Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399631.roa
File: AS399631.roa (raw, json)
Hash identifier: AQrjLSh6CO+JYkqL91Uv3BO3ZfD32IQnegrMBl2HeAU=
Subject key identifier: 77:CE:C0:8A:C2:0B:8D:2B:C0:26:A4:F8:B4:60:E5:44:8C:04:29:00
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0B12138237E878BA54B725E5D2C1305A1F86EA1C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399631.roa
Signing time: Tue 04 Aug 2026 14:34:34 +0000
ROA not before: Tue 04 Aug 2026 14:29:34 +0000
ROA not after: Tue 03 Aug 2027 14:34:34 +0000
asID: 399631
IP address blocks: 2a13:9500:1b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:12:13:82:37:e8:78:ba:54:b7:25:e5:d2:c1:30:5a:1f:86:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 4 14:29:34 2026 GMT
Not After : Aug 3 14:34:34 2027 GMT
Subject: CN=77CEC08AC20B8D2BC026A4F8B460E5448C042900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:db:33:89:a4:68:c7:37:94:27:e3:16:fc:
cd:15:81:94:e0:67:7d:db:74:21:77:65:09:d8:9f:
14:2e:f6:38:cc:e9:39:7f:6f:22:43:d3:66:00:fb:
19:83:f3:e1:14:ff:4f:1c:21:b8:b4:55:86:c3:25:
7f:76:64:e7:ee:44:4a:75:3d:80:9a:75:0f:ff:37:
bc:d8:98:5d:a1:bc:7b:57:ef:46:7a:34:bd:f6:ff:
66:b0:21:07:e4:95:ab:45:7f:63:9f:d1:98:d2:63:
50:ed:9d:a6:8a:4b:cd:bf:4a:71:d0:14:74:9b:54:
21:06:38:d2:42:31:64:08:39:b3:5a:b0:1f:06:8f:
cb:0c:c1:92:e3:8b:61:42:2a:64:35:33:96:f1:1d:
6a:af:5e:88:e0:bb:4b:dd:06:25:5b:60:0c:10:32:
e6:b1:0f:9e:e0:8c:11:fe:a5:4f:d4:78:7d:b2:23:
26:0b:d0:9f:0d:b5:fe:df:3f:e1:49:be:ee:77:08:
fd:c2:28:82:a5:84:50:3f:7f:6c:56:f6:28:4c:7d:
ec:13:bb:67:05:6a:cc:b2:d7:0f:b2:d1:62:7d:42:
3c:5f:ec:61:7e:df:d4:fc:45:6e:68:be:0a:5e:aa:
f7:f3:85:ae:27:9d:b5:17:8b:ad:56:72:f5:71:c9:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CE:C0:8A:C2:0B:8D:2B:C0:26:A4:F8:B4:60:E5:44:8C:04:29:00
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1b4::/48
Signature Algorithm: sha256WithRSAEncryption
82:db:ae:02:c0:36:3d:69:84:d2:88:a3:86:c7:e5:05:0f:34:
35:cd:d9:7a:c5:fb:b2:37:75:7d:38:56:98:0e:4f:0d:c2:5d:
ab:2e:8b:5b:7c:73:ed:2b:b5:37:de:b2:ee:0b:9c:26:23:c4:
02:90:b4:98:c1:3b:8e:ca:e0:40:24:ee:61:73:0b:1e:0c:2c:
06:01:c1:66:1f:c9:2a:06:9e:1b:49:4b:28:46:05:8a:25:ec:
c7:5d:17:11:e6:b6:cf:3f:c2:06:f0:44:f2:f5:f4:8b:5d:ce:
b3:c6:5d:77:44:87:57:33:65:3e:84:21:81:f5:aa:2b:8c:64:
56:44:b3:5f:3a:3b:cf:54:e4:31:db:0c:d1:08:e4:10:64:a0:
a5:08:16:a9:2c:4c:2d:c2:29:f0:ad:c5:a7:cc:a3:1e:66:81:
72:0a:cc:4c:df:26:a1:7d:b5:0f:34:5e:3d:cd:e4:26:a1:b6:
3e:fc:c2:3a:88:5b:27:50:02:9d:33:b8:da:d8:35:58:a3:1f:
f5:c3:3f:6c:8c:95:45:22:8e:ab:8c:d3:29:25:07:8f:b5:46:
21:b5:01:8c:ac:4a:83:07:f9:fa:10:93:b5:c9:74:de:1c:a0:
3b:c0:99:27:87:93:b2:1f:b4:59:0d:08:34:fe:20:ff:f7:36:
14:e8:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:19 2026 by rpki-client