Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401896.roa
File: AS401896.roa (raw, json)
Hash identifier: shUpHP0m0n2gqc5ZIGOK8eEN6bnjUYtOiXSBV1Is1kQ=
Subject key identifier: DD:0F:44:B5:69:60:6C:C6:DF:84:FE:54:8F:4C:5B:3B:72:D2:62:F0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6195E5058DBC2EE503A26082F765114F08146EEA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401896.roa
Signing time: Tue 18 Aug 2026 07:49:30 +0000
ROA not before: Tue 18 Aug 2026 07:44:30 +0000
ROA not after: Tue 17 Aug 2027 07:49:30 +0000
asID: 401896
IP address blocks: 2a13:9500:e2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:95:e5:05:8d:bc:2e:e5:03:a2:60:82:f7:65:11:4f:08:14:6e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 18 07:44:30 2026 GMT
Not After : Aug 17 07:49:30 2027 GMT
Subject: CN=DD0F44B569606CC6DF84FE548F4C5B3B72D262F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:e4:96:5c:b9:13:77:f3:21:e1:0b:88:18:
4a:ab:fa:e9:c8:02:26:46:18:b9:78:a6:1a:0b:f6:
7d:0f:f8:2f:4f:8a:52:0a:9e:ef:01:d9:53:b6:e7:
96:ee:6a:da:43:c8:f2:01:9f:b9:76:d9:48:ad:92:
15:89:b7:fa:ad:49:de:bd:7e:b1:92:d2:b4:7d:c2:
4b:e8:ea:29:5a:dd:1c:fb:5f:02:e6:3b:e8:ff:2e:
8e:cd:5e:e9:d5:a6:57:c5:b9:4d:05:56:54:fb:31:
6a:95:19:b9:a0:21:75:4e:64:73:24:b8:2a:f0:41:
2b:ec:61:22:b7:69:6a:a5:9c:d9:15:8e:41:1a:68:
d7:ab:99:45:90:dd:be:39:49:c8:a4:51:73:2f:f6:
24:25:91:06:7f:2d:0e:43:c2:f2:c6:20:49:b8:1b:
09:e1:7d:ad:5e:e1:32:73:7e:e9:65:00:86:5b:81:
97:5f:f3:fa:da:6e:c4:09:c3:bc:e5:7c:0a:90:5c:
e8:d0:71:c7:d7:ff:31:64:2b:1e:86:5b:15:8c:5e:
a5:d0:02:60:c0:0c:59:34:9b:5f:15:d4:29:74:2f:
a5:4d:39:1d:6e:f3:9b:a5:fa:ab:75:1e:ae:8f:25:
e2:f1:b3:6c:6d:cf:b5:25:0a:ad:41:14:9c:01:bd:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0F:44:B5:69:60:6C:C6:DF:84:FE:54:8F:4C:5B:3B:72:D2:62:F0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:e2::/48
Signature Algorithm: sha256WithRSAEncryption
4e:8f:95:e8:67:cd:df:5f:b4:42:d4:71:cc:2d:0a:62:ec:e5:
53:c2:4c:03:87:0e:4a:41:0f:9e:bd:89:28:5d:d3:b7:dc:fc:
e0:9f:6e:f8:b5:ed:20:21:25:4c:47:b8:47:05:1a:38:50:4a:
a1:c9:81:6c:88:f9:77:93:b9:63:63:b0:34:fa:45:61:7a:02:
c0:2d:07:45:38:f4:73:f7:72:73:1c:13:44:75:88:5e:97:bf:
e4:a2:89:0b:f0:6d:76:bd:c4:bf:f2:8a:93:f6:7b:f9:45:f8:
ca:8f:c1:dd:2a:5a:c8:79:4a:e8:e6:1c:4c:70:fb:29:a0:18:
a2:75:2c:43:38:2f:31:03:a8:2d:1f:a4:25:92:c2:c4:02:4b:
e8:45:22:db:49:d5:22:65:9f:df:8f:ae:2c:88:0d:f7:dc:34:
6b:6e:7e:9a:15:c7:06:e8:28:0a:25:16:0c:26:b0:64:e5:2d:
72:fc:83:ce:89:6a:69:c6:71:34:9d:74:ea:47:dd:31:83:03:
76:1f:4a:df:6a:23:4b:26:32:da:13:6d:e1:9d:19:11:32:39:
4c:96:bf:bc:41:f0:99:67:78:40:c6:fa:27:f5:f5:0f:1a:8d:
23:78:32:08:90:3d:12:4c:a4:7c:81:3f:05:70:5e:35:2c:5b:
de:60:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:22 2026 by rpki-client