Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401673.roa
File: AS401673.roa (raw, json)
Hash identifier: vvilKczbfA0bILeiOFD59WWa6wCuCufV9HuYq1QuJOs=
Subject key identifier: D1:0B:A3:FE:32:98:1F:47:43:D4:60:E5:22:C8:86:15:B9:EA:A0:62
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4FDD4634A2B2AABD326F2AB66A0221CB91E721CC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401673.roa
Signing time: Thu 01 Oct 2026 15:49:35 +0000
ROA not before: Thu 01 Oct 2026 15:44:35 +0000
ROA not after: Thu 30 Sep 2027 15:49:35 +0000
asID: 401673
IP address blocks: 82.38.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:dd:46:34:a2:b2:aa:bd:32:6f:2a:b6:6a:02:21:cb:91:e7:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 1 15:44:35 2026 GMT
Not After : Sep 30 15:49:35 2027 GMT
Subject: CN=D10BA3FE32981F4743D460E522C88615B9EAA062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:2f:13:13:e6:f6:f1:81:5f:76:ca:96:78:
3d:45:7c:32:fa:8b:38:32:6b:4f:3d:9a:d2:9b:7b:
23:ff:d2:34:be:25:fc:50:0d:30:9a:ef:a4:8a:a0:
8a:7d:ae:b9:a7:fe:bb:4a:3e:bb:70:e7:bb:7d:99:
6b:5e:10:b5:50:e9:10:d1:c6:df:34:83:9a:3e:cb:
96:8b:3c:5c:e6:32:40:69:c0:6b:18:bd:81:59:bc:
b8:a5:e6:8e:a9:f4:b8:53:37:72:d9:12:0d:40:d2:
e3:22:f7:9a:17:eb:5b:2a:b2:17:51:4d:b6:f7:a0:
f4:27:b2:5e:25:5e:49:7e:3b:d0:eb:6a:40:a0:7f:
50:de:14:9c:62:b6:69:8f:d0:12:50:e9:5c:ad:38:
e5:44:3f:d2:70:6f:b5:c1:8d:2c:1e:7a:5d:64:e5:
b1:51:75:89:eb:63:67:cb:f5:07:95:f6:c4:0e:32:
7a:20:91:a0:37:eb:3d:9c:0c:21:c0:e7:d6:10:c3:
30:84:0e:ad:92:5e:ee:84:4e:8b:d3:79:5b:c8:67:
44:12:b7:74:0a:4c:fb:77:01:47:02:75:71:2b:66:
9c:0a:9e:b6:31:85:01:46:a5:a4:50:45:a5:17:65:
b6:b8:48:ec:29:ca:57:a5:db:a9:b0:99:59:05:07:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0B:A3:FE:32:98:1F:47:43:D4:60:E5:22:C8:86:15:B9:EA:A0:62
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.216.0/23
Signature Algorithm: sha256WithRSAEncryption
49:94:af:5e:66:e7:dd:82:16:cb:da:76:91:73:b3:b5:0e:f3:
71:36:ea:e1:05:54:fb:3e:61:fe:ad:66:b4:83:70:19:28:32:
fc:b3:46:11:9c:44:66:2d:5c:00:4c:b8:ed:1a:8f:81:c3:bc:
4d:40:e7:4c:e3:7e:73:de:c3:5d:82:66:32:9b:e8:6e:92:72:
81:19:64:1b:50:e9:30:b3:bd:b9:74:25:d4:10:e8:32:38:b1:
00:f7:05:65:32:06:21:3c:98:c7:8f:b1:25:a3:d7:a0:3e:b2:
20:da:92:38:a8:0d:6d:86:22:61:9b:20:5d:59:fa:79:72:aa:
45:5f:68:96:4f:ee:84:b2:1b:2c:c2:ea:ac:57:d2:e3:10:9d:
68:16:7e:9a:a2:8e:f8:3f:c2:24:8e:7a:7e:80:f2:67:c2:f5:
4c:0e:fc:be:70:f6:19:f2:ae:e4:68:23:30:e9:08:c4:24:a9:
fe:bb:4e:83:4a:0f:6d:af:f6:0e:0a:ec:b7:b4:01:8a:47:3b:
92:a8:a4:99:9b:ff:3d:01:3c:13:93:49:37:72:34:53:da:97:
5d:d5:03:ba:fa:cb:5c:7e:cc:df:2b:25:c4:1b:b0:1f:cc:04:
03:c3:86:79:7a:ec:0b:f8:50:3a:08:a8:0d:1f:0d:b5:56:6b:
83:29:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 04:51:58 2026 by rpki-client