Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142382.roa
File: AS142382.roa (raw, json)
Hash identifier: Cv0wuMGTp0o5KHAW3G+Y/dtt9pM6eAI+FTjLMmfpYzM=
Subject key identifier: FB:BD:EB:3E:B0:4B:0B:8A:99:CE:D6:C2:B0:03:45:20:E6:98:FD:75
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 63880A80413B1E893EEC288BA3593BE2FFFEC8C0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142382.roa
Signing time: Thu 16 Apr 2026 11:47:05 +0000
ROA not before: Thu 16 Apr 2026 11:42:05 +0000
ROA not after: Thu 15 Apr 2027 11:47:05 +0000
asID: 142382
IP address blocks: 2a13:9500:40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:88:0a:80:41:3b:1e:89:3e:ec:28:8b:a3:59:3b:e2:ff:fe:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 16 11:42:05 2026 GMT
Not After : Apr 15 11:47:05 2027 GMT
Subject: CN=FBBDEB3EB04B0B8A99CED6C2B0034520E698FD75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:0c:f4:5a:35:d2:33:af:fe:4f:72:ec:e5:
f3:f9:56:98:44:09:92:ab:35:59:8e:24:61:97:b1:
b1:29:3e:48:0c:76:1d:97:56:47:a0:44:ea:14:11:
ac:e0:90:db:7b:94:a5:61:24:3e:74:79:3b:4a:7b:
4b:65:3e:9b:d0:7f:85:f6:60:82:80:7e:91:b8:91:
85:6a:a5:1e:ba:32:6c:2a:82:24:71:89:4d:41:f3:
25:40:43:27:8e:e9:4a:40:5a:74:57:69:a6:bd:35:
06:15:ae:a8:bf:a5:6e:88:66:21:02:b1:22:78:ee:
fb:13:30:bb:67:80:10:99:89:69:e7:80:75:fc:c2:
1a:56:08:3e:49:c8:5f:bd:e0:b9:59:12:d8:15:cb:
0c:68:50:3f:43:8f:2e:43:74:fc:f3:fa:0c:c0:d2:
01:c0:36:7d:d5:05:38:8a:9e:d5:6e:d6:53:79:35:
84:79:06:ce:22:c9:5c:77:0d:3d:90:3d:13:c6:5d:
1a:cc:0c:74:91:b7:c8:c6:c1:2d:bd:d7:12:d9:2a:
17:ca:6e:34:92:33:56:c2:31:7f:eb:2c:12:91:a2:
e8:91:58:6e:81:fa:c3:64:15:a6:af:74:8e:9e:c1:
ba:c0:2e:eb:f3:82:d3:ef:96:20:e8:4f:99:52:5f:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:EB:3E:B0:4B:0B:8A:99:CE:D6:C2:B0:03:45:20:E6:98:FD:75
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:40::/48
Signature Algorithm: sha256WithRSAEncryption
2f:e0:69:da:f9:f9:bb:01:8c:e4:3f:86:8d:7f:84:17:18:c8:
47:fc:6f:42:5c:4b:06:3b:83:be:66:85:cf:a8:19:31:0c:b7:
21:9d:e5:d5:9d:87:c5:5b:f7:72:72:81:cc:bb:72:c5:71:e7:
9c:3b:10:e0:c9:a5:cb:7a:7a:0a:ce:72:a0:da:08:39:ce:56:
00:1a:a5:90:f1:22:86:af:d5:6d:f1:b5:31:1f:a0:10:11:86:
7d:7e:31:78:3e:53:4a:b2:f9:9e:2c:e4:fc:b3:12:5b:31:15:
cf:58:4a:61:ce:b6:d2:2c:35:d7:be:23:73:bc:2b:a6:b4:0a:
d9:a0:86:0f:ea:eb:10:36:48:95:5e:de:4a:76:85:08:da:c0:
a3:26:40:0a:82:4c:61:03:39:fc:0f:ff:d2:e2:ca:fd:b7:25:
24:7a:7a:19:f0:67:f8:e7:eb:4a:91:6d:53:92:ff:c8:be:80:
3d:2a:f7:3f:25:14:71:94:ea:24:6a:33:44:3d:3d:b4:b5:d6:
8c:26:55:98:53:c6:f6:9c:be:33:75:9a:76:9b:78:be:73:7f:
ad:90:2d:61:c0:4e:b3:8d:3b:e9:e9:b0:ec:6c:ce:62:5d:d9:
c9:c7:6c:7d:b7:4c:5d:a1:10:11:bc:dc:ea:ba:fd:bd:a8:39:
e0:4a:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:47 2026 by rpki-client