Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397441.roa
File: AS397441.roa (raw, json)
Hash identifier: JVyzv88sQwUwyBmI1aWqAMjBrzw8igL9+S89ayMAuqY=
Subject key identifier: 2E:73:50:1C:B6:A7:2B:1E:03:1E:C5:31:B7:C6:C3:3F:DD:35:A2:6E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2B099D8081A348C803A214D7FD85B68274E2D294
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397441.roa
Signing time: Fri 03 Jul 2026 18:14:36 +0000
ROA not before: Fri 03 Jul 2026 18:09:36 +0000
ROA not after: Fri 02 Jul 2027 18:14:36 +0000
asID: 397441
IP address blocks: 2a13:9500:1a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:09:9d:80:81:a3:48:c8:03:a2:14:d7:fd:85:b6:82:74:e2:d2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 3 18:09:36 2026 GMT
Not After : Jul 2 18:14:36 2027 GMT
Subject: CN=2E73501CB6A72B1E031EC531B7C6C33FDD35A26E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:1f:21:cf:7e:63:43:4c:bf:a9:24:4f:cf:
ce:0e:9f:1c:b3:b1:55:ca:f3:b7:0f:40:69:76:cc:
a9:e7:43:b1:db:34:65:86:ee:f8:b7:2f:d4:2b:d2:
d5:fd:8a:9b:a4:61:2e:b5:4e:95:15:24:36:0d:c0:
e3:d7:4a:87:65:2d:2b:b1:b6:f1:3c:12:aa:39:b3:
ac:4d:46:f3:18:29:03:71:fe:93:68:27:51:bb:13:
81:70:c5:8f:10:dd:01:79:3a:67:88:ca:5f:70:08:
c1:f4:2a:da:e5:fc:ac:2d:ed:eb:c2:e9:8f:7e:e0:
85:ff:11:01:ef:92:20:e2:f9:23:0d:af:24:f8:ec:
e5:7b:bd:3f:1e:f0:b6:27:16:e8:e0:fe:66:a4:7b:
92:bf:0b:6c:d3:f6:ab:df:1c:3f:d1:87:3c:47:fb:
14:ec:2a:19:b8:b0:ca:9b:b5:f1:72:0e:a5:88:5b:
3b:75:5b:e1:b3:0b:aa:bd:5b:d2:b8:04:c9:f6:d2:
21:cd:fd:ac:15:ea:a4:af:2f:52:f8:80:9e:ba:b7:
ad:d6:2f:90:c9:57:82:7f:96:98:5a:c7:7e:a9:e4:
57:d1:1b:58:ae:39:90:5c:68:5e:3f:0e:6b:e0:13:
56:55:d9:b2:39:8f:86:b6:0c:2d:3e:28:56:68:56:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:73:50:1C:B6:A7:2B:1E:03:1E:C5:31:B7:C6:C3:3F:DD:35:A2:6E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397441.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1a0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:1f:36:25:28:04:b1:97:85:05:11:50:93:92:35:b7:9b:ed:
9f:f8:2d:49:19:48:4a:5a:46:59:c6:d3:c1:fe:c9:e6:f2:45:
02:1b:1e:87:c8:8d:92:1a:8c:1a:87:00:29:c3:a1:44:9d:b2:
6a:c3:27:70:35:b8:04:05:8c:c1:8e:33:10:da:28:7f:bd:54:
94:c7:5e:04:85:f4:88:0d:81:17:b8:f9:ab:a6:3c:30:4a:55:
70:f4:29:80:fa:73:27:83:3a:f4:32:9c:33:6e:6e:27:ed:ca:
c6:7c:34:92:88:4c:b9:7f:bb:9b:04:aa:74:03:28:38:68:f4:
52:a4:19:01:de:04:05:96:5b:83:f3:54:76:5a:40:25:6e:35:
a7:ac:19:fd:cb:cf:99:8d:0b:ad:86:3b:e8:e8:0a:3d:9c:c7:
80:49:0d:6c:ce:7f:11:b7:fb:80:34:83:d8:4a:fa:d8:db:53:
0e:24:0b:40:d9:96:11:83:9c:7d:c9:01:fc:7a:23:55:81:e7:
46:59:d5:aa:15:eb:64:3d:af:2e:c0:50:18:f1:3e:06:50:be:
25:38:e5:a2:8c:6f:48:68:f0:c5:d3:fa:6f:cb:ad:1e:a8:f8:
f9:93:64:26:51:2c:11:07:67:d7:3f:2a:de:2c:4d:19:91:66:
d9:b7:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:09 2026 by rpki-client