Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202934.roa
File: AS202934.roa (raw, json)
Hash identifier: gYhlMLDKMFe6OB/RdxtEYLQktO05EaalyloKqXp4YeE=
Subject key identifier: C8:62:32:37:9D:C3:DE:EA:F4:BA:5B:CC:16:3C:F9:EC:FC:EB:44:74
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5AE42C20B0F8C97D127CC3176B5D07E78DBBFA58
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202934.roa
Signing time: Wed 29 Jul 2026 07:25:28 +0000
ROA not before: Wed 29 Jul 2026 07:20:28 +0000
ROA not after: Wed 28 Jul 2027 07:25:28 +0000
asID: 202934
IP address blocks: 2a13:9500:1aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e4:2c:20:b0:f8:c9:7d:12:7c:c3:17:6b:5d:07:e7:8d:bb:fa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 29 07:20:28 2026 GMT
Not After : Jul 28 07:25:28 2027 GMT
Subject: CN=C86232379DC3DEEAF4BA5BCC163CF9ECFCEB4474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d8:0d:69:cb:92:ca:8b:2e:c6:1e:e4:b1:12:
9b:09:3d:8d:c1:95:5b:15:71:49:7e:9a:a7:3c:86:
04:d2:d4:d1:fa:f5:3a:ae:52:f1:86:2b:59:29:9f:
d5:53:b5:a8:f7:c0:5e:a4:40:29:79:0e:0c:c8:6c:
d0:85:e5:89:7f:37:41:0a:81:5d:d2:7b:62:ec:38:
9e:1a:5c:5a:a9:0f:3f:96:df:66:87:c7:66:3e:dd:
86:74:66:ba:ac:00:8f:c7:4e:4b:c0:56:da:b1:bf:
74:d6:97:8c:70:ba:ab:cc:ec:1d:d8:31:a1:12:f5:
ee:85:9e:af:dd:5e:aa:84:f9:75:25:54:e2:89:0e:
cc:d0:70:3f:d5:a3:5f:96:3f:92:7c:54:04:7b:e0:
1b:f5:47:50:b4:8c:89:7b:13:66:05:3a:65:29:c0:
5a:7f:0e:98:f0:97:9a:cc:6a:ec:5f:02:2e:5d:83:
04:e9:f2:c1:d7:e4:43:96:b8:b2:d7:db:79:20:ff:
44:5c:bf:2c:55:57:05:9a:0d:56:49:cd:4c:8e:ec:
70:49:6d:4b:9f:8d:43:35:07:93:b5:20:b5:9f:02:
e8:34:71:f8:e5:ca:b4:43:d6:85:23:b0:38:7a:6f:
86:f1:77:35:28:c6:ee:98:a6:be:af:1f:34:86:52:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:62:32:37:9D:C3:DE:EA:F4:BA:5B:CC:16:3C:F9:EC:FC:EB:44:74
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1aa::/48
Signature Algorithm: sha256WithRSAEncryption
3b:d8:05:7b:b2:c5:fd:01:9e:f2:52:d5:b1:ef:05:df:8f:56:
e0:96:26:90:a9:36:70:3f:78:af:10:06:79:24:55:fd:ee:53:
6e:db:86:32:39:5a:99:84:10:a3:3d:a5:a9:86:ed:59:48:f3:
e3:13:7b:41:59:11:6c:8e:8d:44:5d:a7:cd:2e:8b:fb:b3:d3:
26:d3:9e:9f:86:44:3e:85:ba:a6:5f:89:19:ac:77:75:84:30:
d5:6e:6d:d8:ea:f5:ed:66:53:d4:0d:47:4c:fb:49:c0:92:f9:
f6:13:e3:6e:f8:69:fb:fa:ca:f8:fe:11:5d:bc:5a:27:ff:7f:
19:1b:cf:fd:0b:ec:6a:40:42:80:d6:ba:60:26:d5:ee:a6:b6:
d8:3d:14:04:d6:c0:8c:9b:c4:c5:49:52:a7:d3:4f:d2:1c:c0:
fd:b0:a2:eb:d5:e6:5d:9f:95:19:4c:26:e0:ab:c7:fe:af:fc:
45:3a:aa:93:91:5f:9d:37:f4:99:23:d3:d2:03:d6:6f:6b:19:
9e:80:3d:51:74:20:98:2d:ab:51:29:55:f1:1d:fd:07:c1:a9:
c3:f6:5b:7d:2d:47:2d:6d:eb:da:b5:87:5e:23:0f:1a:69:44:
7f:2e:b1:de:4a:a6:76:06:16:f4:42:4c:e7:07:19:a2:9e:9d:
a4:a8:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:25:37 2026 by rpki-client