Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1405.roa
File: AS1405.roa (raw, json)
Hash identifier: zB/QSDHqIpKcPPjqvAYSU5jAXbB3YFnSFshR9BWGT7E=
Subject key identifier: 66:43:FD:EF:35:5F:3F:97:5B:25:FE:B4:F6:EF:22:56:03:28:04:BD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1A7D23FB10CC18FDB96AD48D967274521456BBD5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1405.roa
Signing time: Mon 06 Jul 2026 05:25:35 +0000
ROA not before: Mon 06 Jul 2026 05:20:35 +0000
ROA not after: Mon 05 Jul 2027 05:25:35 +0000
asID: 1405
IP address blocks: 82.39.160.0/24 maxlen: 24
2a13:9500:1a2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7d:23:fb:10:cc:18:fd:b9:6a:d4:8d:96:72:74:52:14:56:bb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 6 05:20:35 2026 GMT
Not After : Jul 5 05:25:35 2027 GMT
Subject: CN=6643FDEF355F3F975B25FEB4F6EF2256032804BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:bb:ab:70:0a:14:c6:fd:a1:f7:f0:fa:1c:
79:89:01:5b:b8:7f:82:ad:dc:0b:3f:02:d5:79:74:
42:ad:3a:5a:e4:b5:fd:a2:5e:0a:d2:7f:3e:fe:12:
08:a8:55:18:d5:46:da:bc:6b:27:32:58:4b:f7:93:
19:0d:c5:fd:b8:12:be:f6:c5:c6:ab:da:73:76:f6:
ba:3a:22:61:01:70:1a:4a:9f:6f:c2:23:f8:b3:64:
8a:df:82:92:02:97:fa:38:87:ed:d4:c2:f5:5f:79:
9b:3d:b8:a5:47:cd:db:5d:2d:17:c9:78:25:d6:76:
0b:bc:77:77:6d:2a:0d:16:33:e8:b2:31:11:8a:fe:
89:af:cf:7a:b0:be:2d:8b:b7:a0:87:b3:dd:7c:21:
e0:72:45:46:70:c1:07:9e:59:31:ac:05:99:30:a0:
6f:29:53:db:a0:37:82:a7:76:ff:06:30:a8:5c:a0:
d9:bc:c2:93:db:98:fb:d5:3f:90:7e:64:64:e6:70:
bf:68:4e:4a:b6:08:32:84:ad:65:41:3c:39:00:0c:
65:fd:3c:70:c1:26:c1:85:ff:29:71:25:90:a3:56:
68:8e:70:02:52:1e:65:ca:d9:9a:9c:9c:f4:44:1d:
71:c6:d1:73:9e:a6:b8:70:36:2a:3c:ef:17:54:85:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:FD:EF:35:5F:3F:97:5B:25:FE:B4:F6:EF:22:56:03:28:04:BD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.160.0/24
IPv6:
2a13:9500:1a2::/48
Signature Algorithm: sha256WithRSAEncryption
0a:7f:61:c9:53:67:35:0f:e4:6d:b5:3c:a7:4a:d0:f4:36:77:
10:51:4d:d9:0b:60:88:37:a4:f0:1b:59:c5:04:a3:57:91:b3:
68:e0:84:c8:a4:cc:13:8c:00:d8:67:6e:9f:bc:00:97:57:e5:
cd:b1:f1:c7:05:a1:cf:30:15:ae:b5:5a:43:97:07:80:51:d4:
86:ff:7b:41:19:16:02:d7:7f:81:30:e9:8b:fe:fd:76:6c:7b:
f4:e8:8a:2f:92:c1:5f:bf:5d:d9:2b:b2:37:97:0b:ed:b5:25:
9e:60:1a:c0:21:e7:f5:21:fa:cf:b8:95:07:de:b7:b9:4a:0d:
7d:6f:94:d9:31:a6:85:f4:54:fa:7c:e8:69:5c:42:cf:87:d1:
7e:1b:12:5f:1f:2e:4d:f5:7a:c5:6b:11:12:46:9e:0d:ef:90:
9f:ff:c0:2b:4e:d3:5c:82:f5:d1:4b:e4:78:ba:89:fe:dc:22:
06:79:4a:df:72:cf:dd:6c:d3:80:4a:21:2c:58:4f:7e:9b:98:
bd:7f:7b:03:2e:53:38:03:a7:11:f1:75:13:af:0c:c9:47:9e:
43:11:62:93:1c:9d:f1:c2:52:58:8b:5c:9a:0f:db:ee:3f:72:
e6:39:28:62:04:ec:7c:a4:a7:7d:6d:97:cb:78:86:30:d7:78:
55:43:96:58
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIUGn0j+xDMGP25atSNlnJ0UhRWu9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MDYwNTIwMzVaFw0yNzA3MDUwNTI1MzVaMDMxMTAvBgNV
BAMTKDY2NDNGREVGMzU1RjNGOTc1QjI1RkVCNEY2RUYyMjU2MDMyODA0QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY87urcAoUxv2h9/D6HHmJAVu4
f4Kt3As/AtV5dEKtOlrktf2iXgrSfz7+EgioVRjVRtq8aycyWEv3kxkNxf24Er72
xcar2nN29ro6ImEBcBpKn2/CI/izZIrfgpICl/o4h+3UwvVfeZs9uKVHzdtdLRfJ
eCXWdgu8d3dtKg0WM+iyMRGK/omvz3qwvi2Lt6CHs918IeByRUZwwQeeWTGsBZkw
oG8pU9ugN4Kndv8GMKhcoNm8wpPbmPvVP5B+ZGTmcL9oTkq2CDKErWVBPDkADGX9
PHDBJsGF/ylxJZCjVmiOcAJSHmXK2ZqcnPREHXHG0XOeprhwNio87xdUhQ9DAgMB
AAGjggIZMIICFTAdBgNVHQ4EFgQUZkP97zVfP5dbJf609u8iVgMoBL0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTQwNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFInoDAP
BAIAAjAJAwcAKhOVAAGiMA0GCSqGSIb3DQEBCwUAA4IBAQAKf2HJU2c1D+RttTyn
StD0NncQUU3ZC2CIN6TwG1nFBKNXkbNo4ITIpMwTjADYZ26fvACXV+XNsfHHBaHP
MBWutVpDlweAUdSG/3tBGRYC13+BMOmL/v12bHv06IovksFfv13ZK7I3lwvttSWe
YBrAIef1IfrPuJUH3re5Sg19b5TZMaaF9FT6fOhpXELPh9F+GxJfHy5N9XrFaxES
Rp4N75Cf/8ArTtNcgvXRS+R4uon+3CIGeUrfcs/dbNOASiEsWE9+m5i9f3sDLlM4
A6cR8XUTrwzJR55DEWKTHJ3xwlJYi1yaD9vuP3LmOShiBOx8pKd9bZfLeIYw13hV
Q5ZY
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:31 2026 by rpki-client