Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202282.roa
File: AS202282.roa (raw, json)
Hash identifier: GADslnala2j6uOD8mQNpQ/ShN0pXfgechdcBhtZcQp4=
Subject key identifier: C2:C4:EB:DA:BB:90:50:74:42:AF:E3:EA:C3:49:3D:27:C7:F7:E0:4A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1A8C68F363C8196C2EBFF96BE48E287ECB72C6BB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202282.roa
Signing time: Tue 13 Oct 2026 15:49:36 +0000
ROA not before: Tue 13 Oct 2026 15:44:36 +0000
ROA not after: Tue 12 Oct 2027 15:49:36 +0000
asID: 202282
IP address blocks: 82.39.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:8c:68:f3:63:c8:19:6c:2e:bf:f9:6b:e4:8e:28:7e:cb:72:c6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 13 15:44:36 2026 GMT
Not After : Oct 12 15:49:36 2027 GMT
Subject: CN=C2C4EBDABB90507442AFE3EAC3493D27C7F7E04A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:da:c8:30:6e:e5:4b:d6:54:1a:5a:58:20:
ad:fb:47:1a:fd:33:1b:c1:5d:cd:a6:cf:da:3e:05:
0e:44:c2:84:f0:46:88:ff:6b:6e:a0:aa:a9:43:23:
80:ce:01:ad:d7:85:3b:73:c1:2a:a8:ad:71:eb:6a:
9d:52:49:7e:49:b6:4c:a9:f3:33:fa:43:65:0e:ae:
f7:27:7e:f2:87:ad:bf:ee:27:96:a8:9f:25:c8:8d:
7a:f0:2d:b4:74:7f:e6:50:e0:6b:aa:41:d9:63:2c:
da:fd:f2:04:4c:58:10:3f:80:d5:76:51:eb:4f:3e:
6c:77:fb:44:ca:a7:91:a5:cf:89:5e:84:de:26:f5:
4e:e8:12:79:3a:07:78:d1:27:81:28:bc:56:24:15:
93:fb:c5:5f:a7:35:ba:c2:1f:d0:d3:de:e4:bf:01:
ad:08:5a:52:3d:67:dc:73:79:07:23:9b:71:ec:99:
33:4d:43:41:5e:90:a0:fc:95:a8:aa:c1:3e:1e:e9:
2a:0e:34:17:bd:01:d5:54:74:8b:48:56:17:8e:d3:
99:8c:74:c5:ec:77:dd:b3:7f:46:54:b2:66:29:b0:
4c:3e:9e:b2:4e:f8:19:77:ce:7d:f1:0e:5c:1b:f4:
e1:3f:73:26:24:6e:04:ac:9e:d0:06:dc:f2:eb:d5:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C4:EB:DA:BB:90:50:74:42:AF:E3:EA:C3:49:3D:27:C7:F7:E0:4A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202282.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.0.0/18
Signature Algorithm: sha256WithRSAEncryption
75:e3:8b:1b:5a:d2:9b:b0:5a:62:9a:a6:27:8e:72:30:de:00:
c0:24:e7:62:12:c2:be:ad:c9:7c:12:57:ca:54:61:66:82:59:
a3:8a:34:41:54:ca:ce:d3:f6:22:96:2c:c5:1f:a8:e7:bc:e9:
4b:02:5e:47:8e:9b:de:1b:67:ea:7b:9e:be:4b:35:4b:df:4a:
1e:98:8a:12:ba:b0:4b:fb:81:ac:19:10:dc:3d:41:84:d8:1b:
63:d3:56:ca:e1:0b:a6:77:3c:2a:93:a0:e0:43:f3:2b:81:73:
b9:47:eb:bb:df:64:69:90:53:61:d2:b8:4d:96:6c:52:01:c5:
89:40:c5:69:95:f5:a5:6b:a3:09:bf:af:00:69:dd:33:aa:3a:
41:54:52:31:32:ff:a5:ce:62:c7:04:7d:7b:be:ce:36:19:9f:
91:22:68:34:a8:73:e9:d4:8a:28:1b:03:d5:b5:4e:33:8c:c2:
24:fe:5c:e7:a6:f1:35:92:42:17:7a:3a:1b:cc:ff:31:36:c9:
ec:7b:2e:70:e1:5e:b0:eb:49:0d:2a:03:19:a8:9c:59:83:4f:
bd:a7:2a:b6:fc:c7:2c:dd:1f:35:69:92:00:90:0f:d6:54:4c:
ba:a9:42:bf:bc:78:29:c6:82:8a:a2:34:37:f4:18:18:74:82:
18:5b:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 21:33:14 2026 by rpki-client