Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26548.roa
File: AS26548.roa (raw, json)
Hash identifier: O0baDm/9kro3iqcKqVZIsxC3CZKZUTeAOCa6ctmBIM4=
Subject key identifier: 94:89:F8:61:25:E9:E0:E1:FB:AE:58:95:27:13:17:5C:5A:B9:B4:FA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 204C13773680C5A2DB7BBCB9A88C9DD0F82491CC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26548.roa
Signing time: Thu 18 Sep 2025 12:09:10 +0000
ROA not before: Thu 18 Sep 2025 12:04:10 +0000
ROA not after: Thu 17 Sep 2026 12:09:10 +0000
asID: 26548
IP address blocks: 2a13:9500:e3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4c:13:77:36:80:c5:a2:db:7b:bc:b9:a8:8c:9d:d0:f8:24:91:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 18 12:04:10 2025 GMT
Not After : Sep 17 12:09:10 2026 GMT
Subject: CN=9489F86125E9E0E1FBAE58952713175C5AB9B4FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:24:e5:48:60:30:94:05:bb:77:a4:d4:77:
52:64:b1:f3:59:43:3e:ec:4d:5b:97:1b:c8:13:ef:
fe:ac:a0:cd:a1:db:dd:ff:75:b0:5b:0b:ee:f6:60:
3b:93:f5:80:87:85:e0:d4:de:49:89:a9:9d:d6:18:
3d:d4:f6:e5:45:82:2e:b4:da:2d:60:b8:76:6e:b0:
88:c4:45:6b:ec:91:07:2b:ea:88:19:58:29:b5:79:
09:2d:e2:5d:af:b5:5b:d1:7d:9a:78:4d:95:c8:4f:
29:0f:52:fe:20:75:89:3e:e5:84:ed:81:23:2f:db:
a3:a1:a2:56:0f:d9:f6:42:41:41:62:c5:2e:82:e2:
3c:f5:05:37:c6:3f:4b:bc:c1:94:5c:2e:b7:7e:76:
66:55:c9:d1:5b:41:eb:fb:56:7c:fa:23:bd:e5:1c:
52:a0:14:03:47:f8:91:21:82:f6:a1:45:93:62:ab:
cc:7b:cb:28:b6:e4:df:ed:98:1b:5b:ee:b9:36:72:
af:95:3e:e8:87:a3:7b:60:8a:28:70:78:f9:fb:b2:
e4:b0:bd:ad:0c:90:c9:52:6e:f0:5f:1e:8a:c2:91:
1f:ed:d7:44:83:fb:37:81:37:62:c8:3c:8f:0b:89:
ac:95:6d:7f:da:60:0f:d4:47:a3:7f:d0:e3:6f:00:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:F8:61:25:E9:E0:E1:FB:AE:58:95:27:13:17:5C:5A:B9:B4:FA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:e3::/48
Signature Algorithm: sha256WithRSAEncryption
79:85:96:9e:9b:13:06:6c:9b:bf:c7:ba:6a:0f:5b:a2:4f:ab:
28:26:26:9d:66:65:f5:f5:4b:de:5d:1f:a4:35:95:06:12:07:
8c:4f:89:20:f0:55:9a:89:de:a4:76:57:76:c5:3d:84:4f:6f:
a9:86:7c:26:96:06:e5:dc:58:d2:c4:db:78:dd:57:ff:ab:e7:
de:a2:71:e6:be:23:57:f2:0d:ab:f1:2d:f3:76:a6:3c:ec:5e:
bb:38:45:6a:72:5d:bc:9e:1a:82:c6:23:5b:ab:0b:1f:60:6b:
e6:4e:7e:7f:84:dd:9e:a2:bc:59:8b:b1:5e:42:85:a9:6d:ee:
b7:68:09:e6:90:86:9c:b7:40:72:80:81:38:9d:7b:25:4e:8b:
f7:13:d0:75:1b:06:b7:d1:a4:54:40:72:3c:c1:1e:e1:c5:29:
99:ae:3d:37:1a:92:77:1f:96:43:62:28:0f:26:52:d1:65:1c:
a6:3d:7f:35:19:39:55:7c:56:12:5d:c0:dd:14:d2:83:be:91:
3e:8d:33:4e:98:87:2e:5a:3e:98:10:e6:9e:e9:4e:51:02:e0:
bc:e7:70:22:e1:90:13:3b:a1:05:aa:1e:bb:38:91:bc:b1:09:
14:2d:a8:52:44:2c:41:c3:b7:2f:14:de:71:1d:0d:d0:4f:e0:
91:9f:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:31 2025 by rpki-client