Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395793.roa
File: AS395793.roa (raw, json)
Hash identifier: IPA0Mc07CTV8+zTNm6qZgbf7zRrYZoroHEf+/SnFVZk=
Subject key identifier: 46:75:B3:CE:45:54:4E:D0:4E:CB:F5:51:CC:B7:53:E2:18:B8:AF:AB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 387DA98F3061B42A089E3DEA658FD4C1ECA2D187
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395793.roa
Signing time: Wed 26 Aug 2026 18:49:30 +0000
ROA not before: Wed 26 Aug 2026 18:44:30 +0000
ROA not after: Wed 25 Aug 2027 18:49:30 +0000
asID: 395793
IP address blocks: 82.22.170.0/24 maxlen: 24
82.23.128.0/24 maxlen: 24
82.23.129.0/24 maxlen: 24
82.23.130.0/24 maxlen: 24
82.23.131.0/24 maxlen: 24
82.23.132.0/24 maxlen: 24
82.23.133.0/24 maxlen: 24
82.23.147.0/24 maxlen: 24
82.24.42.0/24 maxlen: 24
82.24.64.0/24 maxlen: 24
82.24.121.0/24 maxlen: 24
82.24.146.0/24 maxlen: 24
82.26.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7d:a9:8f:30:61:b4:2a:08:9e:3d:ea:65:8f:d4:c1:ec:a2:d1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 26 18:44:30 2026 GMT
Not After : Aug 25 18:49:30 2027 GMT
Subject: CN=4675B3CE45544ED04ECBF551CCB753E218B8AFAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:34:a0:05:bf:f9:d9:29:93:18:2a:93:46:
fa:ab:51:0e:4f:66:20:cb:1e:aa:9d:6c:ab:3e:07:
99:d8:91:03:32:88:66:f6:d7:b7:7c:69:b5:b0:07:
bb:e3:57:d1:a1:9a:2d:6a:2c:7c:5a:72:ff:55:9d:
5a:30:b6:3b:ac:fe:81:95:75:91:ba:71:98:cd:21:
ab:c6:61:dc:98:3a:63:49:5c:fb:5b:8c:a4:03:32:
b3:c9:00:a8:27:df:c6:85:2f:8b:63:eb:49:43:73:
70:37:8e:2f:7d:7a:83:25:43:21:34:b3:95:d1:31:
c0:46:74:f0:fa:bd:53:35:21:2e:a6:55:44:94:57:
c4:fd:7c:af:fc:ff:3e:e0:b9:8b:4f:6f:f3:b2:0d:
95:ac:21:ff:66:98:b5:a0:b6:cc:ed:af:2a:b2:4a:
e7:ad:28:65:0a:99:d4:99:26:1a:e7:f9:43:89:3f:
8c:b8:d2:a6:2d:3f:10:e7:dd:3e:15:d6:8f:69:db:
67:d7:06:94:30:60:57:a7:c1:a0:dd:00:54:08:6d:
16:ce:97:a5:69:98:d2:f1:86:1e:44:1d:a6:86:8f:
c6:15:69:fe:e2:96:92:6d:cd:a7:36:bd:25:3c:11:
64:96:f6:cf:cf:f5:aa:17:50:7c:85:fd:92:36:7b:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:75:B3:CE:45:54:4E:D0:4E:CB:F5:51:CC:B7:53:E2:18:B8:AF:AB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.170.0/24
82.23.128.0-82.23.133.255
82.23.147.0/24
82.24.42.0/24
82.24.64.0/24
82.24.121.0/24
82.24.146.0/24
82.26.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fa:22:51:ef:a9:4d:2c:cf:dd:c8:ba:f7:aa:15:80:be:e5:
04:7d:74:84:6d:ca:60:51:71:a9:2b:92:51:6c:db:68:6d:03:
68:3a:dd:ea:d1:19:0d:02:2f:ab:91:bb:98:04:89:9a:5e:ac:
a0:d9:fd:80:1d:02:b1:f8:17:88:2a:79:bd:2c:96:b6:a3:9a:
cf:8c:54:bf:f3:aa:2d:e7:84:76:02:58:09:0d:86:05:50:7e:
d5:35:a4:80:bd:30:c0:f4:32:36:04:3c:11:44:d5:b1:7e:d5:
00:f6:19:a0:2a:0e:3b:80:51:92:39:f0:ca:ce:45:16:63:28:
db:2d:65:2d:78:cc:d0:1e:74:bc:de:4c:76:0e:da:da:c1:99:
e9:df:48:9a:61:34:f6:ef:c3:93:96:4d:b7:3b:d1:8a:cf:b6:
c6:11:6d:9f:e2:8c:42:4c:ff:ac:e2:c0:9d:90:c8:1a:98:6c:
80:f2:d9:98:fc:62:f1:93:e7:e4:65:7b:07:a8:8a:24:5e:0e:
fc:9f:20:6e:f0:20:1a:3a:3a:0f:df:d1:e7:c3:9b:f4:9f:0a:
ef:84:9f:09:d9:df:c4:2e:7f:0b:51:1e:51:69:3d:52:b4:18:
8a:2c:76:da:18:7a:98:c8:be:fa:37:5f:f8:6b:63:0f:17:d8:
59:46:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:18:31 2026 by rpki-client