Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS38854.roa
File: AS38854.roa (raw, json)
Hash identifier: xI7JCGUIurBZpYhE+1o4oB1rnphyKk3lHYhNqSRlPJI=
Subject key identifier: C0:E8:91:C1:4E:B1:1D:4B:22:08:BE:F2:BC:89:28:51:55:66:3C:7B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 58CE55666603C410B453FC1FDE630AB6C4009894
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS38854.roa
Signing time: Thu 17 Sep 2026 08:52:06 +0000
ROA not before: Thu 17 Sep 2026 08:47:06 +0000
ROA not after: Thu 16 Sep 2027 08:52:06 +0000
asID: 38854
IP address blocks: 82.39.193.0/24 maxlen: 24
82.39.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ce:55:66:66:03:c4:10:b4:53:fc:1f:de:63:0a:b6:c4:00:98:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 17 08:47:06 2026 GMT
Not After : Sep 16 08:52:06 2027 GMT
Subject: CN=C0E891C14EB11D4B2208BEF2BC89285155663C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:e6:1d:8a:c6:16:c0:68:cb:77:f1:64:89:
4f:5d:d8:70:da:eb:9a:38:65:5b:91:2a:e3:ac:11:
60:96:f3:bb:4e:1d:3d:74:b1:00:3f:3e:86:63:09:
af:95:49:95:d8:4b:4d:75:de:ef:87:5b:63:65:e6:
34:05:e1:b9:97:2a:11:db:2c:3e:5c:2e:0c:cf:14:
b6:90:77:44:4f:9a:d9:47:6b:84:d0:56:90:28:1e:
7a:a0:05:85:38:7b:19:94:75:5f:f3:34:fc:29:83:
4f:2b:eb:60:b5:35:55:8f:ff:47:56:51:9f:b8:ac:
23:bd:e3:18:e0:c8:48:87:6b:3d:17:1f:e4:f9:06:
31:c8:76:7e:bb:8d:c0:5b:21:c5:d9:65:0e:7b:67:
31:6b:42:10:50:f9:6d:87:81:24:a4:da:72:9b:87:
f3:68:71:e2:ea:04:4b:8d:9c:41:5c:01:d2:51:e1:
fa:fc:44:44:ed:5f:6d:8f:b9:a4:04:71:fb:a9:2a:
c4:d4:fa:6c:f5:7b:30:12:ea:12:a9:9e:36:ed:c6:
61:84:e7:1e:82:af:02:8d:c5:78:5e:c7:68:21:c1:
05:24:9b:11:8f:41:82:5d:87:a6:83:12:8b:68:00:
f1:da:df:81:18:c5:ed:60:13:fa:0e:40:ad:c8:f5:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E8:91:C1:4E:B1:1D:4B:22:08:BE:F2:BC:89:28:51:55:66:3C:7B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS38854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.193.0-82.39.194.255
Signature Algorithm: sha256WithRSAEncryption
05:ed:00:67:96:a4:06:88:d5:c3:52:c6:e2:18:79:be:a1:52:
f5:75:25:0a:58:90:53:e8:85:70:26:31:a3:d6:bb:35:92:52:
96:92:f9:88:05:55:8c:13:d4:2a:bc:2c:b1:e0:e3:a1:2f:65:
22:5c:d1:ef:18:45:23:e4:e7:53:2c:cd:6a:d8:3b:8e:8b:6e:
59:89:41:2d:69:28:f0:9d:fa:58:ce:a5:60:bc:74:08:2e:92:
9a:63:a0:4b:f4:a2:50:2a:f4:0c:ff:71:ed:ba:75:a9:6c:c5:
37:cd:3f:58:bc:07:6e:6e:6a:f5:8f:3f:a0:d7:40:f6:de:2c:
eb:1b:93:56:7b:db:58:31:74:31:15:f4:3a:25:c3:29:87:04:
9f:77:21:76:a6:18:a8:aa:dd:bc:70:82:b2:a3:55:e1:5c:94:
95:fe:29:12:2f:23:df:4b:86:f8:91:df:a0:77:3c:80:4f:a8:
9e:9a:8a:c8:5c:e6:3d:7f:66:69:7f:2d:b0:5e:82:71:c9:e8:
c9:ca:17:0c:61:90:73:a2:ab:b4:71:98:ba:9e:26:29:45:82:
2c:d3:5a:03:6f:72:b9:63:43:9f:cd:50:b5:17:58:67:be:53:
34:3d:7e:74:59:4a:12:0b:89:cf:45:18:bb:5d:1e:3f:f4:66:
18:55:f1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:07 2026 by rpki-client