Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274424.roa
File: AS274424.roa (raw, json)
Hash identifier: gtV6sJqwQ3C/xSzPbx7Ys/r0Av6xaIuUStyCHjzPNvY=
Subject key identifier: 4B:1A:A8:98:44:F6:49:54:29:5C:76:41:53:A6:2E:71:4C:94:F4:76
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 51FA8FDE34558CBB6F3AFDB558D90AE6D6E6A21A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274424.roa
Signing time: Thu 30 Jul 2026 12:44:14 +0000
ROA not before: Thu 30 Jul 2026 12:39:14 +0000
ROA not after: Thu 29 Jul 2027 12:44:14 +0000
asID: 274424
IP address blocks: 2a13:9500:133::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 13:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:fa:8f:de:34:55:8c:bb:6f:3a:fd:b5:58:d9:0a:e6:d6:e6:a2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 30 12:39:14 2026 GMT
Not After : Jul 29 12:44:14 2027 GMT
Subject: CN=4B1AA89844F64954295C764153A62E714C94F476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:d9:a3:ca:6e:4c:e0:fb:dd:24:05:2a:5d:
d2:98:03:29:59:69:09:a7:2e:ea:94:88:a7:15:39:
cf:08:46:49:32:83:bd:08:46:15:52:2c:87:66:5d:
c9:4b:6b:e2:e9:fe:77:df:36:2a:f8:67:ba:49:2b:
a7:78:c2:48:41:04:f8:58:98:1d:53:eb:c7:9f:3f:
5b:a3:6c:e6:61:6f:73:07:9c:5a:68:87:67:b4:69:
cb:18:5d:05:34:8a:bf:b4:ed:b6:77:c8:0b:cf:2c:
01:15:9e:36:b8:50:7d:b0:c0:78:d7:6f:a4:26:fb:
d3:17:f6:ce:f4:40:62:1b:06:68:ce:29:88:19:00:
11:02:d1:82:58:37:56:42:5d:8c:91:38:f2:91:48:
37:f2:c7:37:d6:f6:5d:c9:9a:84:68:57:15:5e:00:
88:66:c7:47:f0:35:58:b8:82:06:42:43:0f:16:ab:
b6:4d:f5:41:ab:25:fb:07:2a:84:8a:27:7b:51:f2:
0e:ba:37:b9:16:93:9c:05:b9:49:a8:0f:22:72:9c:
8a:a2:63:4c:b5:76:96:38:d0:0d:a2:3c:65:98:cd:
d2:1a:44:38:a0:8d:05:10:c1:dd:12:78:6e:45:8c:
57:1a:61:75:b7:3c:4d:39:cb:93:97:53:4b:3b:53:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:A8:98:44:F6:49:54:29:5C:76:41:53:A6:2E:71:4C:94:F4:76
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274424.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:133::/48
Signature Algorithm: sha256WithRSAEncryption
45:4f:20:b8:6b:3f:6e:80:75:d4:c5:4a:3d:d2:c3:de:70:43:
92:d4:c5:30:db:d3:8d:ea:40:cc:ce:12:66:83:59:15:1c:a5:
f3:a9:e5:6b:03:4c:6d:40:41:e4:3f:25:44:c9:29:80:96:87:
35:83:60:3e:f2:a6:d3:69:86:dc:95:d0:d4:5c:42:02:34:ba:
e7:7f:e6:e4:e9:48:c0:38:e4:45:9a:91:d9:c7:d3:9d:7e:25:
95:36:a3:a9:d1:4c:b4:22:9d:6f:8d:7b:10:ea:cb:4d:ca:15:
25:06:be:f8:0b:5d:0c:83:44:57:3b:58:cb:72:56:98:e4:83:
6a:cd:ec:98:e6:72:f8:e5:81:19:45:f7:aa:98:d5:73:dc:f8:
ad:d3:66:da:b6:38:f9:27:d7:76:bf:a7:68:4a:96:84:c2:f6:
09:05:d1:22:15:0a:d4:3e:a2:c3:58:da:b8:d2:91:93:0d:b6:
4f:99:8a:92:8e:4b:99:f4:31:04:c6:af:94:01:f8:2f:30:cc:
6d:60:56:85:3f:79:0c:a4:79:f5:b7:35:38:c4:ba:50:3f:77:
bd:0c:45:33:a9:9f:84:af:db:86:b1:57:b7:6f:01:c0:21:14:
d4:32:8e:ab:b8:1e:c9:0a:c8:88:4b:b3:6a:91:06:5e:31:c2:
e6:59:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:52:58 2026 by rpki-client