Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26737.roa
File: AS26737.roa (raw, json)
Hash identifier: KFDrnuFMrRmlxFHAziHuD8diBhEshI0iarqtl2SQ6Hg=
Subject key identifier: B1:D1:C9:DA:A5:17:8A:1C:C1:B3:2A:B1:A0:4E:FF:85:3B:1E:54:AC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 55EF8A6BFD594EF84EF4D111ECE560B35D4C7EBA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26737.roa
Signing time: Mon 24 Mar 2025 12:21:34 +0000
ROA not before: Mon 24 Mar 2025 12:16:34 +0000
ROA not after: Mon 23 Mar 2026 12:21:34 +0000
asID: 26737
IP address blocks: 82.29.28.0/24 maxlen: 24
82.29.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 18:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ef:8a:6b:fd:59:4e:f8:4e:f4:d1:11:ec:e5:60:b3:5d:4c:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 24 12:16:34 2025 GMT
Not After : Mar 23 12:21:34 2026 GMT
Subject: CN=B1D1C9DAA5178A1CC1B32AB1A04EFF853B1E54AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:80:3e:58:f0:6e:06:8e:6b:5b:c7:31:e0:
6b:3e:81:fd:f6:90:f9:57:d7:0f:67:84:45:b9:77:
a8:99:d3:09:aa:7d:2c:bb:4e:70:51:e8:3c:c2:69:
f1:c5:7a:99:3d:7e:5b:3c:41:eb:c4:6d:76:82:50:
90:70:d9:f8:05:fb:28:3f:6e:98:fb:e2:3a:9b:16:
11:c1:c8:e3:a0:c7:dd:c4:42:2e:5e:93:f1:3b:0c:
0c:5e:ce:46:9b:00:7c:d8:ba:79:b9:46:58:ca:25:
ef:ef:22:aa:e2:e1:7a:95:cf:a3:41:32:ed:71:13:
f0:f7:52:b8:af:1f:8a:46:20:20:a5:97:c7:e3:46:
ad:c5:3a:b8:82:2b:ce:b5:b9:c6:e6:4a:3f:ab:0b:
84:08:45:e8:c9:35:0b:39:4f:9c:c2:41:0e:01:b1:
d1:03:01:63:88:08:80:31:f5:bf:a9:6c:4f:8a:43:
6e:e0:b7:a0:48:90:df:6c:a1:81:52:c8:b3:87:1c:
63:7f:45:7b:18:05:c1:c4:e1:4c:d1:cd:f6:3b:51:
d3:0b:90:6b:c7:26:bf:7c:49:d0:b3:7d:d4:1f:28:
cb:79:2b:a4:82:da:27:4c:2a:70:40:14:5a:aa:56:
12:9c:02:44:13:cd:0c:f5:74:46:88:78:6d:69:8e:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D1:C9:DA:A5:17:8A:1C:C1:B3:2A:B1:A0:4E:FF:85:3B:1E:54:AC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.28.0/24
82.29.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:53:59:18:be:1a:24:8f:0a:06:5a:0e:1a:29:f8:b2:39:1f:
b7:ba:f0:16:6a:2b:96:b8:a8:6d:5e:d3:f7:8d:fb:70:96:df:
f6:5b:f5:d9:f5:dc:f2:f6:ae:7f:1c:60:ce:a6:6d:c5:71:14:
57:1e:c4:89:e7:29:6e:c8:c1:14:d7:90:16:db:f1:19:03:f9:
6e:ce:f6:f2:a9:d2:49:7c:c6:68:9f:0c:98:10:7d:b8:50:62:
f0:89:51:6f:44:f7:6b:ca:9f:5a:10:93:23:8e:24:fd:cd:75:
a2:82:bd:c8:a5:bf:4e:d1:71:8e:ec:b1:ee:27:04:e0:91:dd:
d6:d3:25:c0:49:ab:68:fd:2f:6b:62:c8:f3:c9:58:bb:5e:3a:
d5:8a:86:6a:33:50:a7:5e:29:64:51:a2:f9:cc:7d:33:78:e2:
d4:37:4c:a5:e6:15:a2:65:28:d1:c8:4f:1f:0b:de:9c:0a:38:
a0:ea:3d:80:b8:c7:8e:90:46:ba:ff:56:48:da:85:5c:4d:3e:
32:c8:bb:1b:c0:43:9b:3b:59:9e:31:6b:15:c0:33:49:90:74:
3f:43:b8:c5:07:59:50:22:f5:ab:be:93:2c:58:f3:4d:7f:59:
4b:12:d3:7f:db:69:54:dd:f1:b2:11:31:a5:25:cb:f4:53:f0:
61:ab:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:24:47 2025 by rpki-client