Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: dFuTUCN7d+X/foMt255HBOcmUjMVaI5OBDSCYQDy6xc=
Subject key identifier: 87:C0:48:94:51:58:44:19:02:48:7C:80:F5:17:C5:64:91:58:0F:88
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 738090D93A4876269D67B7827BF546A8D52ED203
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS393942.roa
Signing time: Fri 25 Sep 2026 00:06:00 +0000
ROA not before: Fri 25 Sep 2026 00:01:00 +0000
ROA not after: Fri 24 Sep 2027 00:06:00 +0000
asID: 393942
IP address blocks: 82.47.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:80:90:d9:3a:48:76:26:9d:67:b7:82:7b:f5:46:a8:d5:2e:d2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 25 00:01:00 2026 GMT
Not After : Sep 24 00:06:00 2027 GMT
Subject: CN=87C048945158441902487C80F517C56491580F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:a6:24:64:84:1a:a5:bc:c9:c6:25:cc:28:
77:87:b1:22:bc:68:4c:6c:14:e4:3c:a0:1f:41:78:
27:3c:23:4f:a8:5b:1b:55:d7:74:6c:c7:9d:35:36:
73:5b:29:1d:57:58:ac:a6:ac:2d:5f:e1:43:aa:e5:
46:d2:85:4b:1b:f3:59:73:6f:da:31:df:18:ec:51:
c7:59:01:ad:bc:7d:3a:bd:32:18:fa:c4:17:2e:35:
2f:a1:49:6d:17:24:94:ac:df:19:25:d2:9d:b5:db:
aa:75:c5:aa:70:12:16:08:ef:38:6b:20:cc:7c:64:
2a:1a:18:72:70:f9:aa:5a:0f:74:7b:e0:72:2b:57:
31:76:a8:54:c1:51:35:f9:cc:3e:0d:2d:d7:4a:d7:
4c:ae:8f:78:b2:7b:94:37:40:7e:e7:a9:c6:15:3e:
4a:68:a2:df:93:e8:02:92:94:e5:4b:a8:a6:41:98:
eb:95:12:38:b7:a4:9c:d2:8c:b8:36:e9:7f:a1:f2:
d1:0b:01:51:5c:38:56:17:d1:8d:04:2c:39:49:25:
a3:8d:6a:4c:e8:11:bc:8f:50:7d:ab:70:b8:1e:9c:
15:4b:9e:a2:76:4a:fd:0d:31:7e:97:91:26:31:46:
67:45:97:1e:fa:8a:3a:72:9b:c2:ba:6f:b1:48:58:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C0:48:94:51:58:44:19:02:48:7C:80:F5:17:C5:64:91:58:0F:88
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7b:73:8f:fb:d6:c5:cf:e2:a2:11:03:f1:11:91:50:6b:a7:
ae:c3:73:88:85:ad:18:10:2f:c4:39:88:a6:e0:62:a2:65:71:
82:0d:61:a3:55:63:7d:36:d1:40:13:97:2a:26:5c:fa:af:51:
7d:14:a0:cc:bd:7b:16:7d:ba:62:18:cb:68:0c:ff:c5:ad:eb:
49:70:32:43:70:c5:b9:1f:30:8e:87:f3:d2:70:6c:d5:0a:a0:
24:2c:c7:e4:ad:9b:1e:69:b1:e8:4e:3d:91:0f:f4:68:61:f3:
82:d9:59:f0:fe:1f:a0:c7:dc:80:41:ca:ed:3a:d2:4b:c4:f4:
9f:4f:06:0a:6f:29:36:d0:d4:bb:c8:db:ad:92:ff:9b:af:d8:
5a:2c:c7:03:5b:ce:8f:61:fb:c0:13:bc:f3:b1:e6:c9:f3:e1:
64:45:28:85:a3:56:c5:b7:44:c2:6b:ce:6b:d4:b5:b5:92:46:
5d:96:73:2d:81:fd:09:46:3e:a7:4c:86:c5:1b:5c:e6:af:c3:
14:27:ef:eb:b7:c2:a2:58:34:2a:4d:f6:0a:d7:bd:3c:1d:84:
a4:e3:92:17:79:1c:2d:4b:1d:dc:f7:82:98:0c:51:74:86:e4:
68:a4:d6:50:a7:d2:a8:3b:2b:cb:18:a0:28:02:be:43:b8:0a:
d9:6c:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:10:48 2026 by rpki-client