Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202260.roa
File: AS202260.roa (raw, json)
Hash identifier: PtylSClsXPT5MCziRg6kzF7DptzWy70OtNOn3KmFyIU=
Subject key identifier: EE:E4:F2:DF:93:27:CD:DA:04:F9:EE:B2:68:B4:EE:5F:14:56:FB:B9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3B0BFC9C518DE0202BF560C3BF222919AABF6DC2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202260.roa
Signing time: Mon 03 Aug 2026 06:44:29 +0000
ROA not before: Mon 03 Aug 2026 06:39:29 +0000
ROA not after: Mon 02 Aug 2027 06:44:29 +0000
asID: 202260
IP address blocks: 2a13:9500:1b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0b:fc:9c:51:8d:e0:20:2b:f5:60:c3:bf:22:29:19:aa:bf:6d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 3 06:39:29 2026 GMT
Not After : Aug 2 06:44:29 2027 GMT
Subject: CN=EEE4F2DF9327CDDA04F9EEB268B4EE5F1456FBB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:ae:e2:68:f7:f3:ca:9e:89:36:3a:62:93:
80:c6:da:af:6f:d6:15:a2:ec:a6:de:d4:bc:e6:86:
7a:97:64:74:44:f4:d2:e9:77:44:24:79:94:3d:32:
7c:88:bb:71:17:40:e6:95:f9:6c:57:6a:39:ca:52:
78:f2:8c:76:1c:96:e4:09:fc:15:63:bd:56:c2:66:
a9:a6:62:08:36:73:15:ad:81:bb:4c:1a:25:8f:50:
cc:24:c0:ae:37:2f:06:49:68:6e:f3:fc:41:21:02:
58:55:ff:c4:75:c6:51:97:66:f6:79:e5:83:8a:82:
e5:76:1e:72:53:48:7f:85:80:5f:03:c7:0c:d4:41:
45:d0:d4:b4:32:62:76:38:1a:0e:04:61:6a:cf:7e:
b9:9e:2e:ec:38:93:3d:e7:f4:e3:a7:e2:57:d6:f1:
a0:8c:a7:de:b9:eb:fc:2a:9a:5a:d3:b8:ca:6f:a7:
bc:b1:21:76:f4:a3:bf:f2:32:5c:e6:95:1a:68:de:
42:f2:53:06:25:a1:10:81:70:cf:f0:50:2f:78:bc:
8f:b9:aa:91:f6:3c:f7:64:36:1c:db:8a:de:8e:6f:
6d:6a:6a:71:9d:55:23:fe:cb:31:dd:b6:fb:3d:3b:
ae:09:32:7e:76:d9:83:cc:85:6d:12:ad:89:42:b3:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:F2:DF:93:27:CD:DA:04:F9:EE:B2:68:B4:EE:5F:14:56:FB:B9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1b1::/48
Signature Algorithm: sha256WithRSAEncryption
97:1a:cf:fd:66:1d:07:41:75:56:12:73:0b:ac:48:de:2c:7a:
a7:4b:e4:0d:2e:3c:49:5e:46:61:ea:e3:44:5a:f1:31:a1:c8:
e8:81:8b:f6:7c:b6:b8:7a:24:f7:97:76:2a:e8:bd:70:6a:5e:
97:62:90:87:21:1f:33:f3:26:65:b9:0b:f8:73:6c:ed:d6:cd:
2e:07:b1:f6:96:43:4e:ab:7f:b2:8b:df:44:13:a2:27:03:56:
cf:cc:60:22:69:09:8f:4c:54:68:8f:df:51:d5:d2:a0:52:50:
2c:ab:2f:70:ed:cd:ab:41:fb:5d:a3:c1:12:88:5e:79:35:e3:
88:d4:37:48:08:c2:24:ad:45:ec:32:e0:6f:63:90:3f:29:d2:
90:c8:5b:f7:18:44:83:6a:9a:ad:f4:80:f6:bf:01:ae:dd:83:
1f:1f:c4:25:5c:03:09:eb:98:6f:31:6b:2c:0e:07:e6:85:c5:
20:ec:1c:06:d9:b2:52:32:78:16:28:c4:7c:29:c4:9c:78:b7:
86:4f:f4:d6:bd:65:55:31:20:25:62:40:dd:67:99:45:f6:f2:
c8:eb:58:2a:95:4d:d7:c5:df:c4:19:f6:8d:7a:ae:78:4d:ac:
ea:45:b8:4f:f1:03:da:bf:a0:ff:02:21:b0:00:85:cb:6b:dd:
27:fd:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:19 2026 by rpki-client