Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147261.roa
File: AS147261.roa (raw, json)
Hash identifier: 7l7PL4W6rHmjBBe7kyNwRyk7EY9xz4CWIU/nafrDGDY=
Subject key identifier: 27:C0:EF:B9:68:FF:58:A9:29:F9:DD:95:4B:B1:C4:DE:89:83:4B:F0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 19C9F577858CD6676371CE21D02561C5DFA9CB8B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147261.roa
Signing time: Tue 28 Jul 2026 14:49:16 +0000
ROA not before: Tue 28 Jul 2026 14:44:16 +0000
ROA not after: Tue 27 Jul 2027 14:49:16 +0000
asID: 147261
IP address blocks: 2a13:9500:cd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c9:f5:77:85:8c:d6:67:63:71:ce:21:d0:25:61:c5:df:a9:cb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 28 14:44:16 2026 GMT
Not After : Jul 27 14:49:16 2027 GMT
Subject: CN=27C0EFB968FF58A929F9DD954BB1C4DE89834BF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:84:38:c7:be:a2:c6:42:24:18:0a:f5:36:
a1:61:b4:85:e6:d9:1b:4d:41:5d:90:bc:a9:d1:b1:
95:8e:d7:ed:8f:1b:cf:95:7e:3f:98:5d:e1:f8:21:
fd:ef:f0:40:2b:67:04:b5:f2:e6:dc:e2:a9:e5:41:
e8:6b:28:51:24:f7:0b:cb:88:d2:b7:80:db:94:5a:
3a:39:10:d0:2b:ac:61:8b:85:72:e0:cf:96:7a:eb:
60:ec:f7:33:27:d1:50:10:d8:47:96:3c:6f:72:b0:
50:8d:ed:17:29:7d:9e:61:6f:6d:bf:f1:75:bc:ac:
6e:8c:0a:e3:7a:3b:13:30:b8:03:f9:01:74:1a:25:
b2:5c:41:f6:68:c0:f1:69:38:d3:1a:17:20:52:6c:
4e:05:d4:76:57:1d:7e:f8:b9:86:c5:23:3d:db:58:
bd:7e:82:f3:49:3d:1a:c3:9b:0e:68:75:75:a3:8f:
24:94:9f:ff:a2:9b:c7:20:a0:e9:e2:e3:e1:8e:0a:
b7:3f:25:84:1f:2a:40:96:a4:a1:63:28:36:93:63:
49:14:cf:24:fc:bc:56:93:ba:cd:27:c7:44:03:a4:
2f:34:85:7a:ca:98:ff:2e:36:54:69:40:96:bb:93:
63:ba:8a:81:90:7d:4e:af:c4:be:59:a3:03:c6:16:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:EF:B9:68:FF:58:A9:29:F9:DD:95:4B:B1:C4:DE:89:83:4B:F0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147261.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:cd::/48
Signature Algorithm: sha256WithRSAEncryption
8c:36:37:30:d5:c4:47:fd:c2:71:6b:0e:b4:51:49:15:7d:6c:
5f:01:54:44:69:89:6d:7a:dc:26:81:69:39:96:45:b9:1d:de:
0d:ed:70:02:b8:3f:ce:27:73:38:63:a0:80:69:1b:9e:28:e9:
61:a0:00:0f:39:76:7f:ba:93:39:7a:4e:2e:2d:72:79:37:3b:
dd:d5:bc:0b:3e:1b:42:d9:cc:5b:dd:d8:ac:b2:c1:8f:a1:52:
13:06:32:df:3e:f8:ec:30:f4:29:2a:99:8a:f4:b0:60:e9:aa:
1c:ad:e6:19:20:86:63:f3:37:1d:13:03:f6:71:db:ed:1a:db:
e2:7a:cd:b3:ab:c0:9e:e6:8b:50:44:e6:97:f7:a0:ed:d0:21:
79:a5:2c:75:5a:c5:14:a1:8a:12:dc:90:de:48:b0:2d:3e:aa:
43:dc:fb:c0:de:02:f9:bc:5d:1b:0a:d8:94:52:6a:5a:12:80:
6f:6e:45:08:33:c2:bc:9e:bb:e8:f1:a7:5b:76:84:6e:ba:5c:
70:27:40:26:d6:5e:34:d7:26:7a:32:c3:c3:dc:11:ac:15:94:
55:8c:f7:5c:c0:7e:0f:1f:67:56:c0:23:92:92:99:e2:db:7a:
e9:a1:69:96:fa:d2:05:13:0e:1f:95:75:d3:21:b7:68:53:b6:
8c:e3:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:21:30 2026 by rpki-client