Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402968.roa
File: AS402968.roa (raw, json)
Hash identifier: yQUmHeM692toqD81xyscYCKMJvo1a2UpVIiqx/54uZI=
Subject key identifier: 3C:C4:EA:DE:B6:0A:ED:B4:E2:D6:3A:02:77:6A:04:17:E3:32:E2:25
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6BF0E3387ABB6729FC0EF14580702FB9B3537CB4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402968.roa
Signing time: Mon 07 Sep 2026 15:33:27 +0000
ROA not before: Mon 07 Sep 2026 15:28:27 +0000
ROA not after: Mon 06 Sep 2027 15:33:27 +0000
asID: 402968
IP address blocks: 2a13:9500:1d3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f0:e3:38:7a:bb:67:29:fc:0e:f1:45:80:70:2f:b9:b3:53:7c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 7 15:28:27 2026 GMT
Not After : Sep 6 15:33:27 2027 GMT
Subject: CN=3CC4EADEB60AEDB4E2D63A02776A0417E332E225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:23:54:7c:0f:df:0a:0e:69:62:3f:ca:92:
19:5b:7b:dd:32:af:6a:cd:02:fd:05:25:68:5b:1d:
b3:8a:89:e7:43:d7:02:70:ba:ac:f8:ed:63:28:93:
b6:df:27:6e:a7:54:1c:56:49:16:ec:23:aa:53:81:
f4:da:fb:10:f3:21:ca:4b:50:bb:2f:75:73:53:8e:
02:0c:e7:af:e9:52:a4:d6:91:d7:b7:42:30:60:14:
d5:63:14:5b:1e:c9:4e:fd:f5:81:8c:5e:60:9e:37:
2e:eb:19:97:19:8a:c1:d2:03:91:6e:b3:7f:f7:c2:
8c:b2:df:f0:66:fe:cd:38:14:df:7b:26:d2:3f:8e:
b7:df:98:39:05:4a:f9:98:06:74:ef:de:8e:86:26:
27:02:cf:81:47:88:9d:9a:36:86:54:aa:c0:e9:ea:
d5:8b:1c:7f:5a:f5:b0:0a:26:8f:e3:23:29:53:b1:
d1:e3:03:18:d0:c8:63:a8:e8:6e:56:98:62:29:21:
a5:54:ce:ab:59:ae:cc:6e:e3:76:b2:ba:11:4d:fa:
db:8d:6a:4f:c0:74:95:ee:bc:1b:e7:f7:b0:33:8e:
52:69:a1:b0:5a:74:ce:8e:b9:53:e1:83:f2:f0:d0:
d8:45:ee:7a:c8:0e:76:af:c6:61:59:51:bf:0c:cc:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:EA:DE:B6:0A:ED:B4:E2:D6:3A:02:77:6A:04:17:E3:32:E2:25
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1d3::/48
Signature Algorithm: sha256WithRSAEncryption
86:4d:cc:fd:f0:e2:42:02:88:e4:4b:38:c2:d4:62:d9:5a:7f:
4b:90:02:01:c0:0a:fc:37:fa:bd:42:55:bc:a7:77:61:9a:66:
a2:9b:f8:74:90:a0:a4:28:4b:eb:ec:68:63:12:f0:e5:2e:b2:
7c:48:cc:49:9c:7b:0f:58:02:a1:4e:62:6c:6c:ea:75:29:5d:
0d:3d:bb:e5:60:1f:f2:b6:3e:f3:bc:48:f5:8b:24:2c:78:f3:
00:a0:c6:7c:d0:af:63:f9:aa:99:47:e3:6f:18:e4:9a:d7:9f:
b5:7a:4a:8b:c8:5a:d9:74:92:aa:4b:a7:1b:cf:e5:e0:e7:d3:
3a:a4:68:5d:6c:12:b8:d1:97:ff:db:6a:75:44:4c:1f:91:41:
44:40:6f:a2:34:1b:1b:d7:63:55:3a:15:7b:fa:a4:e1:03:fd:
a4:37:6e:fe:38:f3:f4:1a:ab:ac:85:87:e7:57:40:8f:4c:45:
6d:6d:1c:75:4c:29:71:92:13:3a:39:c9:91:8d:65:d6:bd:21:
0e:fe:89:76:c2:57:54:cc:8a:1e:5a:87:c8:1b:1f:92:c2:a7:
a0:5e:6a:7f:b3:08:4c:16:69:6d:a7:db:f7:c0:16:86:be:4f:
28:7d:13:68:ee:3f:22:3f:ee:a9:f6:53:4b:f3:b3:59:90:d8:
be:e9:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 16:50:29 2026 by rpki-client