Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402349.roa
File: AS402349.roa (raw, json)
Hash identifier: QbbAc9DNLkPaVMqY4RRlwNDY3GB2Zu1EW7VdhV9ShyE=
Subject key identifier: 0C:74:63:00:08:F4:85:8D:B5:22:9F:FF:DA:C2:24:1B:6B:8B:47:C7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 62A3F52CC7CDF1832B801052AE230B4889D9203B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402349.roa
Signing time: Mon 01 Jun 2026 09:59:02 +0000
ROA not before: Mon 01 Jun 2026 09:54:02 +0000
ROA not after: Mon 31 May 2027 09:59:02 +0000
asID: 402349
IP address blocks: 2a13:9500:188::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a3:f5:2c:c7:cd:f1:83:2b:80:10:52:ae:23:0b:48:89:d9:20:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 1 09:54:02 2026 GMT
Not After : May 31 09:59:02 2027 GMT
Subject: CN=0C74630008F4858DB5229FFFDAC2241B6B8B47C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:be:02:3b:ae:f7:a7:d4:66:d7:4a:c7:59:
ff:41:2d:4f:f1:04:d1:8d:c7:c3:c2:a8:c9:9d:29:
4b:45:c4:1e:de:72:9b:ff:ff:2c:20:34:c3:6e:a2:
46:1a:9d:58:46:e5:06:44:4c:9b:f5:9d:fe:de:b7:
a5:64:cf:45:bf:69:6e:91:a4:f2:46:b6:75:fb:fa:
13:6a:0b:36:fe:26:c4:2b:06:ff:b1:44:db:f5:cc:
a3:c8:09:5e:51:80:88:14:93:59:1a:eb:48:a3:da:
f2:90:43:85:fb:19:0a:1b:86:7d:e5:d5:45:29:b0:
57:81:43:4e:4f:45:ab:7c:26:d1:d4:c2:7c:c4:41:
b6:21:7a:13:aa:b4:df:c0:8e:a7:78:90:2d:b2:a3:
a0:20:c0:98:eb:ed:03:4b:b7:0d:a6:97:53:cd:30:
6c:28:23:55:50:8c:e3:70:85:5d:40:fa:a9:3e:fc:
13:5d:bb:31:3c:11:31:6d:6e:a2:44:2f:91:5f:ba:
d8:b9:42:0a:7b:9f:25:14:a5:7f:4b:c1:a2:85:5f:
fd:42:d4:90:4a:fd:23:24:b0:22:37:b3:7c:fc:2c:
ec:27:a2:89:cb:a6:d1:95:bc:41:18:f4:80:c0:9f:
36:ba:8c:67:a5:11:d0:bf:ec:ce:32:1e:b9:e2:6d:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:74:63:00:08:F4:85:8D:B5:22:9F:FF:DA:C2:24:1B:6B:8B:47:C7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402349.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:188::/48
Signature Algorithm: sha256WithRSAEncryption
9d:8e:f4:8e:9e:9b:0f:5c:7e:92:d7:59:d4:70:45:ac:9a:af:
ac:93:b6:7f:85:05:ca:42:c8:80:a2:e3:ee:06:18:f6:0a:83:
18:35:a9:9f:2f:7f:fb:a2:5d:9b:03:19:8e:5e:ed:70:31:8c:
ae:74:15:2a:76:99:03:1d:d4:7d:5e:ec:9a:d0:d3:cb:5d:91:
cf:25:a0:15:38:61:9d:53:a0:cd:67:58:3e:b1:d4:cc:9e:a9:
90:1b:f3:ab:04:5e:54:db:5a:f4:e0:05:27:57:a4:46:07:99:
69:7e:4f:b3:98:03:d8:7e:bc:d2:b2:f3:b6:b4:ee:19:e1:8d:
6f:76:b2:93:0f:ac:7a:db:cb:2f:d4:ad:02:84:56:d8:5b:55:
6a:05:54:3e:6e:5d:bb:5c:70:2a:d5:06:95:07:9d:7a:b9:e4:
e0:a6:41:c9:1d:0f:f9:d1:f6:dd:87:66:e4:0b:1d:df:67:53:
2f:b7:6e:b2:46:96:e6:d8:70:2b:c0:f0:f4:eb:df:c8:ea:ac:
46:20:27:9e:ba:d4:9a:e9:2c:1a:44:a2:ba:a2:59:12:7a:93:
c2:78:da:c1:0f:16:ae:4a:1d:33:34:10:a6:02:8f:46:e6:d9:
e1:7c:78:bf:d9:f6:47:0d:9a:da:0b:c8:99:2d:f5:36:68:f2:
58:df:8c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:32 2026 by rpki-client