Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402916.roa
File: AS402916.roa (raw, json)
Hash identifier: +mpExUvhMK+iv7Iijq/ZX9zSDScOVqBkbca05b6nMuc=
Subject key identifier: B1:9E:E4:C9:12:93:5F:28:5D:6B:45:F4:F9:41:AA:61:8E:02:93:FE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6AC059A3CF274D6818D6F2BB11980A7AB74D91BB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402916.roa
Signing time: Tue 25 Aug 2026 12:53:55 +0000
ROA not before: Tue 25 Aug 2026 12:48:55 +0000
ROA not after: Tue 24 Aug 2027 12:53:55 +0000
asID: 402916
IP address blocks: 2a13:9500:1bd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c0:59:a3:cf:27:4d:68:18:d6:f2:bb:11:98:0a:7a:b7:4d:91:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 25 12:48:55 2026 GMT
Not After : Aug 24 12:53:55 2027 GMT
Subject: CN=B19EE4C912935F285D6B45F4F941AA618E0293FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:42:ff:45:4e:c8:38:38:bc:a4:bc:a8:dc:
7d:09:b4:bf:8d:40:ba:f1:13:a6:a8:23:70:42:cf:
6f:ce:fd:4b:5f:99:7d:bb:ae:50:6c:5d:4e:1d:a4:
19:ef:41:d1:64:c8:e6:1d:cb:aa:b3:e8:c3:1f:b9:
c2:86:bc:34:7f:da:97:19:82:3e:ea:a1:f6:1d:77:
a9:16:fc:31:4c:27:1e:3e:52:93:e4:6f:47:96:c3:
d7:4d:a3:19:be:53:68:8b:a7:6f:ff:86:d3:bd:f3:
37:6f:e6:88:19:f1:19:a8:d0:15:b6:6a:60:2c:da:
89:6b:c6:fa:f2:e5:0c:0a:3c:50:81:62:36:fd:37:
7c:9f:42:ef:9f:e5:6e:44:29:df:95:95:34:c0:f8:
9f:4a:fc:c9:a6:29:b3:54:b1:e9:f6:77:20:56:96:
cf:74:61:04:c8:6c:f0:21:25:ee:ea:da:18:48:f0:
02:4e:26:d3:e4:06:e3:98:b4:7e:1a:6e:ec:85:23:
b0:17:32:f3:33:0f:e4:e2:70:e3:b5:58:75:11:c1:
bf:f9:2b:a5:b0:80:5b:ca:f2:bf:17:87:fc:06:f7:
aa:2f:26:da:b2:ed:ad:1c:93:89:3c:28:da:44:fe:
52:8c:8e:3b:a4:ed:35:19:02:18:fe:fe:e2:72:67:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9E:E4:C9:12:93:5F:28:5D:6B:45:F4:F9:41:AA:61:8E:02:93:FE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402916.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1bd::/48
Signature Algorithm: sha256WithRSAEncryption
92:4b:1b:90:2c:c8:c1:d1:84:cd:73:25:77:82:30:b2:9c:fd:
a6:ae:da:12:d1:33:51:97:e6:a2:c2:63:63:b9:69:c4:4a:c0:
dc:be:fe:99:6a:6a:a1:db:4f:c5:fb:96:64:51:3d:5c:0e:2e:
e3:27:05:47:fb:45:05:64:0f:43:70:6c:94:04:e4:7b:ff:f5:
fe:fa:d9:1f:7c:cd:d8:a7:76:95:cc:f8:59:f8:1f:6a:0b:44:
60:b5:69:70:66:00:9e:3b:b9:f1:f8:77:91:c1:10:ef:fc:4c:
9e:45:bb:df:2b:07:94:32:50:22:b0:73:4e:bc:6b:19:9b:5f:
ad:88:54:ca:35:d7:1f:61:6e:87:1c:76:46:23:7c:83:a7:14:
72:6d:98:d5:67:a0:19:bc:a5:5f:02:ee:f6:b0:d7:f8:c6:4f:
df:a4:0e:82:ef:dd:f0:db:ee:32:75:ca:67:4d:c8:7f:b5:54:
cc:34:98:b7:e8:a7:f7:b7:a4:5d:e3:35:be:7e:0e:ca:d4:09:
1e:a3:b5:5c:64:0a:d9:7f:e3:74:32:02:69:db:d4:9f:29:87:
4b:e2:2a:49:7e:9c:6e:ff:ef:06:97:aa:c5:03:05:cc:9f:9d:
ab:14:10:52:94:38:a1:14:92:e8:75:10:87:0f:c7:5e:95:68:
6c:8b:9a:64
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUasBZo88nTWgY1vK7EZgKerdNkbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MjUxMjQ4NTVaFw0yNzA4MjQxMjUzNTVaMDMxMTAvBgNV
BAMTKEIxOUVFNEM5MTI5MzVGMjg1RDZCNDVGNEY5NDFBQTYxOEUwMjkzRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jUL/RU7IODi8pLyo3H0JtL+N
QLrxE6aoI3BCz2/O/UtfmX27rlBsXU4dpBnvQdFkyOYdy6qz6MMfucKGvDR/2pcZ
gj7qofYdd6kW/DFMJx4+UpPkb0eWw9dNoxm+U2iLp2//htO98zdv5ogZ8Rmo0BW2
amAs2olrxvry5QwKPFCBYjb9N3yfQu+f5W5EKd+VlTTA+J9K/MmmKbNUsen2dyBW
ls90YQTIbPAhJe7q2hhI8AJOJtPkBuOYtH4abuyFI7AXMvMzD+TicOO1WHURwb/5
K6WwgFvK8r8Xh/wG96ovJtqy7a0ck4k8KNpE/lKMjjuk7TUZAhj+/uJyZ5KLAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUsZ7kyRKTXyhda0X0+UGqYY4Ck/4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAyOTE2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAG9MA0GCSqGSIb3DQEBCwUAA4IBAQCSSxuQLMjB0YTNcyV3gjCynP2mrtoS0TNR
l+aiwmNjuWnESsDcvv6Zamqh20/F+5ZkUT1cDi7jJwVH+0UFZA9DcGyUBOR7//X+
+tkffM3Yp3aVzPhZ+B9qC0RgtWlwZgCeO7nx+HeRwRDv/EyeRbvfKweUMlAisHNO
vGsZm1+tiFTKNdcfYW6HHHZGI3yDpxRybZjVZ6AZvKVfAu72sNf4xk/fpA6C793w
2+4ydcpnTch/tVTMNJi36Kf3t6Rd4zW+fg7K1Akeo7VcZArZf+N0MgJp29SfKYdL
4ipJfpxu/+8Gl6rFAwXMn52rFBBSlDihFJLodRCHD8delWhsi5pk
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:15 2026 by rpki-client