Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS393406.roa
File: AS393406.roa (raw, json)
Hash identifier: 0ADPsEDOKi/EzirlPZT5iwDDctFnwOmApyWpQ+OVotM=
Subject key identifier: 53:72:07:0D:D9:F1:2A:53:7A:9D:B5:95:0C:D4:99:E0:7D:45:FC:18
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 19D7559E9DCF0185E60C09C6D59DC5FFC8299390
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS393406.roa
Signing time: Wed 29 Jul 2026 03:08:44 +0000
ROA not before: Wed 29 Jul 2026 03:03:44 +0000
ROA not after: Wed 28 Jul 2027 03:08:44 +0000
asID: 393406
IP address blocks: 82.22.42.0/24 maxlen: 24
82.24.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d7:55:9e:9d:cf:01:85:e6:0c:09:c6:d5:9d:c5:ff:c8:29:93:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 29 03:03:44 2026 GMT
Not After : Jul 28 03:08:44 2027 GMT
Subject: CN=5372070DD9F12A537A9DB5950CD499E07D45FC18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:15:34:37:75:ff:13:a0:90:b7:d1:2f:6c:
3f:5e:48:b8:9d:e6:78:64:90:13:ad:6d:ec:36:38:
25:e0:7a:a6:99:ce:1b:7e:34:7d:70:4d:25:84:25:
fb:1f:fa:3a:50:17:95:89:3e:09:01:2e:c6:04:c9:
17:13:a2:d6:e7:02:b8:6c:f2:db:3b:30:c7:5b:61:
f5:bd:7b:86:b9:5d:fe:06:ff:ec:69:a5:df:e4:79:
82:3e:7d:df:9b:a9:f9:3a:d5:53:3b:a4:a2:86:2a:
67:35:96:26:60:7a:a6:b3:8c:73:fb:c9:b6:5b:bd:
f6:09:38:aa:09:60:80:97:7f:29:ff:7d:7d:85:20:
9b:28:9a:79:8f:32:fd:4d:d8:ef:32:e6:62:79:62:
f4:a2:ae:b3:19:f9:86:8e:17:2a:ef:27:6d:57:c1:
89:e2:ad:1a:43:be:26:a0:a4:2c:c7:57:96:53:b1:
be:e6:bc:9d:4b:e4:40:fa:28:b2:c6:0f:c1:70:a8:
77:eb:f3:6c:5f:fe:65:a5:60:72:52:a7:0a:44:e7:
eb:76:b6:96:dd:87:f9:6f:48:8f:30:05:cf:66:53:
09:54:30:34:f7:73:7d:fb:6b:31:8a:99:aa:e6:ed:
2c:98:1c:fd:71:61:03:0a:2a:60:4e:83:07:d5:1c:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:07:0D:D9:F1:2A:53:7A:9D:B5:95:0C:D4:99:E0:7D:45:FC:18
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS393406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.42.0/24
82.24.108.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3d:87:30:cd:f5:6b:21:af:4f:f6:3d:24:2e:4c:93:2a:d4:
f0:5b:9c:69:ab:2f:c2:cf:b3:58:f4:36:18:62:67:71:f9:b5:
16:9a:78:1c:e9:25:d0:5a:b8:b4:b1:9e:ba:51:84:c7:75:6e:
c5:18:9f:d0:90:72:64:8e:5b:42:86:b7:99:bb:d0:22:2c:50:
31:ed:72:8e:8d:e7:cb:0b:52:53:36:76:4f:77:c3:7b:7b:c2:
0e:72:11:4e:70:a6:bc:eb:89:7e:ff:79:7e:16:b6:0e:91:ba:
d1:bf:79:1f:c2:48:d7:d1:86:a1:15:0e:f9:c3:40:33:8f:5c:
a7:e3:21:87:59:7e:f9:0f:8f:b4:0d:84:03:d2:1b:15:f6:bd:
af:eb:a3:a5:77:ca:54:c7:28:23:0e:65:59:8e:86:b6:6f:b6:
f3:69:38:3a:fe:d6:09:02:ae:38:fd:88:62:50:c4:bc:a1:19:
ef:1c:8e:ce:33:b4:7c:6a:33:91:2a:76:93:eb:21:fb:f6:df:
b3:36:38:79:14:c5:4b:8e:41:5f:5f:52:3e:b0:52:c7:c9:9e:
fd:4b:83:f3:99:f1:bb:d2:b1:4b:2a:05:6d:59:67:e7:ea:68:
eb:0a:0d:54:5c:c8:d7:f6:45:5e:26:47:fb:d3:4c:c4:ca:f5:
7f:81:3b:37
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUGddVnp3PAYXmDAnG1Z3F/8gpk5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MjkwMzAzNDRaFw0yNzA3MjgwMzA4NDRaMDMxMTAvBgNV
BAMTKDUzNzIwNzBERDlGMTJBNTM3QTlEQjU5NTBDRDQ5OUUwN0Q0NUZDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfBU0N3X/E6CQt9EvbD9eSLid
5nhkkBOtbew2OCXgeqaZzht+NH1wTSWEJfsf+jpQF5WJPgkBLsYEyRcTotbnArhs
8ts7MMdbYfW9e4a5Xf4G/+xppd/keYI+fd+bqfk61VM7pKKGKmc1liZgeqazjHP7
ybZbvfYJOKoJYICXfyn/fX2FIJsomnmPMv1N2O8y5mJ5YvSirrMZ+YaOFyrvJ21X
wYnirRpDviagpCzHV5ZTsb7mvJ1L5ED6KLLGD8FwqHfr82xf/mWlYHJSpwpE5+t2
tpbdh/lvSI8wBc9mUwlUMDT3c337azGKmarm7SyYHP1xYQMKKmBOgwfVHKp/AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUU3IHDdnxKlN6nbWVDNSZ4H1F/BgwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzkzNDA2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhYq
AwQAUhhsMA0GCSqGSIb3DQEBCwUAA4IBAQCEPYcwzfVrIa9P9j0kLkyTKtTwW5xp
qy/Cz7NY9DYYYmdx+bUWmngc6SXQWri0sZ66UYTHdW7FGJ/QkHJkjltChreZu9Ai
LFAx7XKOjefLC1JTNnZPd8N7e8IOchFOcKa864l+/3l+FrYOkbrRv3kfwkjX0Yah
FQ75w0Azj1yn4yGHWX75D4+0DYQD0hsV9r2v66Old8pUxygjDmVZjoa2b7bzaTg6
/tYJAq44/YhiUMS8oRnvHI7OM7R8ajORKnaT6yH79t+zNjh5FMVLjkFfX1I+sFLH
yZ79S4PzmfG70rFLKgVtWWfn6mjrCg1UXMjX9kVeJkf700zEyvV/gTs3
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:10 2026 by rpki-client