Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402810.roa
File: AS402810.roa (raw, json)
Hash identifier: P5/vH6gPi0kkjAnS8+RRqNoesTrMOSKyKP1wf84e69k=
Subject key identifier: 44:35:2D:A2:0C:71:53:32:74:5C:BA:4F:94:FC:97:8B:A0:58:8C:8B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 764E49ACF056C212E2083CB9660AAFF4E73BA061
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402810.roa
Signing time: Sat 25 Jul 2026 16:39:43 +0000
ROA not before: Sat 25 Jul 2026 16:34:43 +0000
ROA not after: Sat 24 Jul 2027 16:39:43 +0000
asID: 402810
IP address blocks: 2a13:9500:1a9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:4e:49:ac:f0:56:c2:12:e2:08:3c:b9:66:0a:af:f4:e7:3b:a0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 25 16:34:43 2026 GMT
Not After : Jul 24 16:39:43 2027 GMT
Subject: CN=44352DA20C715332745CBA4F94FC978BA0588C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:26:d3:80:b5:23:b3:3e:5e:26:d1:b8:0f:
ea:2d:86:64:97:9d:b4:13:48:2e:5c:2a:03:1d:3e:
89:98:43:52:79:a0:e3:1b:38:bd:41:f2:0c:f2:e7:
51:67:b7:ce:70:d5:8f:e2:98:1b:ce:20:45:a6:fc:
f3:08:74:0e:fa:72:d6:28:49:9b:8c:e1:00:c5:48:
e2:98:3d:34:38:e9:65:67:07:8d:ab:ac:d5:58:5e:
99:fa:3b:94:e2:72:23:b7:d6:4c:6e:95:6e:8f:56:
17:3c:58:a7:06:bb:75:d3:dc:77:7a:9d:85:a5:63:
f5:b2:0e:88:ab:2e:cb:6f:6d:87:18:58:1b:a4:09:
e9:53:89:ce:02:4c:54:c9:13:bb:57:6b:2f:31:28:
e6:ee:70:e7:c0:4d:cc:ab:e3:6c:6f:ce:98:b8:bc:
72:e3:60:62:a3:cc:ac:ae:bd:90:06:b0:16:86:a2:
14:aa:a9:93:32:cc:b8:81:7a:ab:bb:78:67:27:02:
d9:7e:ea:01:72:a4:08:6f:23:1b:c1:c2:ae:f7:84:
cb:98:8c:88:f7:90:71:6d:73:34:50:8d:bc:11:68:
4d:60:6d:70:54:b3:32:72:b8:a4:f7:8d:5c:c4:b2:
45:dd:32:78:e6:6c:60:df:58:3e:b0:95:21:2f:e3:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:2D:A2:0C:71:53:32:74:5C:BA:4F:94:FC:97:8B:A0:58:8C:8B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1a9::/48
Signature Algorithm: sha256WithRSAEncryption
8b:35:59:f7:be:d2:02:48:d6:78:3f:7a:a5:2c:e8:18:ce:a3:
67:1f:fd:28:45:00:d8:65:39:ab:5b:50:08:f3:c5:aa:15:74:
ea:f2:14:df:4b:1c:e5:81:79:8a:3c:0a:08:aa:c3:69:0a:37:
c9:4b:6a:f3:60:28:f9:d8:dc:f3:e8:84:2c:df:71:f7:c5:ff:
78:2b:6b:98:59:15:39:49:ec:75:9a:52:4c:ba:21:9b:c5:7e:
82:1b:be:b0:e2:b6:ee:ac:a6:b6:e3:8b:2c:9b:e7:18:e6:93:
49:d5:14:72:4f:26:1d:a4:c3:04:78:3a:09:c1:e8:17:e7:88:
bc:8f:d7:5d:f3:78:93:37:cb:b1:d6:83:07:43:71:c9:f1:f6:
6e:fc:f7:54:14:e5:cf:33:e8:b0:bc:53:e6:c9:e8:7d:76:1b:
8f:c7:9e:8d:48:d9:05:ba:26:26:24:5c:8d:08:f1:07:f5:fa:
34:3c:6b:2b:44:52:c1:1e:1f:5d:ae:b9:21:e4:5a:ad:e1:63:
bd:de:87:52:46:eb:96:32:8a:8b:c3:24:d9:cc:fd:85:df:15:
b2:9b:09:96:ad:f2:03:22:da:93:25:f9:9f:c6:74:c1:f2:64:
21:a7:28:80:ed:e8:e7:a8:17:60:ee:cc:bf:9b:fd:b5:6b:b5:
3a:68:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:15 2026 by rpki-client