Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400958.roa
File: AS400958.roa (raw, json)
Hash identifier: rNKcu+b1xYiMUC/2asf35Dp/3rzKvhmkYbRJbLeBHyQ=
Subject key identifier: 61:F4:56:3D:5F:26:FA:7F:CF:34:9B:3C:A0:4F:4D:A9:40:25:50:A6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6566C2CC11DB01651B6C29843FC350BD140808B2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400958.roa
Signing time: Mon 24 Aug 2026 19:49:30 +0000
ROA not before: Mon 24 Aug 2026 19:44:30 +0000
ROA not after: Mon 23 Aug 2027 19:49:30 +0000
asID: 400958
IP address blocks: 2a13:9500:e9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:66:c2:cc:11:db:01:65:1b:6c:29:84:3f:c3:50:bd:14:08:08:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 24 19:44:30 2026 GMT
Not After : Aug 23 19:49:30 2027 GMT
Subject: CN=61F4563D5F26FA7FCF349B3CA04F4DA9402550A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:18:62:a1:95:77:00:bc:3d:ee:c3:9c:cb:
cc:9f:aa:96:ac:ee:1d:75:bf:2d:7c:a4:65:b7:73:
4e:b7:fd:fd:b4:19:e1:63:bc:76:ae:c1:a3:64:c7:
9f:89:9d:27:95:b2:ab:b4:48:61:c7:44:35:5e:85:
a6:96:4c:2e:09:9d:5a:eb:81:d1:b2:41:fe:6c:8c:
83:74:19:c5:c7:5e:fe:ae:cb:8f:e4:7b:3c:56:27:
b4:3c:dc:0d:3c:2b:4c:a4:01:a4:0a:35:7b:cf:7b:
e7:91:cd:00:f2:d1:49:f7:32:1f:5d:43:5b:5e:05:
44:0a:44:27:b2:7d:e7:4a:eb:70:26:05:fc:8f:39:
65:de:07:38:ab:94:2c:16:19:9c:19:41:d4:f1:b0:
bf:1b:ec:0b:73:20:58:26:cc:0c:55:e5:99:72:5f:
f5:4f:87:57:71:50:46:cf:41:a6:d6:d4:a3:8d:5e:
9f:af:20:db:47:e8:a3:07:f3:50:99:bd:84:66:55:
82:65:d7:3c:6f:ad:b8:6b:bc:c3:9b:18:b8:f7:6d:
95:1b:bc:a0:ad:43:64:07:ed:15:6f:ca:02:41:02:
57:4b:13:ea:dc:59:06:3a:97:7c:51:02:e8:2d:ef:
6f:75:90:ef:c2:d7:9a:ba:3a:76:25:0d:4a:eb:bf:
58:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:56:3D:5F:26:FA:7F:CF:34:9B:3C:A0:4F:4D:A9:40:25:50:A6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:e9::/48
Signature Algorithm: sha256WithRSAEncryption
63:99:39:37:5c:bf:7a:31:8c:bd:80:ae:bb:e6:bd:ca:76:f5:
fd:7d:df:dd:bd:07:73:83:6e:a9:40:f6:a8:de:c4:d0:c7:59:
4a:c4:33:4e:52:0c:a3:a7:66:ab:12:25:b2:25:1b:ad:9c:fa:
bc:da:71:32:1c:e3:ee:94:7e:e2:32:7e:19:91:33:c5:10:b9:
70:e7:66:7e:c1:91:f2:08:27:07:35:d1:3a:d3:a4:16:e1:4d:
ff:ef:b2:ba:0e:d6:f7:e6:36:b1:47:3d:25:d0:5d:e4:d1:6c:
38:81:a3:fd:2c:e9:60:5e:c8:ea:77:8f:a6:3b:07:c1:d2:fa:
2c:57:39:75:38:cd:db:41:d5:e6:b6:f2:65:7a:72:aa:66:f9:
c9:42:81:b3:2f:a0:6c:f6:5b:4c:05:aa:fd:22:4e:bb:e4:c7:
cb:a8:a9:05:be:37:11:01:15:bc:95:e8:8f:a7:77:53:48:25:
a4:0c:1c:17:d2:82:1d:fc:e1:8f:c3:f9:9a:19:cf:ff:22:92:
53:f1:88:d3:86:72:ce:32:fc:4e:6e:7e:ea:74:6a:48:2c:d3:
b3:80:d6:96:83:6b:b4:ed:68:ea:3f:9c:1c:eb:0f:05:11:c6:
09:f9:b4:ce:fe:28:ea:ef:b5:32:45:41:75:87:66:8c:9b:5f:
29:e5:ef:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:35 2026 by rpki-client