Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395886.roa
File: AS395886.roa (raw, json)
Hash identifier: hTDmnR88MvkNoviNqXAiZ6U5esB6xv58ae0aPTqt0s8=
Subject key identifier: 75:64:0B:F9:4B:AB:95:FA:A7:F8:23:80:4F:A4:45:3D:BE:82:92:B9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 218A3BB219DAC79534895CA7B359FC565009E24E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395886.roa
Signing time: Wed 01 Jul 2026 04:26:09 +0000
ROA not before: Wed 01 Jul 2026 04:21:09 +0000
ROA not after: Wed 30 Jun 2027 04:26:09 +0000
asID: 395886
IP address blocks: 82.40.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:8a:3b:b2:19:da:c7:95:34:89:5c:a7:b3:59:fc:56:50:09:e2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 04:21:09 2026 GMT
Not After : Jun 30 04:26:09 2027 GMT
Subject: CN=75640BF94BAB95FAA7F823804FA4453DBE8292B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:c2:78:b6:83:34:b3:21:21:42:85:c7:c5:
e0:7f:5a:2d:7a:34:a6:ba:90:d6:2c:c8:ea:08:1e:
1a:5f:a8:6b:ad:e6:67:7b:85:80:36:c4:b9:e2:ed:
51:c6:4c:7d:ee:93:96:56:28:bc:01:d2:e3:1f:59:
59:6b:19:96:3e:14:fb:69:cb:3a:e0:73:2c:62:5a:
96:a9:18:01:4f:e7:36:dd:b2:15:f6:2a:73:5b:3c:
5c:65:86:42:b9:46:b3:03:7a:17:b9:28:7c:d7:c5:
00:d1:18:e1:d0:5a:29:9a:ba:b5:3c:20:76:9d:80:
23:d0:14:9a:77:ae:98:97:41:04:bf:4f:81:34:23:
b4:3a:3f:5a:1b:73:44:3e:c0:1b:ea:49:eb:b3:87:
34:f7:cb:f5:a2:b1:26:23:55:9b:21:15:ee:2b:97:
24:71:24:8b:54:e6:f3:f6:24:68:7d:6d:e6:0d:9e:
0f:7f:7f:95:e9:3e:ce:f2:09:b9:a4:74:62:b1:5e:
c8:a1:c2:c8:8f:6c:79:b0:8e:30:78:56:a8:99:8b:
ad:52:a6:53:a7:40:48:2e:41:a6:df:04:6b:10:c9:
ac:f5:b0:1b:50:b1:34:62:19:1c:f6:ca:91:25:11:
e6:50:50:b1:ec:e0:3d:60:87:be:5d:c1:d1:5e:f6:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:0B:F9:4B:AB:95:FA:A7:F8:23:80:4F:A4:45:3D:BE:82:92:B9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:42:7a:72:11:ec:99:e8:76:53:7f:67:64:da:d4:dd:69:d4:
0a:cb:97:42:aa:7e:6a:99:e0:9e:9e:46:35:6a:b7:f5:7e:db:
56:3f:f4:07:30:33:56:9a:73:b4:05:88:b8:26:28:e5:22:52:
ae:fb:7f:59:eb:a0:30:5f:c8:19:49:f9:da:bb:c3:2b:da:81:
0a:00:15:e6:b9:15:f4:4d:ab:56:2d:e9:b3:d0:57:e4:05:c5:
db:a3:69:1c:dc:0f:8a:5f:56:41:a6:ea:74:4b:ac:b9:23:cd:
31:84:0c:6b:a9:9b:20:e7:da:24:34:9e:bf:96:80:bb:3e:16:
8d:8a:47:e2:b6:87:2b:d1:07:96:33:16:28:3f:1c:59:0a:66:
36:a9:75:df:4d:d1:c7:10:41:5a:16:5c:9e:eb:45:fe:68:26:
af:9f:68:58:b4:50:c5:ce:61:a9:93:7b:30:06:9f:6b:8b:2f:
a6:d0:3f:b0:bb:dc:57:87:b5:d0:67:05:42:58:0e:3b:d7:3f:
7b:f5:0a:70:12:79:ac:23:ef:ea:e3:c9:ff:44:44:c4:35:8e:
a5:58:05:dd:4c:2f:ef:3e:22:ec:88:f3:7a:cf:31:b4:50:11:
f7:90:2a:7f:54:ec:83:17:3b:d8:71:a2:c3:ae:f3:ca:d2:d1:
3b:f6:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:54 2026 by rpki-client