Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201386.roa
File: AS201386.roa (raw, json)
Hash identifier: axYoH2nOC+gXIadcPaTrrd0hZghP+eIIK8/lWqdTPyo=
Subject key identifier: 6F:6D:07:20:6F:6D:15:EF:4F:5F:9E:54:6A:DE:B8:0F:89:E2:48:7B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3BDCCFDDA389CD2BFA01CBF88F4C53B8A09F2637
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201386.roa
Signing time: Sat 02 May 2026 11:08:44 +0000
ROA not before: Sat 02 May 2026 11:03:44 +0000
ROA not after: Sat 01 May 2027 11:08:44 +0000
asID: 201386
IP address blocks: 82.39.110.0/24 maxlen: 24
84.75.146.0/24 maxlen: 24
178.83.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:dc:cf:dd:a3:89:cd:2b:fa:01:cb:f8:8f:4c:53:b8:a0:9f:26:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 2 11:03:44 2026 GMT
Not After : May 1 11:08:44 2027 GMT
Subject: CN=6F6D07206F6D15EF4F5F9E546ADEB80F89E2487B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:cb:7e:42:02:e4:32:81:dd:b8:48:42:4a:
05:39:9d:09:51:e0:c7:64:c3:93:63:6a:0b:02:af:
1c:ec:a8:89:0b:ed:19:d3:79:04:98:33:67:2a:87:
20:1a:48:de:a1:b7:e1:59:6b:e4:be:4b:1e:04:3e:
57:5d:ac:1f:54:e1:b7:12:f7:57:82:4e:1c:d0:96:
86:dc:de:99:7b:38:c9:de:fc:ee:99:86:c2:53:16:
8c:15:76:e6:d2:72:0f:0a:52:4d:da:72:46:c1:76:
5f:7f:44:29:4b:5d:52:8f:a9:83:d5:52:f0:8d:fd:
2b:f4:1f:96:0b:d2:11:75:7b:a7:db:53:1f:8e:58:
7f:1c:10:59:d1:54:d2:39:6c:09:de:89:f3:fc:19:
0d:29:85:c2:fc:15:b2:45:10:22:01:05:e6:da:01:
c2:97:3d:bc:d3:c7:aa:46:a4:d4:a8:f9:ea:b3:25:
23:88:75:3c:b8:4a:22:7d:82:f7:74:71:0d:5b:c7:
18:67:9d:f5:cd:87:57:a7:a2:9f:d4:8c:96:d8:e1:
a5:36:6a:51:c2:70:46:f4:f9:13:6e:03:bc:46:45:
84:57:5c:91:07:56:58:8a:c8:89:d8:ed:3d:f2:08:
bf:4f:25:f3:d7:7f:b5:c3:7a:1b:c5:04:80:07:99:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6D:07:20:6F:6D:15:EF:4F:5F:9E:54:6A:DE:B8:0F:89:E2:48:7B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.110.0/24
84.75.146.0/24
178.83.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:53:bf:db:e2:69:fa:a5:85:2c:05:02:ca:a1:a3:be:87:f5:
5f:aa:ae:38:83:31:3a:2d:5a:b4:b0:30:f0:97:93:f7:29:9f:
83:19:b5:0b:f5:be:58:ba:c5:28:cd:5d:4a:af:31:b6:d5:6d:
8e:57:fc:aa:73:4e:6a:6e:c8:05:18:d3:9b:47:2c:ec:9b:2e:
b3:0a:9f:dd:c0:c6:ac:91:e5:b4:75:88:60:34:e2:a0:ff:c2:
ab:28:78:3f:ae:96:3c:d7:8f:40:11:95:9a:80:e0:80:f7:5f:
e8:55:f1:c3:ac:b4:5e:74:0f:1e:44:15:2e:b6:29:9b:58:ef:
5c:99:04:c2:c4:b8:cc:49:f0:00:0d:ab:3a:aa:11:08:05:69:
82:3a:b4:7a:1a:cb:94:67:8e:90:c2:19:41:af:25:a8:d6:fc:
77:36:5b:c2:7b:39:33:40:59:58:bb:25:bb:b2:f9:bb:83:fe:
31:d3:22:bf:65:5b:26:d0:72:ca:b5:2a:20:65:3d:35:f2:73:
11:53:25:95:62:30:3b:da:09:44:51:04:50:7b:0e:c1:ce:23:
cb:5f:f6:c1:eb:19:7d:e0:55:d3:ce:c0:4a:1d:cd:16:16:d7:
9a:e8:76:7c:72:fe:2e:74:9a:79:0b:85:84:b4:0f:8b:45:0a:
ab:da:8c:48
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUO9zP3aOJzSv6Acv4j0xTuKCfJjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MDIxMTAzNDRaFw0yNzA1MDExMTA4NDRaMDMxMTAvBgNV
BAMTKDZGNkQwNzIwNkY2RDE1RUY0RjVGOUU1NDZBREVCODBGODlFMjQ4N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCuMt+QgLkMoHduEhCSgU5nQlR
4Mdkw5NjagsCrxzsqIkL7RnTeQSYM2cqhyAaSN6ht+FZa+S+Sx4EPlddrB9U4bcS
91eCThzQlobc3pl7OMne/O6ZhsJTFowVdubScg8KUk3ackbBdl9/RClLXVKPqYPV
UvCN/Sv0H5YL0hF1e6fbUx+OWH8cEFnRVNI5bAneifP8GQ0phcL8FbJFECIBBeba
AcKXPbzTx6pGpNSo+eqzJSOIdTy4SiJ9gvd0cQ1bxxhnnfXNh1enop/UjJbY4aU2
alHCcEb0+RNuA7xGRYRXXJEHVliKyInY7T3yCL9PJfPXf7XDehvFBIAHmehjAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUb20HIG9tFe9PX55Uat64D4niSHswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAxMzg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUidu
AwQAVEuSAwQAslOmMA0GCSqGSIb3DQEBCwUAA4IBAQBdU7/b4mn6pYUsBQLKoaO+
h/Vfqq44gzE6LVq0sDDwl5P3KZ+DGbUL9b5YusUozV1KrzG21W2OV/yqc05qbsgF
GNObRyzsmy6zCp/dwMaskeW0dYhgNOKg/8KrKHg/rpY8149AEZWagOCA91/oVfHD
rLRedA8eRBUutimbWO9cmQTCxLjMSfAADas6qhEIBWmCOrR6GsuUZ46QwhlBryWo
1vx3NlvCezkzQFlYuyW7svm7g/4x0yK/ZVsm0HLKtSogZT018nMRUyWVYjA72glE
UQRQew7BziPLX/bB6xl94FXTzsBKHc0WFtea6HZ8cv4udJp5C4WEtA+LRQqr2oxI
-----END CERTIFICATE-----
Generated at Sun May 3 21:20:07 2026 by rpki-client