Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7361.roa
File: AS7361.roa (raw, json)
Hash identifier: PJBhmKiNLtleqHPf3h/zWxGPqve3+l7BrCbWXvntaYk=
Subject key identifier: 57:D0:94:B2:4D:51:F8:6A:A5:A3:01:87:B3:6F:A8:C4:C3:0D:D8:30
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0466C8897024A6EB7F0599774CF3018EFB8D49BF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7361.roa
Signing time: Sat 10 Oct 2026 11:49:36 +0000
ROA not before: Sat 10 Oct 2026 11:44:36 +0000
ROA not after: Sat 09 Oct 2027 11:49:36 +0000
asID: 7361
IP address blocks: 82.38.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:66:c8:89:70:24:a6:eb:7f:05:99:77:4c:f3:01:8e:fb:8d:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 10 11:44:36 2026 GMT
Not After : Oct 9 11:49:36 2027 GMT
Subject: CN=57D094B24D51F86AA5A30187B36FA8C4C30DD830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:4e:f0:d1:ea:2e:07:1b:93:bd:07:6e:22:
fa:da:7b:33:e4:bd:0b:98:1b:c5:a5:10:0b:54:2a:
0f:51:55:33:ba:4d:bc:5d:9f:4e:25:cb:ab:9c:c9:
ec:8b:8e:73:3a:1a:9a:ca:9c:60:84:dd:44:17:08:
07:4b:41:d3:00:69:a6:6f:b1:a2:67:e7:d9:63:be:
95:2f:d4:02:a7:c7:4a:3b:9e:78:d1:43:f0:3c:d1:
a4:cd:5b:54:88:7b:2f:8d:6d:55:cc:8b:32:b9:0a:
e8:59:7b:0d:ba:32:1f:10:1f:13:44:5e:d4:5d:a0:
73:ea:24:1f:6e:0a:b3:7d:90:a1:38:9a:d4:46:c9:
79:ab:c9:f1:4c:58:cc:c3:4b:b7:b0:64:e4:62:04:
ab:c2:5e:43:8f:34:fa:ac:88:c0:59:3c:94:8d:3b:
32:ce:4a:66:0e:55:6f:24:61:56:39:5a:53:4c:47:
cf:5c:25:b7:4a:2a:31:e1:1e:1d:e3:ef:20:10:bc:
f3:c4:0f:bd:7e:c8:ff:94:e4:90:5a:bc:52:15:7a:
8a:8d:6e:47:bb:fa:bc:54:65:98:6d:7f:58:f4:5d:
81:61:bc:59:bd:56:17:1b:4f:ce:0d:78:52:f6:04:
da:6c:b9:75:5d:d4:7d:5b:79:7d:e1:4a:c4:b3:cb:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:94:B2:4D:51:F8:6A:A5:A3:01:87:B3:6F:A8:C4:C3:0D:D8:30
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7361.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:3f:b0:b2:18:1b:af:be:5b:e4:08:03:a3:47:00:44:a0:7a:
33:cc:dc:2e:43:63:86:38:3a:0f:ed:c6:c3:08:0d:72:71:c5:
4e:4f:07:e0:1d:f3:d8:50:30:52:75:e0:6a:2f:11:45:3a:c7:
77:51:b3:28:38:9c:da:55:d7:8f:16:61:51:e8:df:97:68:dc:
de:44:fc:fb:ca:a5:a2:2f:03:bc:ad:a3:78:33:12:ee:f0:11:
35:ba:b1:50:95:60:0e:0d:14:be:96:a3:af:af:cd:4f:85:cc:
93:2b:0f:f9:7a:86:57:1f:98:83:97:e2:cf:91:9c:90:8d:dd:
a9:5c:15:3c:e2:5a:65:d9:79:2b:b4:4e:7e:4a:60:e8:38:19:
4c:29:f7:ad:4a:28:dc:81:7d:bd:79:c3:ce:43:f3:ce:b6:dd:
d0:1c:62:e2:77:30:c5:38:0f:1b:aa:47:0f:a0:b9:d0:70:cb:
3b:f8:54:c1:86:8b:0a:6e:40:14:b9:58:ab:8a:37:0e:c3:c1:
32:4a:38:d8:34:d2:61:90:67:d8:20:e0:c7:a7:10:b3:69:86:
3d:19:72:73:98:e4:02:f8:8f:c1:83:3d:ee:23:c1:9a:71:82:
1d:3d:b1:fd:6a:eb:d8:34:cb:05:d4:d9:e4:9b:51:7d:8a:ac:
84:db:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 14:45:40 2026 by rpki-client