Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63902.roa
File: AS63902.roa (raw, json)
Hash identifier: w6/Fobfjw+EmiMOnYrf3aofB/moxMo+0pTuo+ik286g=
Subject key identifier: BC:F8:86:C7:59:39:BF:75:29:96:99:7D:ED:98:E7:12:83:90:05:07
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1150C72699D23A8B64DB69137F9F480DA8447F34
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63902.roa
Signing time: Thu 24 Jul 2025 09:48:23 +0000
ROA not before: Thu 24 Jul 2025 09:43:23 +0000
ROA not after: Thu 23 Jul 2026 09:48:23 +0000
asID: 63902
IP address blocks: 82.29.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:50:c7:26:99:d2:3a:8b:64:db:69:13:7f:9f:48:0d:a8:44:7f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 09:43:23 2025 GMT
Not After : Jul 23 09:48:23 2026 GMT
Subject: CN=BCF886C75939BF752996997DED98E71283900507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:8d:b9:45:c9:2e:cb:a4:e0:de:cf:1a:27:
76:4b:5f:96:a7:0f:b4:2b:67:82:c1:45:6d:91:8c:
84:50:29:8f:ea:84:41:c6:39:9c:bd:8f:67:5b:8c:
e8:27:16:65:ef:fa:3e:7a:82:a9:49:f2:c7:b9:ff:
59:ac:bf:37:ee:cf:f1:f8:cb:58:28:c5:bd:7d:7b:
a4:f4:3a:6e:f1:cc:f7:4e:0f:ce:1c:f1:35:4d:b1:
09:22:49:80:b9:b4:a9:f8:a1:d2:d9:fe:b6:24:1e:
b2:d8:9c:e6:40:d1:91:9d:66:01:9a:d2:d6:c0:33:
e3:ed:a1:9c:3e:e9:f7:9c:a2:89:4a:b9:a9:90:94:
a6:9f:43:c3:4d:8f:44:6c:ac:9a:1c:5d:a1:4d:0e:
67:92:9b:e6:dd:35:65:c5:2e:be:5f:ad:55:e8:09:
76:b1:6a:85:07:69:8c:a1:e9:dd:c1:a1:2e:2a:21:
5d:f4:7b:82:e8:e0:2e:1e:b5:5d:9e:e5:03:5e:d6:
81:4e:4b:1d:fc:7e:22:32:5a:30:07:b3:43:b0:11:
1b:9f:fb:a4:28:1e:1d:4a:3a:b0:98:05:57:be:68:
63:de:3e:81:d8:53:ae:d4:cd:fd:18:90:f7:08:1f:
15:d9:fd:cc:0b:83:75:35:49:98:1a:ad:18:55:f4:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:86:C7:59:39:BF:75:29:96:99:7D:ED:98:E7:12:83:90:05:07
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.52.0/24
Signature Algorithm: sha256WithRSAEncryption
70:68:79:ab:f4:9d:ab:e8:2f:01:de:40:17:5d:b4:50:42:4a:
12:f5:83:90:95:e4:e0:84:32:2c:32:c9:ff:68:7c:7d:ac:19:
2e:9f:60:67:c7:20:b1:26:da:8e:fe:cf:0e:4a:b9:f1:b9:a0:
a9:66:04:46:c9:61:9b:00:f2:76:00:13:02:40:dc:07:9e:c9:
63:7d:28:14:e3:09:e7:3d:d3:f6:f7:8d:54:96:64:d8:cb:64:
bf:1d:ba:92:33:4c:08:86:ea:bb:6a:6f:6c:d8:a4:2f:40:41:
e6:08:7a:f3:7b:1a:85:2a:b5:83:60:32:8d:d0:2f:ff:cb:cc:
d9:ad:de:0c:0a:de:e7:b8:4f:90:75:3f:9e:b2:07:2a:1b:18:
27:5d:50:d1:d0:23:b8:f8:e9:b0:29:a8:5d:d1:44:ba:11:8f:
da:cf:17:10:24:0f:be:5a:17:51:69:3f:db:e5:c6:0b:49:89:
87:05:26:9c:83:5f:45:3a:aa:4a:7b:0a:c5:3d:5f:4e:78:10:
0f:18:11:89:6b:45:4f:1a:fe:07:26:1a:3c:cf:ec:62:c2:f2:
e5:e4:39:06:91:b6:f1:cc:53:23:95:c3:aa:7e:01:10:29:91:
84:34:a9:30:f2:b0:1a:ab:ee:0e:22:52:7d:68:71:dd:0b:17:
4c:0d:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:36 2025 by rpki-client