Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS41051.roa
File: AS41051.roa (raw, json)
Hash identifier: sxrPol13tChxyV9F97dpOmEgRRFTd49lQX2clfj+xrk=
Subject key identifier: 4D:BA:E9:9D:C4:9C:1B:62:69:66:5B:D1:56:0C:13:C7:52:4E:C8:FA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 777BB79CEF5729C82F8F81E0D880BBCEE3A3B318
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS41051.roa
Signing time: Sun 22 Feb 2026 11:26:05 +0000
ROA not before: Sun 22 Feb 2026 11:21:05 +0000
ROA not after: Sun 21 Feb 2027 11:26:05 +0000
asID: 41051
IP address blocks: 2a13:9500:13e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7b:b7:9c:ef:57:29:c8:2f:8f:81:e0:d8:80:bb:ce:e3:a3:b3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 22 11:21:05 2026 GMT
Not After : Feb 21 11:26:05 2027 GMT
Subject: CN=4DBAE99DC49C1B6269665BD1560C13C7524EC8FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:b5:56:4c:2d:47:40:16:37:0b:fa:f5:74:
72:05:19:e5:36:2c:84:41:4e:88:1a:a0:b4:5d:52:
8e:38:f8:b0:16:05:51:24:9f:59:50:5a:76:9e:b0:
1e:c2:58:a7:18:74:33:51:3d:e1:d1:60:09:57:ea:
48:50:2f:f9:61:10:17:9c:96:69:9f:22:a0:c9:e2:
d7:8e:ff:4c:60:7e:1b:21:ce:cf:e5:e9:29:83:18:
09:1b:89:01:66:22:e6:8f:29:20:70:e8:65:dd:c1:
d4:7e:ed:b1:e0:2f:5f:32:ca:22:fb:c3:4f:6e:79:
08:04:eb:0a:90:51:66:57:25:1a:5b:b1:fc:e1:b1:
e9:9d:3d:78:8d:e9:73:dc:dd:71:32:f2:3a:a2:4a:
40:5b:36:e3:ac:93:8f:aa:6c:98:75:7e:eb:75:a7:
23:da:49:e2:56:65:65:cd:58:61:95:eb:fd:36:59:
6c:49:52:21:98:80:dc:cf:15:59:42:84:ae:61:bd:
c8:6e:10:b5:8e:4e:08:41:66:59:eb:76:93:06:98:
79:c8:b7:39:51:59:55:54:9b:1d:b8:8b:d5:5b:df:
f7:2b:01:41:ca:1d:cf:04:02:b0:4c:88:6e:ce:c6:
97:d3:84:82:06:0a:2c:ea:72:d9:89:1d:fa:b4:47:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BA:E9:9D:C4:9C:1B:62:69:66:5B:D1:56:0C:13:C7:52:4E:C8:FA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS41051.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:13e::/48
Signature Algorithm: sha256WithRSAEncryption
53:ac:47:27:28:d3:15:9f:e6:43:05:f6:e6:bf:ea:90:90:a5:
f7:a8:44:2f:64:91:b9:00:cf:07:8a:56:6f:4d:6f:f4:56:15:
25:b0:0f:40:24:e3:4b:5d:97:70:71:af:1b:1c:ac:ee:ae:60:
74:35:97:1b:bb:4c:91:03:19:5e:fb:8d:d1:93:c4:92:ff:88:
b3:f6:65:a9:94:df:e0:61:8e:8a:a9:31:38:57:23:f0:a6:45:
27:6d:9b:70:a2:72:11:13:f5:ff:6f:7a:da:f5:96:dc:85:7e:
69:df:af:79:4d:98:d1:f7:43:ef:53:a3:43:db:30:2b:62:7f:
af:76:c3:c2:01:b6:a3:be:26:45:a7:d0:91:2d:b0:e9:ae:72:
df:74:37:65:b1:15:a4:58:35:6e:c7:71:c6:36:17:35:63:81:
10:cc:ad:f0:1c:91:a5:1b:11:b1:b3:7d:a0:d9:dd:5b:e2:8e:
b5:e6:e5:c4:91:68:e7:b5:eb:65:cb:f7:91:cc:34:4f:77:84:
3e:3a:68:84:c2:0b:c1:27:4e:45:3b:98:9a:78:78:01:76:a0:
0f:4e:6d:5c:b8:e1:9e:f6:04:40:01:49:cc:ed:90:3f:e9:b3:
50:7d:7d:39:ff:0e:46:5f:77:11:98:9f:db:88:21:d0:1e:22:
19:cb:30:13
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUd3u3nO9XKcgvj4Hg2IC7zuOjsxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAyMjIxMTIxMDVaFw0yNzAyMjExMTI2MDVaMDMxMTAvBgNV
BAMTKDREQkFFOTlEQzQ5QzFCNjI2OTY2NUJEMTU2MEMxM0M3NTI0RUM4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK47VWTC1HQBY3C/r1dHIFGeU2
LIRBTogaoLRdUo44+LAWBVEkn1lQWnaesB7CWKcYdDNRPeHRYAlX6khQL/lhEBec
lmmfIqDJ4teO/0xgfhshzs/l6SmDGAkbiQFmIuaPKSBw6GXdwdR+7bHgL18yyiL7
w09ueQgE6wqQUWZXJRpbsfzhsemdPXiN6XPc3XEy8jqiSkBbNuOsk4+qbJh1fut1
pyPaSeJWZWXNWGGV6/02WWxJUiGYgNzPFVlChK5hvchuELWOTghBZlnrdpMGmHnI
tzlRWVVUmx24i9Vb3/crAUHKHc8EArBMiG7OxpfThIIGCizqctmJHfq0Rw9DAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUTbrpncScG2JpZlvRVgwTx1JOyPowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDEwNTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE5UA
AT4wDQYJKoZIhvcNAQELBQADggEBAFOsRyco0xWf5kMF9ua/6pCQpfeoRC9kkbkA
zweKVm9Nb/RWFSWwD0Ak40tdl3BxrxscrO6uYHQ1lxu7TJEDGV77jdGTxJL/iLP2
ZamU3+BhjoqpMThXI/CmRSdtm3CichET9f9vetr1ltyFfmnfr3lNmNH3Q+9To0Pb
MCtif692w8IBtqO+JkWn0JEtsOmuct90N2WxFaRYNW7HccY2FzVjgRDMrfAckaUb
EbGzfaDZ3VvijrXm5cSRaOe162XL95HMNE93hD46aITCC8EnTkU7mJp4eAF2oA9O
bVy44Z72BEABScztkD/ps1B9fTn/DkZfdxGYn9uIIdAeIhnLMBM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:53:30 2026 by rpki-client