Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399011.roa
File: AS399011.roa (raw, json)
Hash identifier: ZV0ve532iap/NNJB7yNxEEFdDGO8pen75kv3mp28ya0=
Subject key identifier: BB:F5:9E:CF:28:6C:87:7C:6D:23:04:EE:2B:2B:1D:19:68:39:0F:E7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6D87EEBA78C1970E7B229AA8E89934BDB5334CF5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399011.roa
Signing time: Fri 19 Jun 2026 08:47:46 +0000
ROA not before: Fri 19 Jun 2026 08:42:46 +0000
ROA not after: Fri 18 Jun 2027 08:47:46 +0000
asID: 399011
IP address blocks: 2a13:9500:b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 14:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:87:ee:ba:78:c1:97:0e:7b:22:9a:a8:e8:99:34:bd:b5:33:4c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 19 08:42:46 2026 GMT
Not After : Jun 18 08:47:46 2027 GMT
Subject: CN=BBF59ECF286C877C6D2304EE2B2B1D1968390FE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:99:30:9f:f6:a5:7f:81:78:95:00:aa:d3:
e7:c3:49:e7:19:80:34:c1:00:46:aa:7b:5d:b5:56:
67:7f:91:e1:b5:0e:fc:74:39:15:77:b0:b9:d0:ab:
29:e1:7c:81:e6:07:c1:77:b3:43:16:6b:3b:2d:77:
0b:e3:67:be:b3:9f:ff:93:86:68:d8:49:a0:fd:70:
52:11:da:37:c2:21:5b:c0:18:e4:07:e2:aa:64:18:
4c:aa:a5:34:38:11:95:9a:06:d6:fe:c9:b2:50:2d:
e1:eb:41:b5:44:e5:a6:24:df:24:cb:aa:82:3d:8e:
ee:fe:ae:f1:17:29:f1:d7:2a:57:4e:c6:5a:97:bf:
77:25:82:7c:7c:24:cc:53:26:94:94:d2:a4:7d:8d:
4a:e6:ed:6f:4c:2c:88:af:8d:b5:6f:96:bb:8a:cc:
a8:f8:f8:0b:db:cf:f2:a1:59:cd:82:7c:93:5e:6e:
e2:ab:1b:f1:c9:3c:b9:fd:37:e5:fe:83:a9:24:86:
94:80:78:95:27:71:8c:33:d0:c7:a3:ce:51:30:26:
5d:19:f8:18:39:0c:4c:a3:df:46:3e:21:98:a3:ec:
ca:8a:61:81:33:e6:33:af:82:81:79:86:d0:4d:61:
a7:58:aa:3a:14:e3:e6:52:e3:63:ad:4e:93:16:96:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:9E:CF:28:6C:87:7C:6D:23:04:EE:2B:2B:1D:19:68:39:0F:E7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b4::/48
Signature Algorithm: sha256WithRSAEncryption
25:38:08:74:3e:16:06:7b:95:6c:5d:ee:21:a5:4e:5b:cb:b9:
69:c5:e3:03:43:29:01:67:5b:fd:3c:e9:bc:59:3f:cf:35:37:
7b:25:92:d8:01:0a:c5:94:fb:c6:fd:b0:d4:e5:16:08:e4:74:
b2:c7:27:49:99:5c:8d:fe:40:01:d1:1a:d7:3b:ed:fa:dd:ce:
74:23:2b:f9:a2:25:33:c4:d3:11:64:00:e5:39:5e:80:3f:2a:
47:2c:48:cd:f9:0e:bc:8a:c8:a5:58:4c:e6:97:77:62:dc:79:
8d:bf:86:a6:1c:66:2b:1c:15:3c:bc:cd:7f:12:26:f0:20:bd:
52:1d:75:c8:1c:b3:22:7e:4a:6a:80:5c:44:a8:5e:4c:c2:d4:
90:88:e8:b5:61:ac:db:f0:b1:44:f4:77:c5:b8:99:82:2d:8b:
85:4a:cd:9e:8c:dd:33:22:3a:ef:c0:b5:b2:49:9e:fc:c8:a4:
62:07:08:20:e1:89:62:b5:ff:88:c8:99:6e:3c:fc:fe:e4:08:
9d:8d:9e:14:60:2e:a5:75:dd:11:db:8e:2d:7d:91:6f:78:0e:
3a:85:65:9b:18:dc:47:0d:c1:8d:64:4b:5c:d4:cb:56:ca:fd:
f7:e0:dc:d6:31:d7:43:83:b5:47:be:9d:46:ee:20:c7:6c:eb:
c8:1a:84:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 00:51:38 2026 by rpki-client