f8:c7:b9:3b:04:0b:1a:
3f:93:17:fe:14:b4:e9:37:19:a0:4d:1f:66:d6:cb:65:ac:81:
2f:56:5f:9c:ed:d2:b3:94:f1:b2:19:61:c6:9a:89:b5:33:c7:
57:cb:75:bd:10:06:99:c9:c6:2e:16:99:3d:ea:dc:53:36:8f:
c2:b1:53:4a:00:fd:ea:a5:06:df:be:3b:ae:b4:29:12:c9:e0:
0a:ab:f1:ac:70:89:03:95:9b:fc:35:25:23:58:6f:97:0c:a6:
e7:f8:4d:dc:64:55:86:46:16:98:32:f4:f1:e8:a5:5d:6e:65:
9b:73:42:55:59:89:8d:52:6c:ee:89:52:72:c7:e0:a6:ad:6e:
ea:78:b3:4e:59:1f:bf:53:f6:5f:9e:10:d5:a9:f1:14:bd:f1:
cf:47:0d:68:9d:69:5c:ec:8e:3a:33:4e:9e:29:e5:52:c5:ed:
ef:91:37:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:00 2026 by rpki-client