Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS263210.roa
File: AS263210.roa (raw, json)
Hash identifier: OvSIAF63Zpv67f441RyLfuNIITcDtH3Zq3KcgHq7EYk=
Subject key identifier: D8:6A:41:5D:14:79:8C:E6:C7:AA:89:81:1A:C6:6C:F4:8E:01:5C:D7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1BFEC128E70D24F531F0C5BE544888C1D11626E2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS263210.roa
Signing time: Tue 28 Jul 2026 18:49:16 +0000
ROA not before: Tue 28 Jul 2026 18:44:16 +0000
ROA not after: Tue 27 Jul 2027 18:49:16 +0000
asID: 263210
IP address blocks: 2a13:9500:ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fe:c1:28:e7:0d:24:f5:31:f0:c5:be:54:48:88:c1:d1:16:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 28 18:44:16 2026 GMT
Not After : Jul 27 18:49:16 2027 GMT
Subject: CN=D86A415D14798CE6C7AA89811AC66CF48E015CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:d4:00:fb:47:27:c0:16:51:74:97:ea:fe:
4d:0c:69:ff:be:93:20:af:67:f3:f9:22:1c:84:05:
cf:60:7d:2b:36:96:6d:86:c0:52:6b:42:a1:99:9f:
a9:fa:e1:eb:66:cb:68:29:27:fc:21:cd:29:bd:ec:
03:6b:b6:e0:96:42:ae:bd:0f:9c:11:27:c7:22:bd:
66:a8:c9:73:a2:05:e4:3b:4b:9b:37:e4:4c:4b:d4:
50:8d:69:00:5a:95:5b:66:b4:d1:52:bf:33:9f:28:
bd:c0:c5:a0:95:2d:20:fa:6b:04:66:11:86:c1:be:
d1:30:15:c3:15:bf:d6:f3:03:d7:e8:cc:e4:84:2b:
cd:c9:4e:88:49:d1:43:eb:da:15:e4:b0:cf:72:cd:
65:3b:74:11:f2:40:40:c0:f5:ca:52:8f:00:79:db:
7a:91:b6:13:7d:d3:d9:d3:68:7b:a8:8c:80:a4:06:
05:df:4e:35:92:ac:7e:5e:81:3e:57:27:8c:21:96:
81:cd:6d:76:a3:91:5c:d1:b5:e7:18:34:8f:0e:7e:
48:3f:0b:0b:53:f0:76:ff:8a:40:48:0f:e3:00:a7:
86:9c:a4:46:0c:2e:38:b1:46:05:bd:a1:54:b9:ce:
53:2a:2c:26:c0:97:fd:bb:1a:cc:86:22:89:b9:51:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6A:41:5D:14:79:8C:E6:C7:AA:89:81:1A:C6:6C:F4:8E:01:5C:D7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS263210.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:ce::/48
Signature Algorithm: sha256WithRSAEncryption
7a:5f:5c:a7:d7:d4:49:cb:19:ac:04:f8:3e:d2:71:33:c6:97:
0b:a0:b2:e1:de:d2:a2:44:f8:17:75:fa:1b:fc:e9:dc:92:7d:
80:af:b1:d0:84:4f:54:5c:82:ed:b8:c9:65:3b:c9:a0:b6:5f:
af:37:db:fe:7d:4a:64:95:a0:1a:90:11:4a:84:84:4a:08:fb:
4e:25:5d:21:5c:76:e7:8b:9a:f3:a2:09:7f:3c:86:ae:c1:ed:
7c:33:ac:03:06:5c:a6:b9:a1:08:48:4f:b2:b1:09:4f:c9:a8:
63:ca:13:f6:38:df:87:fa:af:41:fb:cb:dd:d6:1c:ee:90:29:
13:fe:0a:8e:61:3f:65:68:0c:dc:ef:b1:fa:40:40:e0:9f:03:
35:f0:da:c4:5a:5a:fe:af:72:05:0f:4b:84:3a:d2:3a:43:38:
4b:f2:b7:2d:76:25:ce:79:d6:62:7e:79:03:01:51:fa:28:a8:
dd:4d:b4:1a:8e:42:9c:48:09:60:28:c4:ee:ad:a8:d2:e2:e7:
89:cc:c6:67:80:fe:aa:c8:f4:8f:04:55:2c:c7:10:bc:6f:3f:
8a:42:96:82:92:d8:72:2b:3f:f1:53:e9:ec:96:3f:eb:fd:9d:
e1:5a:aa:5f:2f:73:83:5d:27:f2:08:5c:54:3a:ed:69:9d:a9:
ee:5a:1b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:13 2026 by rpki-client