Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26666.roa
File: AS26666.roa (raw, json)
Hash identifier: GEdQzAE9dU5tOzcAyA52aTJXi5kZiuzuuKb2aeNZ3qo=
Subject key identifier: B8:A8:B1:3E:1D:ED:A4:C0:22:7D:82:47:46:D8:75:92:F9:10:93:9E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 56AE3ACC80AABAD1FDB48DFB8A86957B3AF6355D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26666.roa
Signing time: Mon 19 May 2025 08:52:26 +0000
ROA not before: Mon 19 May 2025 08:47:26 +0000
ROA not after: Mon 18 May 2026 08:52:26 +0000
asID: 26666
IP address blocks: 2a13:9500:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ae:3a:cc:80:aa:ba:d1:fd:b4:8d:fb:8a:86:95:7b:3a:f6:35:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 19 08:47:26 2025 GMT
Not After : May 18 08:52:26 2026 GMT
Subject: CN=B8A8B13E1DEDA4C0227D824746D87592F910939E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:12:8c:b2:f4:ed:f9:97:b0:25:81:70:55:
d0:0b:4a:79:45:4e:98:0e:bd:f9:c3:45:c5:28:aa:
bf:20:11:1d:f1:0b:31:20:bd:d8:b2:69:a1:df:34:
21:db:58:76:f8:54:75:b7:b8:84:87:4e:ee:99:f7:
e5:31:94:ba:ab:88:d5:c2:61:78:46:a8:a2:63:da:
2e:90:95:af:20:f9:fa:3c:5d:b6:04:8c:0e:f8:65:
c8:cc:c7:44:fb:41:52:4e:b8:2a:7e:82:2c:12:39:
57:ad:ca:b3:50:89:58:ba:63:89:82:a4:15:a2:40:
6f:bd:d7:35:85:db:b4:14:87:41:a0:23:84:f7:34:
5c:a3:48:6f:52:79:b1:33:6c:50:c4:71:e7:00:02:
88:13:04:f7:80:4e:1c:d5:80:f5:ff:a0:f1:68:a2:
48:16:eb:b6:79:72:64:0e:8c:07:c2:d5:bf:cd:d3:
08:5a:ec:15:11:a1:13:17:b3:d9:3a:cc:a2:ac:24:
5d:8f:8c:2a:7b:31:ce:3d:72:7c:ef:fa:00:61:b4:
44:48:52:71:9c:95:3f:7d:79:d1:a1:5c:18:26:78:
d5:a2:56:4d:d9:16:db:54:e2:ee:11:8c:ad:b1:f3:
14:ec:22:12:33:1f:10:dc:d1:c7:f9:00:02:13:db:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A8:B1:3E:1D:ED:A4:C0:22:7D:82:47:46:D8:75:92:F9:10:93:9E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:50::/48
Signature Algorithm: sha256WithRSAEncryption
12:ee:94:bb:3b:94:02:9a:c2:85:69:4c:1d:74:06:ac:e9:6a:
62:3a:e4:09:43:18:d0:f3:ef:10:d5:89:0d:22:fe:68:f8:40:
0d:a1:e6:30:fa:4f:02:49:ee:84:16:df:cc:9f:8c:9a:58:86:
15:4e:c6:96:dd:19:6e:f7:a9:c4:8c:bc:be:12:7c:e4:a3:e9:
5c:fc:e6:38:1d:e5:1e:07:80:ad:62:4f:12:2a:95:0e:d3:53:
63:3b:e8:95:6d:ff:9f:85:a4:32:52:9e:02:94:36:8c:2c:6b:
26:6c:5d:c1:ff:78:dc:e5:c2:a5:4d:92:40:e3:39:65:0c:b2:
7a:32:60:19:40:96:36:fd:a3:97:4b:47:4a:45:a2:d1:1a:ab:
10:ad:cc:cd:fe:04:f0:9c:50:15:d8:f1:43:18:27:1d:24:37:
16:84:35:8f:16:fc:67:71:e6:65:55:37:45:0a:d9:43:f5:55:
27:ea:89:95:e7:d6:c3:93:ff:a7:55:42:75:73:97:25:19:e7:
45:65:ee:c3:70:d9:c6:86:8e:02:83:19:2b:0e:b7:5f:26:ea:
0a:a8:a4:ab:58:21:eb:8c:d7:de:81:75:dd:ba:b8:c2:d9:d1:
d5:df:5b:6c:f1:a0:db:65:04:49:a5:24:04:a7:85:5a:bf:2f:
32:e5:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:18 2025 by rpki-client