Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402196.roa
File: AS402196.roa (raw, json)
Hash identifier: 8FffeaZU+jAbts2X2KAJkXqGPhxvTJsvXGk/uS5Vfvo=
Subject key identifier: F3:C3:23:9F:66:74:ED:56:4E:0C:06:C9:45:47:72:27:CE:C3:ED:10
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2B284100802865D65BC21965B415714A043DED6A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402196.roa
Signing time: Mon 18 May 2026 06:13:21 +0000
ROA not before: Mon 18 May 2026 06:08:21 +0000
ROA not after: Mon 17 May 2027 06:13:21 +0000
asID: 402196
IP address blocks: 2a13:9500:179::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:28:41:00:80:28:65:d6:5b:c2:19:65:b4:15:71:4a:04:3d:ed:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 18 06:08:21 2026 GMT
Not After : May 17 06:13:21 2027 GMT
Subject: CN=F3C3239F6674ED564E0C06C945477227CEC3ED10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:8b:e4:38:ae:a2:4b:50:4c:59:39:03:5b:
03:4b:38:52:29:0d:da:74:c6:1f:3d:01:6a:e0:ed:
3a:21:a1:4d:44:bb:c0:43:5f:c2:cd:93:8f:e8:41:
44:d8:fa:82:f5:ed:9e:0f:04:b2:8f:b5:4d:d9:72:
84:82:0e:e0:f3:d4:69:d4:82:f4:51:0b:6c:0a:22:
3c:db:46:53:c2:63:7a:fc:03:cb:13:cc:cc:70:d7:
57:41:05:da:41:85:13:c7:5c:d2:1f:94:6d:a2:f8:
e3:aa:5c:72:f5:d2:b7:28:db:8c:71:27:00:08:55:
12:55:06:a1:0e:04:54:7d:ad:19:2f:49:0e:f4:e2:
10:58:17:f5:3e:ea:66:1b:ec:7d:db:bc:d4:48:fc:
61:c8:25:2b:1d:fc:13:af:ea:d7:94:46:51:ee:30:
f9:c1:63:57:c0:fd:54:9d:ef:f8:b9:97:a8:a7:e1:
eb:79:77:33:93:b2:a1:a9:e0:36:6d:22:d5:e4:81:
76:7e:2a:5d:1f:24:f9:68:02:96:63:9b:3d:b5:ca:
38:83:e9:48:8f:58:4f:ac:3d:5c:90:f0:32:9b:fb:
ff:19:35:02:4f:4a:6c:db:18:d8:27:7b:b3:70:9b:
56:bd:dd:9e:c8:67:c3:6c:00:d2:1c:af:72:12:61:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C3:23:9F:66:74:ED:56:4E:0C:06:C9:45:47:72:27:CE:C3:ED:10
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:179::/48
Signature Algorithm: sha256WithRSAEncryption
76:9c:c7:e9:e7:14:37:83:43:b9:77:05:ed:d6:2b:46:6f:d5:
7a:40:9c:8a:a9:13:8d:0e:f6:45:f3:b0:41:2c:00:79:01:02:
68:b6:08:dd:cf:98:42:f2:48:75:f2:9e:aa:cc:91:0f:4d:85:
2e:50:73:be:42:da:ad:61:5b:48:aa:75:6c:00:64:e3:42:95:
6c:33:1e:76:35:11:8a:b1:9f:a7:df:54:ff:f5:54:0b:f8:24:
cf:7e:e9:49:3b:09:7c:59:79:1c:7a:3c:76:c6:b0:74:23:c2:
73:3c:19:1f:7f:b0:57:77:f6:7c:91:4a:f3:83:b9:78:48:76:
51:26:5f:86:08:51:4d:ec:ab:cc:44:76:dc:1c:8d:ad:c8:7e:
4a:d4:c6:53:23:c8:9b:00:6e:6d:0f:ae:7c:60:a0:d9:02:a1:
aa:48:fd:84:0c:f6:31:b7:e3:f1:8f:7a:76:65:b1:a8:25:0e:
e7:82:36:87:f0:e1:58:0c:e9:d0:27:9a:93:97:14:bb:a1:b6:
63:1d:d2:dd:94:c0:e2:b7:2f:63:ba:b5:e0:04:d4:5a:26:1f:
bc:f3:2f:b2:fb:da:ce:86:e0:96:9b:7f:f8:cb:ef:5c:8d:1b:
fd:a6:5c:32:80:4f:6d:b4:ba:23:25:7f:47:e7:94:cb:26:37:
44:76:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:17:57 2026 by rpki-client