Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS52925.roa
File: AS52925.roa (raw, json)
Hash identifier: Nvr0YBr7klrEHenIb1uHVo1qJhF7aivj6EVcx1zq9Y8=
Subject key identifier: 72:F9:81:7A:BC:44:73:03:90:C4:F1:83:C3:F3:6E:AB:B3:C2:0F:85
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1233838FACEF916DA381715A4908203DC9B1FDC6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS52925.roa
Signing time: Wed 06 May 2026 17:16:10 +0000
ROA not before: Wed 06 May 2026 17:11:10 +0000
ROA not after: Wed 05 May 2027 17:16:10 +0000
asID: 52925
IP address blocks: 2a13:9500:16f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:33:83:8f:ac:ef:91:6d:a3:81:71:5a:49:08:20:3d:c9:b1:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 6 17:11:10 2026 GMT
Not After : May 5 17:16:10 2027 GMT
Subject: CN=72F9817ABC44730390C4F183C3F36EABB3C20F85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:b6:47:82:85:e0:38:59:86:ef:32:8b:30:
45:73:2f:24:eb:3e:ba:62:6a:f8:5d:b7:8c:a3:ea:
24:7c:9d:ef:02:9d:2f:1e:0c:86:32:00:fb:64:68:
f8:38:ba:20:02:a4:73:4c:4e:ea:7c:7d:a9:97:f7:
09:fd:2a:b8:53:13:27:34:f7:8e:cc:90:4a:34:ea:
74:87:12:53:89:3e:67:bd:53:3d:dd:f5:9d:43:84:
ce:c6:72:f6:c6:5f:e8:cd:71:0c:23:29:5a:8d:a5:
d0:c7:e9:f0:70:c9:49:50:8e:5e:c8:d0:01:70:e8:
2f:6b:01:9d:b4:88:65:fc:27:cb:13:6a:2c:9d:38:
d0:a2:ee:b9:44:2d:da:82:d4:40:47:b8:f1:79:6f:
3b:51:2a:cf:55:73:b1:2c:9e:ad:af:42:16:46:e5:
63:00:b1:13:06:52:5f:35:d4:e4:5d:eb:93:28:0d:
93:33:14:14:b3:1b:69:be:11:94:61:2b:97:3c:d5:
bf:c3:38:d9:17:59:8c:c2:9a:a4:5c:09:9a:24:61:
ec:50:09:d8:e5:cc:bd:53:39:ec:8f:42:84:59:ff:
7f:8a:30:a1:ce:93:e0:3e:ae:43:32:06:51:85:b1:
1e:c3:32:51:fb:58:50:c7:b5:58:34:01:c9:4c:02:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:81:7A:BC:44:73:03:90:C4:F1:83:C3:F3:6E:AB:B3:C2:0F:85
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS52925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:16f::/48
Signature Algorithm: sha256WithRSAEncryption
07:1d:5c:e3:ed:b8:17:13:26:f3:8e:ad:37:cf:5d:9c:f0:66:
76:1b:da:8e:69:66:3d:3f:7a:18:f1:d2:f5:45:ac:a5:4e:5b:
97:10:35:6f:90:18:9a:51:ca:3e:f4:27:65:d2:50:2d:62:5b:
84:31:a2:e1:6b:c1:fc:18:aa:7d:9e:4c:99:da:88:80:31:69:
a8:b4:b8:20:df:84:ed:57:27:27:57:a1:84:c3:70:28:77:3d:
c8:71:a1:4d:69:b2:9b:c4:68:cf:50:2e:20:d9:4e:50:33:08:
58:77:f2:fc:46:7a:dc:18:18:95:33:c5:8a:25:fe:c8:90:12:
d4:93:d2:ef:15:95:10:5d:54:d5:41:55:89:96:d5:c5:80:ef:
20:67:ba:28:df:85:90:7b:92:1d:bf:72:e9:88:e5:60:7a:cb:
16:bf:8b:31:a1:75:06:72:cf:31:a2:34:66:5b:89:b4:93:7d:
93:05:f6:d4:2b:8c:50:6a:bc:f9:07:b5:d0:aa:95:07:4b:38:
48:96:f7:1a:d1:df:4d:42:79:91:ca:96:27:f1:8d:8b:75:3b:
98:ed:f0:28:f1:9a:7c:d9:f6:ab:54:d0:81:58:07:7b:24:c1:
28:b0:72:2d:04:6b:ed:59:c1:bf:27:ce:25:d1:ae:6a:94:dc:
8b:4c:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:53 2026 by rpki-client