Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: 0lcB6KR4r+r7LUOJxP2gwivmnYD0WlNgt8P3fX2tZT8=
Subject key identifier: 1D:8C:97:B4:FD:A2:55:1F:E4:13:3D:28:49:3B:B7:BA:38:2A:B2:3A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5DB84000E012B4249591ECC302EB4C2677F8BFD4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395374.roa
Signing time: Fri 25 Sep 2026 00:07:41 +0000
ROA not before: Fri 25 Sep 2026 00:02:41 +0000
ROA not after: Fri 24 Sep 2027 00:07:41 +0000
asID: 395374
IP address blocks: 178.83.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b8:40:00:e0:12:b4:24:95:91:ec:c3:02:eb:4c:26:77:f8:bf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 25 00:02:41 2026 GMT
Not After : Sep 24 00:07:41 2027 GMT
Subject: CN=1D8C97B4FDA2551FE4133D28493BB7BA382AB23A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:39:7d:af:11:56:2a:e1:75:ec:42:9d:f3:
b1:89:0f:5e:0a:84:4f:f8:f3:56:1e:ae:b0:f7:a2:
2e:83:e9:a7:56:84:cb:32:de:9e:99:db:8d:e1:89:
ed:60:b2:93:46:6a:ab:31:33:d6:f3:92:b4:88:6c:
45:3b:b3:d6:59:36:d8:e6:23:bc:01:bc:12:c5:0a:
ce:aa:39:a8:68:f5:9f:9b:42:14:8d:09:2e:b2:b3:
61:9b:25:ac:35:bb:f8:c3:45:59:cb:15:dc:94:a5:
1d:97:39:90:c6:fb:df:a4:57:9e:f7:5c:91:9a:0c:
c2:28:d0:9d:4d:00:1c:4c:d8:47:69:67:07:83:87:
58:2d:52:29:9e:b3:93:a9:09:b4:f6:25:c8:fa:0e:
d4:36:31:45:b0:27:c6:d1:78:79:2b:ce:8f:35:f3:
a8:49:08:76:18:9f:f2:70:ee:a9:28:48:70:c3:08:
64:85:7a:28:70:2e:3b:6a:da:10:18:1c:bf:c3:ec:
e3:b3:5e:df:71:e7:38:cc:40:2c:2f:37:15:ff:05:
38:67:20:47:8a:1c:bf:19:ea:60:e3:c5:81:f4:f3:
69:2c:de:cc:33:c8:f1:97:46:20:7d:25:65:ae:55:
6f:38:97:d6:61:ff:60:54:de:82:6f:95:b2:16:1a:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8C:97:B4:FD:A2:55:1F:E4:13:3D:28:49:3B:B7:BA:38:2A:B2:3A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7f:5c:7e:58:43:51:45:b6:e7:7b:dc:24:cc:3e:28:87:cc:
67:44:41:32:a0:a1:6a:cd:d5:03:aa:db:f6:4d:68:6a:91:1f:
16:c5:be:38:d2:da:71:78:7b:aa:f8:04:14:5d:bd:48:17:c8:
80:64:43:4b:d7:c5:2c:4d:27:5d:10:e4:a0:7a:64:ba:4c:39:
24:e7:1b:49:1f:30:4a:56:97:44:69:8f:49:92:d8:51:25:c1:
95:b3:18:a5:38:8e:c1:87:bc:f7:34:8b:c9:80:26:31:14:b7:
b5:72:21:0a:85:97:21:3e:f5:fc:6c:a9:55:5c:3b:e8:43:d2:
92:91:a2:60:96:30:6b:17:53:20:86:7d:30:69:70:17:41:50:
b7:7c:52:88:ad:e8:46:13:c4:4a:5a:c4:3c:7b:51:cd:df:9b:
1a:42:00:b0:8d:64:09:78:30:67:96:e0:7f:32:3f:c7:c7:01:
05:75:36:80:bc:fa:b3:7c:5d:03:da:96:f0:74:84:02:42:48:
72:80:9f:55:85:4e:64:64:c5:f7:1f:81:98:ec:4f:03:70:10:
6f:21:44:69:87:b9:8d:95:11:92:55:54:dd:fd:17:e6:54:df:
0d:2a:69:67:b8:8b:e6:e8:2d:b0:81:dd:e3:85:95:e5:2f:70:
23:a5:51:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:39:51 2026 by rpki-client