Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401681.roa
File: AS401681.roa (raw, json)
Hash identifier: CRWmbIRKohZ9YwPDVddk7XnBIeorqmPleu0vqVdLKdQ=
Subject key identifier: 48:1C:41:9C:BA:96:6D:51:A7:31:B9:9D:95:04:6A:37:E3:2A:B8:68
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2004147C0B6DB7E4331C61DD64C62A73E038FEDF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401681.roa
Signing time: Sat 02 May 2026 07:47:07 +0000
ROA not before: Sat 02 May 2026 07:42:07 +0000
ROA not after: Sat 01 May 2027 07:47:07 +0000
asID: 401681
IP address blocks: 2a13:9500:77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:04:14:7c:0b:6d:b7:e4:33:1c:61:dd:64:c6:2a:73:e0:38:fe:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 2 07:42:07 2026 GMT
Not After : May 1 07:47:07 2027 GMT
Subject: CN=481C419CBA966D51A731B99D95046A37E32AB868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:91:54:f7:ee:c4:b2:10:5f:d5:ac:78:b9:
7d:2f:71:57:54:5f:9d:59:84:e1:df:6a:1f:cf:3d:
9a:80:0b:69:ca:14:64:d4:13:cf:da:cf:83:a4:49:
a0:f9:dd:00:00:52:96:0e:70:bb:bf:71:bb:38:27:
38:60:90:1d:3a:58:2e:85:94:45:54:f1:da:ac:cc:
be:7b:87:51:27:cf:37:f9:98:f6:8f:f8:d7:34:22:
ff:fd:49:7a:6b:eb:6f:7e:0f:1c:b0:32:aa:1f:a5:
ea:f2:9a:fb:55:a1:8e:03:be:cc:f6:2c:8d:87:72:
5a:60:db:2f:19:12:44:91:f8:44:66:2f:9b:6a:55:
2c:cb:43:a2:c2:c3:59:2d:3a:7c:2c:2d:dd:6e:7d:
0c:9e:cd:c3:aa:8a:79:55:2a:4e:ae:bf:66:dc:26:
6c:65:a1:61:12:22:57:5c:54:9a:93:91:11:1d:45:
61:96:9a:64:85:3b:8b:56:38:d2:2b:89:e0:9f:bb:
0f:f7:bf:ff:a4:2a:fc:47:27:d7:ce:1b:9a:c6:39:
bf:36:6a:23:da:7c:ae:ff:21:7b:7d:15:c5:89:46:
e2:9d:2d:54:ba:71:46:24:8c:1a:57:83:5f:91:1b:
c5:32:6e:aa:9f:4c:eb:a3:58:4f:6e:41:65:75:a3:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1C:41:9C:BA:96:6D:51:A7:31:B9:9D:95:04:6A:37:E3:2A:B8:68
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:77::/48
Signature Algorithm: sha256WithRSAEncryption
7a:79:97:e2:09:48:a5:ae:ed:20:34:ca:54:c0:2a:37:ec:8c:
bd:7c:d1:61:9e:fd:d2:f7:0a:a2:87:8b:f3:ee:4c:59:dd:79:
d5:43:95:b8:bd:9d:2f:9c:66:01:72:7f:d4:17:42:e5:eb:f8:
2d:11:95:d6:ee:43:60:a4:9c:0f:f6:f9:d5:5e:60:94:54:0c:
a0:f3:da:27:a5:1c:c5:3d:e9:56:ad:6b:d2:36:f5:a9:03:a0:
e5:74:8c:c9:70:f9:f4:37:ce:7c:4d:40:9b:b9:9d:9c:d4:79:
34:a7:64:de:e9:70:c8:f7:ce:44:21:e5:14:f3:28:d8:a8:1a:
2f:d8:89:b7:f5:ba:ef:b8:b7:33:5e:41:89:ea:74:22:f9:3f:
a6:81:01:08:b2:0a:2f:cf:73:79:72:55:f5:93:e3:04:94:c4:
84:2a:08:aa:03:ac:a5:94:2a:ae:7d:e4:d5:ec:09:47:ac:a8:
7a:f4:de:23:f7:65:4a:4c:ed:07:86:e7:a6:e8:53:7d:47:90:
c1:b7:e7:16:fd:24:28:8f:07:83:9f:57:85:1b:17:b9:16:59:
9e:c4:3c:10:46:7c:5c:94:e3:8b:6c:46:61:41:28:3a:91:90:
33:c9:6e:3d:02:d2:14:11:68:e3:45:31:11:a0:be:78:30:07:
ef:44:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:42:34 2026 by rpki-client