Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: Xj9I3ihCK3VneE+8wbzJysevpgl/xOYSkCC4Wxc3CTo=
Subject key identifier: DF:44:12:05:9C:5F:F3:10:E7:57:3F:18:16:78:0F:DC:70:47:7D:24
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7103998DAC9E4CE05A0D88CBD90A6AB76CFB0BB8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
Signing time: Sat 03 Oct 2026 16:21:08 +0000
ROA not before: Sat 03 Oct 2026 16:16:08 +0000
ROA not after: Sat 02 Oct 2027 16:21:08 +0000
asID: 402265
IP address blocks: 82.24.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:03:99:8d:ac:9e:4c:e0:5a:0d:88:cb:d9:0a:6a:b7:6c:fb:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 3 16:16:08 2026 GMT
Not After : Oct 2 16:21:08 2027 GMT
Subject: CN=DF4412059C5FF310E7573F1816780FDC70477D24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:b3:6d:3e:49:f1:d0:39:63:42:8b:63:35:
4b:7e:9b:71:f0:ec:06:59:05:a7:c6:cc:6f:f3:a8:
50:4b:d6:46:05:de:1b:9f:d7:d9:20:3d:13:3e:80:
9c:0d:02:a9:cf:dd:61:54:bf:53:54:a3:f4:f2:f2:
7c:31:cc:4f:3b:23:f2:3b:11:58:a8:e3:59:da:d9:
7d:6e:ac:fa:d0:4b:a2:41:67:b1:9d:08:81:78:94:
2d:be:d1:6c:c4:1e:24:b0:df:2d:70:39:f2:fc:f8:
73:cb:94:be:b9:01:12:8a:af:fb:18:62:15:f5:69:
b6:df:32:ec:22:91:b2:e8:ab:b3:e9:bc:5d:b2:ea:
a7:a7:06:fb:0e:80:64:aa:e9:0d:05:f3:4c:62:6e:
0c:7c:a6:1a:e4:b5:5f:4e:38:b6:a5:db:24:95:99:
24:6d:fc:be:70:ec:53:e6:2e:1a:ee:16:dd:92:24:
f1:17:26:f0:58:9a:ae:2a:32:0d:94:41:72:6d:00:
28:ca:1b:cc:47:da:79:3e:80:98:11:95:a0:15:4b:
70:5d:1e:24:fe:2e:be:48:6d:a8:e3:2e:fb:a5:4c:
0e:8e:1e:24:8b:d1:47:3c:84:b4:b0:ba:1e:e5:11:
62:8f:00:06:4b:a6:d1:0b:5a:2b:05:c9:22:3e:6a:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:12:05:9C:5F:F3:10:E7:57:3F:18:16:78:0F:DC:70:47:7D:24
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.83.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6e:51:43:5f:3f:fc:3b:23:d0:75:f2:1d:a7:06:39:25:44:
c0:7d:26:03:7c:c8:ff:37:cb:f3:50:76:68:d7:a7:1f:bc:f9:
74:7f:bc:4b:bb:2c:4e:d4:67:dc:d2:39:88:34:66:86:96:eb:
1e:c4:03:f3:91:10:21:20:cb:de:85:f4:7e:d7:58:56:56:cd:
b0:c1:4c:f2:21:e7:ea:4d:68:0f:b5:9f:46:ad:bd:fc:b9:e3:
14:38:c7:82:b2:f8:c4:44:36:83:c9:30:79:04:3a:20:1d:8d:
21:34:b4:da:15:38:97:11:a1:d9:a0:da:45:8a:c0:24:2e:21:
5e:3d:6a:41:ef:fe:ea:dc:11:9c:76:ca:04:1f:0d:74:51:e0:
57:f1:0b:14:e4:8d:3e:30:b0:ea:cb:19:a3:e4:a0:39:8d:e5:
a2:20:a6:87:99:fc:34:6f:e4:bb:32:f1:37:dd:81:f0:29:8f:
9b:3d:b8:ed:85:59:13:7d:74:1d:f9:9a:fe:93:c0:ba:c7:c0:
02:24:ff:9e:dc:f7:7a:90:ee:b9:8e:52:7d:f9:0e:83:3b:34:
11:56:3d:cc:57:c0:74:22:27:88:36:f1:8b:78:4e:93:40:5f:
f6:2b:6b:05:96:f8:b5:36:c6:b9:3d:bd:dc:4f:70:7f:02:09:
54:46:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:12 2026 by rpki-client