Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402292.roa
File: AS402292.roa (raw, json)
Hash identifier: UNAh/uL9O5/k96e3TSeYnxRURvuet0KuCSRrGxLytgs=
Subject key identifier: 5D:2C:16:D8:AE:63:F6:E4:44:66:21:5F:40:7B:CB:92:4C:3A:01:A1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2E5765E857287BCB2751D48AAEAD3B1D64532C9D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402292.roa
Signing time: Tue 23 Jun 2026 17:17:05 +0000
ROA not before: Tue 23 Jun 2026 17:12:05 +0000
ROA not after: Tue 22 Jun 2027 17:17:05 +0000
asID: 402292
IP address blocks: 2a13:9500:13b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:57:65:e8:57:28:7b:cb:27:51:d4:8a:ae:ad:3b:1d:64:53:2c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 23 17:12:05 2026 GMT
Not After : Jun 22 17:17:05 2027 GMT
Subject: CN=5D2C16D8AE63F6E44466215F407BCB924C3A01A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:8e:15:86:3e:b8:fb:b1:f6:43:6d:90:bb:
67:09:6f:cb:c2:85:e4:f0:2a:50:81:d2:86:16:7e:
8d:5e:7a:9e:7a:d5:f4:11:3b:87:f2:36:5e:2a:aa:
a7:87:74:2d:61:4c:3d:41:b0:2b:10:89:9a:88:bc:
b1:e5:2b:a0:77:04:3c:07:ed:0d:16:f3:da:02:7a:
15:20:83:5b:ec:d1:b6:88:39:04:9c:05:9d:0f:4f:
8d:5c:cb:39:3b:f2:8b:81:1b:4f:71:6c:4a:ae:15:
bb:03:16:e2:ff:03:f1:a9:40:9f:d4:8f:17:ff:84:
48:23:60:0a:f2:db:67:92:7f:72:10:d6:04:1b:17:
d0:8b:30:f0:61:85:e2:c7:e9:b5:81:2a:a5:ae:76:
e1:4b:22:7b:3b:00:50:3c:cd:dc:0a:62:cb:c4:63:
2e:04:10:e0:e8:48:83:89:c1:3d:04:0e:30:0c:04:
cd:75:04:0c:1b:a6:9a:bb:ce:a2:56:b8:11:6a:ab:
48:1f:94:56:89:38:e5:20:92:11:3e:a0:bd:23:07:
ad:81:3b:ee:e8:8d:e5:85:e3:ee:d5:c0:9a:cc:71:
74:34:79:4a:6d:47:91:a5:de:c1:c2:6f:5d:a2:d2:
be:fb:ad:bf:e7:a6:15:30:47:69:c0:b5:aa:81:01:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2C:16:D8:AE:63:F6:E4:44:66:21:5F:40:7B:CB:92:4C:3A:01:A1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402292.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:13b::/48
Signature Algorithm: sha256WithRSAEncryption
a7:05:3b:31:24:58:1e:54:69:1e:42:f3:7b:1a:6e:09:dc:3c:
ff:37:12:e4:8f:ef:74:ad:f6:b8:ce:18:dd:15:a6:de:10:11:
e5:9f:91:d8:4d:10:8d:c7:7e:5c:74:fa:33:d2:4f:74:e1:78:
bc:f4:62:33:e8:88:b8:ce:96:55:86:b2:c8:dc:5e:72:d9:2b:
fc:45:c2:2f:f4:fa:e8:d8:82:68:f2:de:0e:7e:3b:ed:0f:30:
75:18:54:0e:99:85:c7:65:88:10:78:6d:5d:0f:46:6d:95:b7:
69:89:a8:ad:21:32:df:f7:f8:3c:de:b8:c5:cb:0d:c1:4e:70:
96:e4:a5:36:24:7b:63:9f:b3:ad:84:8a:2e:e7:f9:ec:60:75:
6a:ed:6a:30:e9:f2:9c:35:79:c2:e8:c1:b8:51:9e:a4:4f:ac:
ae:e4:59:be:1d:1c:fc:16:88:e1:f6:af:53:4c:82:52:17:4c:
31:d1:cb:0a:eb:ec:bb:ad:c7:32:c9:08:f3:8a:2c:bb:45:a1:
14:6f:5e:ae:54:d9:42:2d:84:37:d9:52:16:2b:fe:bf:20:6c:
56:7e:ea:aa:d2:da:02:ce:e4:c4:7b:f0:eb:2f:5d:6c:f5:fe:
3b:ff:e8:de:35:21:68:97:b1:53:75:20:fe:49:6c:e4:20:ec:
66:d0:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:59:41 2026 by rpki-client