Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402390.roa
File: AS402390.roa (raw, json)
Hash identifier: HPHDsiukzul6kta8B+iObnnD4CkTpqVbpnTx7p4hFXQ=
Subject key identifier: D0:B6:CD:A0:F8:C7:35:05:0B:31:3F:63:67:03:CF:AB:00:60:4D:55
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 18F29380F22E153660594A3143833786EE3783D2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402390.roa
Signing time: Mon 12 Oct 2026 01:59:03 +0000
ROA not before: Mon 12 Oct 2026 01:54:03 +0000
ROA not after: Mon 11 Oct 2027 01:59:03 +0000
asID: 402390
IP address blocks: 82.39.145.0/24 maxlen: 24
82.39.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f2:93:80:f2:2e:15:36:60:59:4a:31:43:83:37:86:ee:37:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 12 01:54:03 2026 GMT
Not After : Oct 11 01:59:03 2027 GMT
Subject: CN=D0B6CDA0F8C735050B313F636703CFAB00604D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:dd:2a:28:8e:69:4b:7d:f3:be:0b:ff:83:ae:
68:85:5d:6d:f8:cb:14:82:d6:00:81:79:87:2f:d1:
ec:ef:59:f3:3b:36:ca:f2:e2:6a:35:09:7f:bd:97:
ca:34:8e:3b:8c:84:06:8c:16:de:48:b8:39:67:47:
89:d2:d1:f1:dc:50:7c:ea:b8:64:ed:df:78:c2:d1:
82:af:7d:65:2c:8b:28:fa:f5:f2:fb:d4:ce:9a:1d:
84:78:cb:73:5e:8c:33:48:ea:89:79:6a:b2:81:b0:
61:dd:a6:8e:6b:a6:e0:60:69:a7:79:bc:f7:ec:f5:
dd:b2:64:fa:ce:d5:ee:d5:10:66:c7:ac:3d:27:b1:
12:27:64:8f:cd:58:36:a2:99:e5:8f:13:8e:97:d9:
24:6d:6e:6c:32:ce:1f:3d:6f:28:53:c9:56:75:05:
57:a9:2b:bd:ff:b3:70:18:45:a5:47:c0:b8:2b:93:
e4:72:1a:ec:b8:c6:39:c3:01:52:6e:b2:19:75:b9:
99:c1:bf:1e:b1:6d:6c:51:96:f6:c9:c6:e1:d1:9f:
be:dd:e6:77:8f:8b:ff:05:88:ae:51:4c:6f:ac:f4:
9d:41:f0:ec:75:ac:7d:81:30:f3:17:9b:0a:d1:61:
b4:7a:15:ee:d4:23:23:8e:af:76:bf:82:ac:c8:15:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:CD:A0:F8:C7:35:05:0B:31:3F:63:67:03:CF:AB:00:60:4D:55
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.145.0/24
82.39.195.0/24
Signature Algorithm: sha256WithRSAEncryption
19:94:fa:db:d4:e0:73:3e:37:78:d7:68:77:11:78:10:e8:c3:
ce:0b:eb:c5:53:32:6a:0b:4e:5f:9b:49:f8:8e:d6:69:1c:46:
ba:a4:7b:b7:6c:5a:44:c1:70:39:eb:51:3f:bf:1a:6e:8e:f3:
11:c8:1a:71:a5:c3:0f:09:8f:76:75:8c:be:f0:d5:d5:fa:80:
58:7f:3e:7f:8f:c8:3b:92:5e:f1:7d:01:05:98:68:73:94:fb:
f1:91:68:ac:3d:eb:23:e9:58:17:5b:86:34:41:17:fd:a0:2a:
c6:5f:fe:64:76:d4:57:42:c6:01:0f:43:5f:e1:45:99:db:07:
33:ae:ff:7d:aa:61:6b:c2:83:28:f8:b6:f4:42:1d:cb:74:18:
04:9b:24:d5:8e:15:43:b3:11:2d:64:53:83:0d:e1:57:12:6a:
45:e5:79:6a:4c:ae:ac:05:04:2c:68:7f:a6:30:d8:a1:7e:9d:
30:08:4e:22:ca:f6:85:22:df:ec:36:bc:99:0c:85:ab:16:c9:
60:cd:73:41:fb:8b:f9:9d:da:7e:48:e5:f9:d0:d1:3e:06:dc:
68:11:1f:17:7c:70:c8:8f:d8:52:62:95:27:34:77:f1:c2:43:
1c:b9:43:fd:ef:00:d8:63:4e:4c:71:2e:33:5c:68:1b:3e:09:
51:ed:74:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:13:02 2026 by rpki-client