Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: Exv+cdFnkfSaWrCIFCv7PSYWaeKsKQQyhgrCfa67pT0=
Subject key identifier: EA:64:DE:2E:89:0E:64:DD:D5:F2:9D:41:D7:05:8D:C8:C1:45:98:5F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 61683F9E46CBC82D0F698E0069FEFC57E3C46295
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401362.roa
Signing time: Sun 11 Oct 2026 11:46:33 +0000
ROA not before: Sun 11 Oct 2026 11:41:33 +0000
ROA not after: Sun 10 Oct 2027 11:46:33 +0000
asID: 401362
IP address blocks: 84.75.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:68:3f:9e:46:cb:c8:2d:0f:69:8e:00:69:fe:fc:57:e3:c4:62:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 11 11:41:33 2026 GMT
Not After : Oct 10 11:46:33 2027 GMT
Subject: CN=EA64DE2E890E64DDD5F29D41D7058DC8C145985F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:0e:d8:90:61:9a:c2:5b:0d:92:8a:00:55:
0b:fb:34:32:20:7c:e6:57:87:f9:84:3a:d9:b8:5c:
d6:39:44:bd:c1:6f:ed:9c:ba:68:0d:1b:61:b6:77:
0f:03:0d:fb:fb:4a:c2:e4:67:bf:cc:5d:f4:2e:79:
92:47:72:2c:b0:5c:54:29:c6:c6:b5:4d:67:78:cc:
46:59:34:65:92:99:9a:f5:7c:47:2c:4e:31:12:1f:
b6:d3:b7:4c:bc:4b:05:ef:8c:6f:43:49:6d:f3:88:
bf:c4:18:99:66:a2:8d:76:bb:c1:ef:72:ff:ef:48:
a8:fb:4d:ff:9b:6a:c0:4d:e6:e2:cd:9a:bc:24:7c:
87:15:0c:ab:d9:ec:95:59:c7:23:ae:45:15:f5:e0:
58:e6:4a:dc:76:46:48:3c:a1:cf:c7:93:fe:66:74:
34:bd:96:17:8a:b3:fa:52:a7:3b:d0:30:a4:e8:45:
78:78:f9:82:99:ac:6d:82:7c:93:52:31:c1:ba:7f:
86:e0:17:96:4b:84:d0:10:07:71:d9:51:e9:21:47:
4b:5b:9d:26:a7:98:be:b6:19:71:5a:87:50:e0:12:
65:a4:0b:21:1d:a8:0d:c0:f9:2d:58:9d:8e:a1:fc:
38:a3:9e:90:a4:cf:85:94:f9:54:dd:5c:91:c0:0d:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:DE:2E:89:0E:64:DD:D5:F2:9D:41:D7:05:8D:C8:C1:45:98:5F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8e:91:50:4e:3a:2c:5f:02:13:c4:2a:2b:fe:8b:6b:2d:02:
3b:da:23:fc:66:d3:5b:e6:c9:ed:04:f8:4a:24:7f:33:e1:ca:
cc:89:44:c8:07:55:04:1f:93:75:5b:fd:30:5e:e5:0f:54:b5:
34:70:1a:bb:20:08:7e:43:c6:aa:42:e6:5a:d3:20:7d:f7:58:
a5:f3:85:58:04:7a:4f:c4:12:01:43:2f:4b:cb:d0:8e:f9:bf:
33:3e:7f:82:32:13:de:50:61:d7:be:ba:60:e3:45:74:6f:13:
a8:6a:79:ad:41:ec:e3:b4:b7:fc:c6:66:14:20:84:27:2a:dc:
db:63:0b:4e:bd:a4:5e:fa:ac:68:f6:f0:41:33:cb:5f:8b:09:
e2:bb:54:b2:dc:37:ba:9e:b0:34:fd:8c:6b:24:b4:96:b7:b7:
a0:8c:62:6e:73:72:c0:4a:6a:a3:ea:9b:7e:3d:b2:70:a4:fd:
ee:bb:a7:fc:ea:7d:04:67:c5:7d:dc:3c:85:01:34:e8:99:9c:
b0:56:aa:d7:76:23:1c:a1:78:a4:82:83:4d:da:80:e1:35:98:
72:dd:d1:90:b5:79:29:e1:82:e4:a5:33:7a:67:50:8d:06:12:
f9:04:f7:e4:0b:52:a7:9e:eb:10:c6:ce:76:8f:66:5c:4c:ec:
fc:91:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:54:40 2026 by rpki-client