Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64096.roa
File: AS64096.roa (raw, json)
Hash identifier: KysuyF3QyHHvEskNUulgjFN6zobX3BMG7NGxv2q1v/o=
Subject key identifier: 5E:16:51:1F:AA:D7:4C:62:20:8A:7B:0E:94:BB:8C:8D:18:F3:EF:44
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6CEF3A4396B7A75E912428F958B1D1B23DE730AF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64096.roa
Signing time: Tue 02 Jun 2026 07:06:42 +0000
ROA not before: Tue 02 Jun 2026 07:01:42 +0000
ROA not after: Tue 01 Jun 2027 07:06:42 +0000
asID: 64096
IP address blocks: 2a13:9500:18b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ef:3a:43:96:b7:a7:5e:91:24:28:f9:58:b1:d1:b2:3d:e7:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 2 07:01:42 2026 GMT
Not After : Jun 1 07:06:42 2027 GMT
Subject: CN=5E16511FAAD74C62208A7B0E94BB8C8D18F3EF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:64:40:59:c6:4d:99:45:bb:c2:98:1c:32:
87:1e:63:b6:50:66:27:7c:bf:4d:48:cc:6a:42:db:
70:87:e1:b5:ea:c7:99:c2:0f:95:8f:1b:f6:10:24:
e9:a3:c2:f0:78:62:1b:e8:1c:c3:c4:94:96:02:9d:
1e:5b:76:78:32:6c:85:a3:0d:05:fa:dc:cc:cf:7e:
ce:ad:ce:71:af:a9:9d:05:e8:a2:c4:78:37:ce:9c:
7c:69:8a:5b:cb:73:8b:06:4f:61:34:42:20:e4:ff:
3b:da:36:48:bb:d7:96:ee:bb:fa:61:12:72:a0:31:
1e:12:0c:41:f5:84:49:67:31:62:8a:43:7a:89:90:
de:2f:93:7b:25:3c:d2:ca:89:65:ff:ce:80:ea:5c:
07:b0:0e:1b:44:be:93:b1:86:b8:7d:cf:95:31:48:
a3:22:9b:79:10:4a:ae:44:1a:b4:fe:7a:64:f2:33:
84:11:e9:aa:be:48:9a:e2:50:75:d1:e3:bf:f8:1c:
4c:c1:88:0c:fb:fc:a7:48:f3:fe:35:7b:6a:36:1c:
c0:19:c9:3d:dd:62:af:98:16:43:0a:2b:31:13:b0:
6d:48:6c:dd:55:68:0f:9c:0a:b1:b7:ea:60:d0:ed:
6c:f2:53:e6:80:c1:6d:1e:fa:82:c1:9d:d5:59:af:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:51:1F:AA:D7:4C:62:20:8A:7B:0E:94:BB:8C:8D:18:F3:EF:44
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64096.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:18b::/48
Signature Algorithm: sha256WithRSAEncryption
1d:a8:f5:87:2e:4b:c0:c8:b9:7a:a8:20:1f:d8:01:fe:c6:42:
97:84:42:74:c8:fc:fb:4d:b5:f3:5f:ab:b5:b1:d3:c4:15:3d:
4f:fc:db:84:71:16:b0:47:9d:27:d6:6e:5a:86:2b:7b:bc:77:
db:e5:80:df:87:14:24:d9:ca:73:5d:ab:8e:15:1f:8a:be:bb:
14:b6:0a:5c:38:eb:95:3c:da:af:93:ba:27:ce:af:db:65:af:
f3:72:ae:44:e0:36:53:81:4c:6e:c7:bf:db:61:35:0e:25:47:
52:a3:fa:5f:c7:ac:68:ba:60:fc:47:90:8b:e4:87:8a:c8:b0:
e2:91:08:4c:f2:99:31:9e:7b:55:a1:91:32:78:20:75:14:ed:
fe:ac:ef:21:c4:f8:bc:f8:3d:14:e8:bf:23:e6:15:de:51:bd:
f6:60:9e:b8:f4:8d:45:f8:6b:20:a8:37:e7:08:b3:43:ff:ae:
af:f8:4a:b0:49:d3:5e:3e:07:a3:11:99:70:90:89:a9:2d:aa:
ec:4a:4d:20:e3:cc:36:38:be:95:cd:23:98:73:46:57:f0:aa:
be:cf:8c:71:0e:87:a0:aa:2d:6a:e1:7d:f2:08:64:52:69:f2:
47:8d:29:cb:36:cc:ac:fc:04:c1:84:e2:fc:bb:06:63:96:4f:
d4:10:03:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:34 2026 by rpki-client