Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS263210.roa
File: AS263210.roa (raw, json)
Hash identifier: Hf2uFlFCvGeMDiPfb+dYkvG/o6xRm5iTWFB7HC/lqDU=
Subject key identifier: 10:88:B4:54:14:87:87:D4:43:98:91:2E:22:2A:75:CF:42:12:B6:FB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 244470C8313E42DDF0DB3D52763E4FE90ADE8677
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS263210.roa
Signing time: Tue 26 Aug 2025 18:28:38 +0000
ROA not before: Tue 26 Aug 2025 18:23:38 +0000
ROA not after: Tue 25 Aug 2026 18:28:38 +0000
asID: 263210
IP address blocks: 2a13:9500:ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:44:70:c8:31:3e:42:dd:f0:db:3d:52:76:3e:4f:e9:0a:de:86:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 26 18:23:38 2025 GMT
Not After : Aug 25 18:28:38 2026 GMT
Subject: CN=1088B454148787D44398912E222A75CF4212B6FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:cc:25:72:67:6c:75:28:19:c7:e1:02:62:
a8:f3:12:df:66:13:2e:f6:21:0a:b0:2a:27:00:8d:
dc:8d:16:2d:78:37:83:2d:3c:79:e1:28:9c:cd:4c:
8e:dc:7c:e2:6a:62:24:30:4d:36:4d:5e:01:7f:b8:
e6:5b:a4:01:93:cf:f8:73:34:17:75:0b:50:88:64:
44:3c:e7:45:a7:4c:31:77:dd:4a:50:de:f7:f8:00:
c9:4e:1a:8d:e5:5e:99:a8:a7:b3:0a:00:18:2c:a8:
0d:0f:b7:cb:ce:b8:ce:77:99:ba:5b:68:5a:74:3b:
f2:01:d8:4f:98:b7:26:70:d7:6d:a5:be:aa:8a:fe:
41:55:5c:6b:0a:b6:bc:6e:e4:f3:39:e8:fa:f4:cf:
10:ac:33:25:e5:0d:d2:b6:af:f2:80:92:b5:54:8b:
07:69:8a:38:ba:3a:17:84:02:fe:bb:e7:29:4e:17:
02:56:93:9e:6d:dd:88:93:13:6e:fc:a0:24:f9:15:
b7:5a:ae:73:0e:6a:9d:bc:0b:49:3c:8d:5a:b2:4c:
dc:96:27:46:56:a8:0f:3d:f5:3f:2f:b4:5b:65:ca:
f8:af:dd:29:53:87:2d:f5:1f:44:c6:47:42:fa:1b:
8d:b0:a8:64:ff:c2:53:80:c6:b7:4c:12:93:96:70:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:B4:54:14:87:87:D4:43:98:91:2E:22:2A:75:CF:42:12:B6:FB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS263210.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:ce::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d2:78:99:55:02:b9:b0:41:76:d3:3b:73:54:e8:2d:25:f0:
87:94:1c:77:1f:92:36:d6:3a:0b:26:a7:82:de:96:8b:f0:28:
51:81:b1:b2:39:c6:42:34:16:04:09:4a:ea:1c:99:34:7e:1f:
4b:bf:ce:ee:83:1d:04:f2:80:3c:72:36:c2:1e:c7:98:c1:f6:
20:9c:4f:4d:73:48:53:a3:98:60:81:2c:ef:20:4f:85:d9:3a:
82:85:36:ae:1f:df:29:8d:d9:14:33:a2:f1:16:8c:42:d5:32:
da:9d:81:ed:e7:a2:c2:6b:b8:38:68:74:d6:89:ad:93:bd:d8:
1d:dd:cd:84:8f:8e:3c:6d:89:5b:1e:e8:b4:12:31:c9:9e:b2:
5a:b6:78:34:05:35:1b:4e:a3:9d:f9:23:88:9e:5e:7c:6c:00:
d1:93:20:3f:ea:e5:ce:1b:3b:68:b6:8f:a6:05:de:bf:8d:96:
82:4a:7a:05:5a:de:cc:a3:07:94:bc:45:b5:01:1b:ea:69:c5:
45:93:c0:57:91:9b:cf:bf:e1:da:73:7d:a0:60:00:d8:88:63:
f8:43:a4:bb:d6:53:4e:fd:a3:df:d0:11:7c:0c:66:c8:03:31:
0c:de:c0:f5:7d:be:13:f0:e5:09:95:ec:2d:db:10:78:38:05:
90:f3:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:46:06 2025 by rpki-client