Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395886.roa
File: AS395886.roa (raw, json)
Hash identifier: qwVDfnG9xgw2Gf2ZSL+RCJKuJysmiZWRQBe1rpgJZmA=
Subject key identifier: 2C:2D:E1:13:D2:89:DA:62:8B:C7:1B:5B:36:40:F9:53:77:86:90:61
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3A3C243E22249D8445E5ED2DC52689CA578450F5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395886.roa
Signing time: Fri 14 Aug 2026 09:32:00 +0000
ROA not before: Fri 14 Aug 2026 09:27:00 +0000
ROA not after: Fri 13 Aug 2027 09:32:00 +0000
asID: 395886
IP address blocks: 82.40.32.0/22 maxlen: 22
178.83.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:3c:24:3e:22:24:9d:84:45:e5:ed:2d:c5:26:89:ca:57:84:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 14 09:27:00 2026 GMT
Not After : Aug 13 09:32:00 2027 GMT
Subject: CN=2C2DE113D289DA628BC71B5B3640F95377869061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:c1:23:b8:15:3a:10:db:0e:14:5e:17:a4:
3e:7f:0b:88:d3:46:81:64:46:a5:41:5b:8c:14:ab:
e9:af:10:ba:9a:cf:da:42:4a:52:e3:f9:ee:ea:54:
8d:94:3d:0c:b6:a5:67:58:ff:18:a9:3d:b9:95:40:
00:67:5c:a9:0d:7d:f0:32:5b:85:73:48:88:1e:02:
60:2e:f8:c1:d7:76:e9:d2:5a:bb:7d:9f:80:41:1a:
fb:6b:4d:6d:46:3a:d9:68:bc:58:d2:d0:1d:c6:31:
06:5d:73:a9:fa:57:a7:2c:6e:a4:32:86:30:5c:cb:
8a:e4:7c:02:a0:38:72:db:c7:59:5f:33:57:1d:f5:
5f:28:ce:b4:37:26:6f:ce:27:28:1b:84:43:e1:57:
f4:ed:1f:41:42:3c:2b:f6:87:bb:76:d3:02:96:8a:
f2:82:d9:31:da:b1:e1:05:e2:a4:e1:25:71:2b:77:
eb:12:ca:db:fa:34:f1:18:f5:bf:e2:b5:02:67:2e:
0f:53:d9:aa:4b:f5:57:db:b6:0f:14:d1:b2:4f:1e:
8e:b2:dc:9b:01:14:03:e6:b1:d4:50:40:f8:7d:83:
1e:39:8c:d5:d0:3b:78:07:4a:70:d3:70:4d:39:9e:
90:0a:07:b6:43:aa:00:c5:9e:7f:68:4e:db:a1:f2:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2D:E1:13:D2:89:DA:62:8B:C7:1B:5B:36:40:F9:53:77:86:90:61
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.32.0/22
178.83.203.0/24
Signature Algorithm: sha256WithRSAEncryption
99:83:3c:7d:52:1a:f7:57:4d:e1:e9:87:70:9b:78:98:38:ed:
f2:43:c9:ea:58:b2:81:8c:f8:71:8c:12:1c:8f:d6:20:95:e7:
ce:74:65:98:bf:91:62:47:4a:6a:c2:e3:2e:77:3d:65:47:0d:
a7:ac:20:1f:f0:6b:32:df:8f:62:2b:a0:8f:d1:eb:1d:c6:6f:
fc:73:05:d7:ad:d1:c9:d6:ba:10:a3:c2:89:a8:cb:05:85:dc:
7b:3a:96:f6:81:e5:e9:0f:36:88:9f:fa:a0:ba:be:a4:af:b7:
c3:65:81:11:be:3b:64:6e:9f:1c:d8:7f:f9:fa:5a:64:95:c0:
a7:31:e1:b2:cb:e0:81:23:87:99:c7:7d:79:82:14:2f:94:f4:
2b:65:80:fa:23:a2:c4:16:1a:d7:68:da:07:30:63:aa:69:3c:
2a:b4:e6:84:6d:6e:b6:f9:c2:cb:23:ec:86:6d:cb:78:91:57:
57:62:61:bb:5d:24:c6:bc:c2:d4:98:f6:7c:12:26:b0:3f:46:
b4:13:0f:e7:f5:76:e0:2a:32:ec:e3:27:a3:ef:0a:f0:de:c6:
e3:c0:7e:dd:cc:9f:72:dd:7d:4b:b6:fb:12:5d:2b:88:7f:fb:
28:9c:3c:c7:1e:f5:9b:b6:b8:9e:46:b1:d5:60:98:de:04:6b:
43:c2:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:19:57 2026 by rpki-client