Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13030.roa
File: AS13030.roa (raw, json)
Hash identifier: 6ylV1EAAxFf0gnatDdl6DmvW/GsbWO7lxG7wZxWWcco=
Subject key identifier: C0:C9:C6:A2:7C:53:BD:FB:70:C3:17:52:52:36:67:5A:44:E1:CD:DA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 755318874F088CC6CC528E265F544B492CA51388
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13030.roa
Signing time: Mon 16 Mar 2026 16:30:40 +0000
ROA not before: Mon 16 Mar 2026 16:25:40 +0000
ROA not after: Mon 15 Mar 2027 16:30:40 +0000
asID: 13030
IP address blocks: 178.83.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:53:18:87:4f:08:8c:c6:cc:52:8e:26:5f:54:4b:49:2c:a5:13:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 16 16:25:40 2026 GMT
Not After : Mar 15 16:30:40 2027 GMT
Subject: CN=C0C9C6A27C53BDFB70C317525236675A44E1CDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:d8:14:0f:60:93:75:3b:2b:f7:68:16:4b:
cf:d1:d3:9c:58:0f:f6:86:d6:df:c9:d1:14:59:5c:
41:c7:f5:d6:89:54:ab:a3:b7:e1:f2:8a:20:62:bb:
da:9c:34:cb:33:24:80:2a:22:96:48:7d:d7:25:9c:
bc:05:b2:27:82:49:06:14:33:0c:1a:60:a5:1d:c8:
32:e7:64:53:9d:f5:43:5f:77:44:93:a0:4d:08:36:
ad:70:bd:75:ad:f6:07:21:83:aa:d9:b8:b1:76:05:
8c:0e:bb:57:41:09:d4:c1:4c:7b:8d:dd:cd:c5:e4:
b7:53:59:97:95:ff:9f:b4:23:6a:b6:b4:5c:f2:ec:
b7:ff:36:98:b1:29:d0:cb:18:fe:c9:25:2c:42:9c:
17:16:e6:2a:56:b4:9f:02:13:b1:56:0a:cb:06:1d:
5a:17:21:68:18:26:2a:01:46:92:fa:46:63:fa:30:
36:ba:5a:09:a9:a6:4f:4a:d9:5f:8e:34:53:1d:f7:
6c:47:9a:a9:4d:dc:31:ae:be:07:ed:8a:ef:0a:8a:
13:84:d6:e3:8f:c4:70:7e:73:01:ac:af:47:de:0b:
c8:ab:d6:6f:d4:93:45:97:c7:c3:1d:e0:47:ec:6d:
36:18:7c:61:6e:8f:ae:5d:d9:9f:94:fc:c3:2d:5c:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C9:C6:A2:7C:53:BD:FB:70:C3:17:52:52:36:67:5A:44:E1:CD:DA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.192.0/24
Signature Algorithm: sha256WithRSAEncryption
39:5a:e3:68:77:db:b2:b5:31:e2:2b:20:f7:45:57:b4:7d:a2:
fa:95:e0:a4:34:7b:7d:40:2c:b5:a6:b5:bb:6b:39:09:d5:a2:
dc:19:1f:29:f2:58:88:76:8c:00:74:8c:11:33:b5:82:30:02:
3c:97:76:23:9c:47:1c:72:1f:e1:d3:90:dd:93:38:48:84:3f:
0a:d0:64:13:9f:fe:85:6d:58:67:45:fb:19:22:c0:a7:b8:e9:
65:60:db:2a:52:0e:d9:67:a3:5f:a4:fa:3f:f7:4b:7a:06:91:
0d:17:90:32:f1:73:41:57:7e:de:41:3b:0c:53:19:33:f0:5a:
11:d4:32:db:88:c8:c3:46:6f:33:96:60:47:ea:c5:2f:b0:4a:
7e:29:23:cb:40:3c:af:83:3b:af:b7:6d:03:2c:30:bc:08:22:
1d:cb:7f:0f:8e:91:c7:f7:50:ef:17:a8:92:f5:f3:1a:88:2b:
19:5a:a4:59:76:7e:e7:37:a4:82:57:84:ba:dc:0f:bc:c2:1d:
dd:b3:dd:e1:eb:d9:30:4c:66:ee:d0:99:8b:a9:8f:f3:cd:55:
85:49:e5:9c:d5:94:1d:80:65:a3:c4:4b:9d:35:c7:a0:9d:6e:
6a:6f:a3:d2:6b:41:30:b3:cf:5d:89:a3:22:47:95:af:43:42:
63:25:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:46 2026 by rpki-client