Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS65000.roa
File: AS65000.roa (raw, json)
Hash identifier: ++ONvW1hvsE9ZcV7iYbFKLqjhVEtC/fiAMIs3H9Spas=
Subject key identifier: 1F:16:57:3E:D7:CC:F2:2B:F5:A8:3C:67:2F:41:35:9B:42:46:5A:E3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2DB0467F70D7E251B85527B8D73EAEE2A8110B94
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS65000.roa
Signing time: Fri 18 Sep 2026 15:49:35 +0000
ROA not before: Fri 18 Sep 2026 15:44:35 +0000
ROA not after: Fri 17 Sep 2027 15:49:35 +0000
asID: 65000
IP address blocks: 2a13:9500:fa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b0:46:7f:70:d7:e2:51:b8:55:27:b8:d7:3e:ae:e2:a8:11:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 18 15:44:35 2026 GMT
Not After : Sep 17 15:49:35 2027 GMT
Subject: CN=1F16573ED7CCF22BF5A83C672F41359B42465AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:1a:9d:20:b5:a8:0d:0b:6a:5e:f8:cb:2b:
b8:1c:20:9d:bf:bb:1f:fa:51:84:07:2f:88:79:7c:
f6:a8:3c:51:22:0e:3f:13:cd:ab:bb:7b:f3:9b:e8:
ad:8d:17:4b:2f:75:42:9b:03:e4:e4:12:63:97:a6:
ac:b6:4f:ac:c3:70:a2:63:24:4e:35:b5:f8:31:ea:
3b:f6:96:8c:c9:51:32:e0:3d:82:2b:07:be:ef:8e:
3c:b6:7b:83:ff:ad:97:a7:a4:3a:fc:34:a1:95:1d:
f4:cf:4c:6f:1b:d7:73:1d:e6:98:e4:6a:f0:ae:c5:
11:fe:5c:1b:12:87:9a:3d:10:a0:41:c6:a7:f7:ab:
ee:04:57:e3:0e:a2:40:67:a6:55:1a:92:f1:ba:80:
d5:d6:2d:db:42:d5:ca:db:a5:dd:4e:cd:30:19:bd:
17:88:ef:3c:ac:a9:ce:12:f0:dc:1a:15:76:b3:97:
6f:60:bf:ce:47:f1:6c:83:fd:91:98:2b:2e:a1:4d:
69:98:6e:82:5d:2f:62:33:98:6e:af:54:29:39:1d:
c1:fa:af:75:ec:68:69:00:3f:45:80:96:b1:38:cf:
8d:05:59:58:e4:05:ae:4e:dd:ba:cb:7a:8e:27:bf:
37:d5:50:aa:43:2f:64:c0:19:e8:23:99:92:be:6f:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:57:3E:D7:CC:F2:2B:F5:A8:3C:67:2F:41:35:9B:42:46:5A:E3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS65000.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:fa::/48
Signature Algorithm: sha256WithRSAEncryption
60:88:86:f5:5e:20:1f:a7:38:db:9b:12:83:79:d3:df:35:b4:
e9:d7:8b:fc:dd:0b:dd:a5:38:ea:34:44:90:0d:ef:b0:d7:83:
93:a8:8c:89:cd:a4:c7:67:53:90:a7:4e:a2:f8:cb:4c:8a:7d:
c8:3f:d1:a9:22:eb:69:28:81:7b:30:b3:49:64:2c:fe:eb:7e:
78:bd:f1:fb:37:3a:f1:de:06:f2:26:48:b7:f0:22:92:2f:1e:
6c:d7:12:35:bc:52:24:4f:7e:61:fa:7f:a6:f9:4c:f2:86:1f:
6c:4a:6e:73:7f:cc:db:53:ae:fe:ee:8c:d5:e0:9d:2d:7b:a4:
94:35:5d:8f:1e:e7:1d:32:ec:58:26:18:07:af:b9:56:af:48:
65:67:54:be:ed:28:1c:36:5c:5f:23:f2:81:66:7d:16:e8:f3:
33:de:77:ba:5b:7a:94:7f:31:0d:96:05:03:50:bd:ed:3e:e3:
ba:6a:14:9c:3a:ce:14:c8:a1:5e:cd:b1:0c:69:d8:bb:46:66:
d2:e7:de:fa:58:8d:b6:76:ec:06:a1:71:55:2d:0d:31:60:fa:
54:de:b3:2d:bc:dc:a1:dd:9f:88:9c:65:cb:ab:0f:19:85:ca:
47:1e:9a:2e:12:60:97:4c:86:3f:a2:d1:73:53:6c:17:1f:6f:
ea:ea:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:14:55 2026 by rpki-client