Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS963.roa
File: AS963.roa (raw, json)
Hash identifier: /KweZ4N7UY5443FBtCQyT/LLM/WwU3LRLcHVWV8X0pI=
Subject key identifier: 92:85:BC:63:AB:57:D3:40:44:F5:D9:0E:03:ED:A1:22:9F:7E:05:A0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6DC0AA2BF8A9203171C8486A698749742DA606A4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS963.roa
Signing time: Fri 08 May 2026 23:20:32 +0000
ROA not before: Fri 08 May 2026 23:15:32 +0000
ROA not after: Fri 07 May 2027 23:20:32 +0000
asID: 963
IP address blocks: 82.25.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c0:aa:2b:f8:a9:20:31:71:c8:48:6a:69:87:49:74:2d:a6:06:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 23:15:32 2026 GMT
Not After : May 7 23:20:32 2027 GMT
Subject: CN=9285BC63AB57D34044F5D90E03EDA1229F7E05A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:6c:af:63:83:c1:b9:b3:12:b7:59:4b:f2:
69:48:6e:2f:f5:ec:ff:5f:04:c5:99:95:4f:cd:52:
43:e8:81:78:dd:fa:3d:ba:8b:a8:85:78:05:df:e9:
43:15:68:be:03:fc:5e:34:f8:f8:b5:d1:2d:97:42:
50:30:76:49:81:01:3b:f5:36:3f:0f:ff:18:61:25:
44:59:c9:92:fa:97:7e:d2:a3:59:5a:bf:45:f6:09:
03:f0:eb:17:15:ea:47:d1:84:d7:06:61:3b:37:a4:
5c:6a:a6:09:ca:41:50:e0:c7:dd:5a:ba:03:14:f7:
22:ee:0f:60:f9:9f:e9:fd:ae:31:48:65:e6:93:08:
fe:da:9b:e3:2d:56:81:b1:13:68:4b:3d:55:b3:10:
76:2c:5a:44:30:ce:7c:14:65:30:27:4f:79:d1:83:
00:16:cf:69:9c:4c:c9:f9:a5:fa:a6:61:6d:af:45:
c5:93:10:af:ba:ae:19:42:17:d8:66:af:1c:2d:f8:
2c:77:e2:9e:41:0b:29:52:19:78:ec:4b:d9:e7:e3:
6d:37:3e:32:f4:1f:df:69:37:33:16:50:25:54:ee:
a0:7f:3a:96:e9:01:ea:dd:f4:bf:1d:57:99:5b:b3:
b4:98:eb:0d:82:88:60:52:6b:ec:b1:45:e7:a7:1a:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:BC:63:AB:57:D3:40:44:F5:D9:0E:03:ED:A1:22:9F:7E:05:A0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS963.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.54.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:89:11:f5:e2:6b:09:7d:a6:8e:01:b8:ba:43:10:7f:69:ab:
8f:fe:53:34:d2:e5:9b:e0:63:fa:91:59:1a:56:42:23:75:9f:
c0:33:2c:08:ae:92:1a:21:30:2b:4c:79:56:f5:74:39:56:f6:
dd:94:80:24:bf:31:27:0b:b9:9a:93:f1:49:6a:67:20:98:6d:
2a:e5:d2:cb:7c:ff:60:3f:ef:06:8f:1c:42:ca:a0:51:89:40:
3f:1a:0e:af:43:da:00:f9:8f:49:2a:cd:6d:d7:58:bb:03:4e:
28:d3:a7:66:d1:03:01:ec:09:21:bc:e6:97:42:1d:36:8e:72:
55:5a:cb:33:df:21:f3:4d:15:50:8e:e9:c9:1f:8c:2b:73:fa:
c2:27:cf:c8:ea:a5:c8:53:04:48:47:78:81:79:fe:bc:bf:9a:
8e:5a:56:f7:21:0d:31:25:ce:6e:82:ff:c5:1c:2a:13:19:5a:
55:22:76:a1:09:81:24:d4:c6:92:ad:60:9e:40:c2:fd:bf:13:
91:6e:ae:7e:6b:8e:e2:cf:ae:a6:76:0f:22:a7:41:ba:4e:71:
bf:d3:fc:a9:a6:f4:9e:7c:88:d3:b9:4b:4f:b9:d6:69:dd:83:
55:2e:dc:03:db:33:49:df:1b:61:b9:b6:bc:ec:fd:3f:87:ab:
d4:d1:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:22 2026 by rpki-client