Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7552.roa
File: AS7552.roa (raw, json)
Hash identifier: DlteexH4z4VgVQn29MkgrJlnnqSNYk1V07FOWhLS2Yk=
Subject key identifier: B4:15:8A:DF:44:96:69:CF:40:94:59:E7:78:C6:12:E6:A0:70:80:98
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0C04D10750A3F3936A516D8CE89E3B1C2CA0C02A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7552.roa
Signing time: Fri 06 Jun 2025 13:22:23 +0000
ROA not before: Fri 06 Jun 2025 13:17:23 +0000
ROA not after: Fri 05 Jun 2026 13:22:23 +0000
asID: 7552
IP address blocks: 2a13:9500:8a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:04:d1:07:50:a3:f3:93:6a:51:6d:8c:e8:9e:3b:1c:2c:a0:c0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 6 13:17:23 2025 GMT
Not After : Jun 5 13:22:23 2026 GMT
Subject: CN=B4158ADF449669CF409459E778C612E6A0708098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:ed:37:31:fc:58:08:be:a4:6e:78:3c:3d:
81:83:06:fc:7b:f7:87:90:4c:a1:c8:ab:94:30:8d:
78:47:0b:68:f2:99:80:1d:fa:04:5a:f3:4a:d5:91:
64:09:96:09:fe:d6:5f:66:bd:ef:8d:d8:d7:56:b4:
90:25:62:e2:e3:b0:8f:8a:c8:73:89:2f:d4:90:35:
4f:c8:26:ac:c1:ce:c0:d0:79:45:ba:e2:fc:b9:a4:
18:b3:92:4f:81:9e:54:8b:79:0a:a1:2b:fb:12:65:
6d:7d:4f:af:9c:d1:0e:fe:f7:46:f0:57:5f:35:93:
e6:be:62:1c:a0:0d:b4:67:3d:4f:c0:e8:cd:d8:86:
ff:a0:35:9b:9a:d9:2e:c7:6d:73:c2:75:0d:bf:b9:
52:43:46:62:36:38:a7:3b:f0:48:1c:4c:6c:34:b0:
36:5a:28:4e:db:9a:1c:8a:92:a0:1e:79:72:6f:1b:
75:b2:c8:3a:a3:b4:df:0c:c2:ba:85:15:cf:b5:b0:
cb:d9:41:b2:d7:7d:16:d7:e6:d1:fc:e0:fd:9a:49:
74:92:a7:2a:b3:68:63:6d:1d:fa:de:90:00:ff:9b:
c1:68:8e:b5:aa:4a:84:27:3f:b0:1d:c6:38:a7:e1:
e1:e8:5d:5d:57:fd:3f:97:a6:3d:42:9f:24:e0:1b:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:15:8A:DF:44:96:69:CF:40:94:59:E7:78:C6:12:E6:A0:70:80:98
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:8a::/48
Signature Algorithm: sha256WithRSAEncryption
1e:db:e2:b0:a6:39:1a:ce:70:c6:95:b0:07:9b:c2:da:a3:fa:
05:84:ed:b7:d4:d5:d9:28:ad:e9:fd:69:d3:9f:39:8f:89:67:
a8:81:a8:2c:8e:ae:c6:c7:c8:00:a6:56:3a:4e:1f:da:ee:56:
a7:d2:a9:6a:51:26:88:e8:a7:e3:18:4f:cb:7c:3a:e0:04:c0:
ab:e0:59:eb:9d:c1:8f:f1:64:12:37:28:8c:a9:87:79:28:eb:
6f:10:82:f4:2b:1e:33:96:89:28:c9:54:02:da:2a:9a:b0:a5:
96:15:9e:11:b2:fb:e7:33:f5:69:8e:b9:86:ad:8d:79:94:05:
9b:eb:e6:fa:ac:3e:f7:66:e8:b3:e9:c6:9e:c5:ff:39:81:46:
e5:ad:b6:1a:84:32:59:24:9a:98:e9:6b:0a:38:96:2c:f2:f3:
a4:24:7d:b3:45:48:e1:eb:28:df:63:43:1f:6f:f1:7a:7c:68:
4b:ef:86:9d:7d:05:8b:d3:c5:cd:be:0f:10:5a:72:85:ae:31:
c2:43:cb:ea:7d:ef:99:ae:18:50:1c:18:00:3b:c1:95:70:5a:
90:37:21:8f:ba:3c:73:87:93:bd:81:7c:4b:56:78:b0:ea:b1:
60:82:6a:25:ba:18:5c:98:e5:5f:ad:36:15:18:7f:16:d0:b8:
08:5b:c8:e7
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUDATRB1Cj85NqUW2M6J47HCygwCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA2MDYxMzE3MjNaFw0yNjA2MDUxMzIyMjNaMDMxMTAvBgNV
BAMTKEI0MTU4QURGNDQ5NjY5Q0Y0MDk0NTlFNzc4QzYxMkU2QTA3MDgwOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCx+03MfxYCL6kbng8PYGDBvx7
94eQTKHIq5QwjXhHC2jymYAd+gRa80rVkWQJlgn+1l9mve+N2NdWtJAlYuLjsI+K
yHOJL9SQNU/IJqzBzsDQeUW64vy5pBizkk+BnlSLeQqhK/sSZW19T6+c0Q7+90bw
V181k+a+YhygDbRnPU/A6M3Yhv+gNZua2S7HbXPCdQ2/uVJDRmI2OKc78EgcTGw0
sDZaKE7bmhyKkqAeeXJvG3WyyDqjtN8MwrqFFc+1sMvZQbLXfRbX5tH84P2aSXSS
pyqzaGNtHfrekAD/m8FojrWqSoQnP7Adxjin4eHoXV1X/T+Xpj1CnyTgG9tJAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUtBWK30SWac9AlFnneMYS5qBwgJgwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNzU1Mi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoTlQAA
ijANBgkqhkiG9w0BAQsFAAOCAQEAHtvisKY5Gs5wxpWwB5vC2qP6BYTtt9TV2Sit
6f1p0585j4lnqIGoLI6uxsfIAKZWOk4f2u5Wp9KpalEmiOin4xhPy3w64ATAq+BZ
653Bj/FkEjcojKmHeSjrbxCC9CseM5aJKMlUAtoqmrCllhWeEbL75zP1aY65hq2N
eZQFm+vm+qw+92bos+nGnsX/OYFG5a22GoQyWSSamOlrCjiWLPLzpCR9s0VI4eso
32NDH2/xenxoS++GnX0Fi9PFzb4PEFpyha4xwkPL6n3vma4YUBwYADvBlXBakDch
j7o8c4eTvYF8S1Z4sOqxYIJqJboYXJjlX602FRh/FtC4CFvI5w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:49 2025 by rpki-client