Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402011.roa
File: AS402011.roa (raw, json)
Hash identifier: GbPE2b7kAegkfZ5fU5w6z1hDKCA+G5Xxhtj7bR6mnFk=
Subject key identifier: 97:C8:F2:0D:2A:BF:05:E6:84:4C:CD:77:6C:76:E2:40:39:27:41:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 19B2B3F1482F39FBA3584FD2CC7DA3DBEB2021A1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402011.roa
Signing time: Wed 23 Sep 2026 17:02:26 +0000
ROA not before: Wed 23 Sep 2026 16:57:26 +0000
ROA not after: Wed 22 Sep 2027 17:02:26 +0000
asID: 402011
IP address blocks: 2a13:9500:1e3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b2:b3:f1:48:2f:39:fb:a3:58:4f:d2:cc:7d:a3:db:eb:20:21:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 23 16:57:26 2026 GMT
Not After : Sep 22 17:02:26 2027 GMT
Subject: CN=97C8F20D2ABF05E6844CCD776C76E2403927413E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:24:c5:06:54:9b:1e:0b:af:37:dd:c0:f9:
8d:86:a9:6d:11:8e:d8:22:02:3c:c2:d6:2c:42:88:
af:ba:a7:a3:af:da:9e:86:d6:06:e9:e3:46:7c:52:
7c:4f:a3:b1:60:4b:9d:7d:77:c6:c8:3a:50:dc:83:
cf:20:ef:8f:35:30:45:38:8c:16:1a:c8:30:0b:46:
51:56:38:79:b0:bf:76:ad:e3:1c:76:c6:76:88:b1:
2e:73:ac:fd:71:b6:a1:93:9b:91:ce:1c:bb:37:bd:
43:7f:4e:b7:ee:48:b4:80:44:19:09:e1:4c:85:e8:
64:00:d3:6c:c4:6d:a2:a1:18:80:c9:e4:ce:2b:ac:
73:fa:22:25:23:d3:38:a5:f7:43:13:bc:40:d6:90:
98:9f:3b:32:c5:73:d3:85:65:06:22:25:a0:9c:47:
5b:98:2b:cf:86:29:69:1c:6d:59:75:ea:76:93:d9:
f4:40:80:dc:ca:1c:54:f4:15:9b:06:d7:e6:04:df:
ae:0f:a6:ef:05:27:2a:ae:a9:c9:fe:d6:10:ef:53:
db:2d:77:3c:c8:dc:17:aa:bd:d5:d6:4f:65:08:ee:
22:ce:fb:68:63:aa:aa:3c:00:7d:13:dd:bb:b5:ac:
48:da:b7:9b:0c:79:9a:0a:93:62:12:48:00:14:2e:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C8:F2:0D:2A:BF:05:E6:84:4C:CD:77:6C:76:E2:40:39:27:41:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1e3::/48
Signature Algorithm: sha256WithRSAEncryption
a4:d4:ad:d7:2f:fa:ce:7d:6a:fc:74:bf:f4:f9:83:16:e5:0d:
e3:03:f9:b7:81:ff:22:84:64:2f:90:19:cd:4e:e3:cd:a0:39:
51:d5:6b:cb:a5:a7:e6:bb:43:5e:d2:52:eb:da:9c:db:fe:35:
72:dd:85:82:db:ba:d8:01:ae:ae:d8:12:97:83:a3:1b:cf:68:
03:27:0b:78:3b:18:6c:53:d8:9e:65:ed:4b:11:4a:67:cf:e9:
a6:11:c9:90:b4:d6:18:e0:ab:95:d8:fa:22:3f:37:19:c4:35:
b1:7f:17:91:89:11:d5:14:03:a0:03:3e:70:89:59:07:d1:be:
a6:06:08:db:a0:e1:c7:d3:1c:a5:e1:f3:50:0f:3d:b4:3c:cf:
51:fb:9f:30:88:53:07:64:2d:f5:d1:5f:fc:4f:81:73:09:5a:
e8:9f:e1:e7:30:b6:e1:62:e0:8b:22:ae:f9:ba:7e:3e:b8:16:
cd:d2:ae:48:43:9a:68:41:32:79:1b:ab:f8:2a:00:b1:1b:5d:
59:1c:06:41:ac:a7:66:7a:aa:21:a6:4a:c2:09:6e:41:cc:a1:
b3:9e:e9:81:5b:20:ea:ef:c6:93:9e:0a:20:a9:a0:2e:7a:a2:
b6:6f:fa:6c:6e:e1:ac:f0:c0:07:df:84:2f:b4:4e:74:f5:94:
a5:4a:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:32:07 2026 by rpki-client