Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7552.roa
File: AS7552.roa (raw, json)
Hash identifier: TAMatdjanPxHEX2LEUf6KtQkqOevzTx2YkJewIw1IhI=
Subject key identifier: 49:4D:39:3E:19:E8:E8:85:A6:B9:3D:C3:A4:32:20:3B:43:F1:DE:1E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 16EB3BC43F65C28CF0CF255A08D920FD01CBB9F0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7552.roa
Signing time: Fri 08 May 2026 13:47:11 +0000
ROA not before: Fri 08 May 2026 13:42:11 +0000
ROA not after: Fri 07 May 2027 13:47:11 +0000
asID: 7552
IP address blocks: 2a13:9500:8a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:eb:3b:c4:3f:65:c2:8c:f0:cf:25:5a:08:d9:20:fd:01:cb:b9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 13:42:11 2026 GMT
Not After : May 7 13:47:11 2027 GMT
Subject: CN=494D393E19E8E885A6B93DC3A432203B43F1DE1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:0b:28:a1:cb:80:09:7f:89:00:6c:6e:37:
92:9c:03:fd:e4:cb:ba:f1:f3:0c:b0:98:6d:32:f1:
04:a7:94:8d:76:80:02:2f:9f:b5:90:57:ca:e3:30:
0e:12:48:2b:23:38:c2:4a:cd:06:0d:a9:09:99:6f:
e6:d2:fa:9f:45:8e:5e:ce:37:6a:07:98:64:b3:8e:
54:3f:fb:60:e7:0f:ba:eb:44:65:5d:3a:64:6c:04:
1f:63:4a:0c:e4:9c:f9:38:aa:62:8e:4b:d8:d6:f5:
4a:16:2e:a5:93:e6:3b:fd:e9:a4:05:8c:c0:65:5c:
fd:1c:cc:c7:34:49:ae:cd:70:0b:5b:12:26:64:ad:
07:9e:f0:17:c7:b6:69:3f:e7:3f:f1:6d:ae:d7:24:
17:3f:20:c3:e9:ae:e3:6e:ee:74:40:1d:21:9e:c4:
7c:39:ee:ea:92:c7:02:c3:cd:6f:c3:d7:4b:d6:76:
e6:aa:b6:9c:41:de:4a:05:0c:3b:08:64:cd:b4:8e:
6c:2b:13:45:a6:92:55:6d:48:da:9c:17:0d:34:0e:
b3:73:4d:8c:ae:51:37:0f:27:ae:80:63:11:16:4c:
8e:f4:c1:d8:ac:8a:85:35:75:2a:e2:48:ff:88:b4:
64:43:f1:df:6c:77:f5:26:79:1b:59:4b:ab:a2:81:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4D:39:3E:19:E8:E8:85:A6:B9:3D:C3:A4:32:20:3B:43:F1:DE:1E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:8a::/48
Signature Algorithm: sha256WithRSAEncryption
94:35:dd:02:a0:5c:2a:3a:3a:95:da:c8:09:14:a8:73:af:b1:
86:09:fb:1e:18:f5:52:02:ec:f2:d5:b1:4a:0e:10:36:8c:d9:
bb:ff:68:44:ee:4f:7c:43:6e:2a:3b:a2:16:d8:7e:bd:6e:ab:
1f:11:5d:6d:cf:d3:0a:39:7b:e0:41:d6:9f:05:ba:f0:6e:d5:
4d:c8:34:78:88:23:a4:3a:2d:38:9d:0b:af:04:6f:45:fa:e1:
87:b8:82:20:9a:ad:aa:58:b8:36:27:fe:53:5f:7a:0e:56:e7:
69:9b:bd:50:63:2f:f8:2e:b0:22:1c:a1:8f:cd:2f:5b:4d:0b:
d9:ea:d0:e1:9b:3c:11:6f:a2:ea:13:ad:2e:3c:a5:3e:0f:e2:
48:26:9b:70:90:11:1f:a1:56:c3:78:06:c4:7b:98:15:04:8a:
bd:2a:72:a8:d5:10:d4:79:b1:4e:be:b9:50:09:c0:e1:a4:29:
d0:9e:cd:b0:ee:e9:9b:0e:70:07:59:56:2b:02:0b:d0:b6:68:
98:9a:d6:3b:08:3d:49:f2:da:f6:bf:ba:8f:f0:4f:62:33:02:
1c:b6:e3:c5:e6:d4:c0:98:bd:00:b5:82:2e:3f:2a:a1:28:6b:
ce:41:5f:72:d3:bf:77:53:29:c1:3d:8c:aa:23:eb:bb:8f:83:
39:40:d1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:25 2026 by rpki-client