Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: hIf25s+LgLHnIWgiT+ENqIAGWR/DcEVlzr7ptBWMwWc=
Subject key identifier: 31:68:90:47:C4:A8:58:1D:7E:FE:17:65:25:48:FB:1E:77:50:0E:00
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 43DEAB9EF274F2C8063254D336789DCBAA647BE9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
Signing time: Mon 10 Aug 2026 09:55:54 +0000
ROA not before: Mon 10 Aug 2026 09:50:54 +0000
ROA not after: Mon 09 Aug 2027 09:55:54 +0000
asID: 396356
IP address blocks: 82.21.242.0/24 maxlen: 24
82.24.144.0/24 maxlen: 24
82.26.243.0/24 maxlen: 24
82.27.100.0/24 maxlen: 24
82.27.243.0/24 maxlen: 24
82.39.81.0/24 maxlen: 24
2a13:9500:3::/48 maxlen: 48
2a13:9500:1c::/48 maxlen: 48
2a13:9500:1d::/48 maxlen: 48
2a13:9500:1e::/48 maxlen: 48
2a13:9500:1f::/48 maxlen: 48
2a13:9500:24::/48 maxlen: 48
2a13:9500:25::/48 maxlen: 48
2a13:9500:26::/48 maxlen: 48
2a13:9500:27::/48 maxlen: 48
2a13:9500:28::/48 maxlen: 48
2a13:9500:33::/48 maxlen: 48
2a13:9500:5b::/48 maxlen: 48
2a13:9500:5c::/48 maxlen: 48
2a13:9500:5d::/48 maxlen: 48
2a13:9500:5e::/48 maxlen: 48
2a13:9500:5f::/48 maxlen: 48
2a13:9500:82::/48 maxlen: 48
2a13:9500:83::/48 maxlen: 48
2a13:9500:84::/48 maxlen: 48
2a13:9500:85::/48 maxlen: 48
2a13:9500:86::/48 maxlen: 48
2a13:9500:87::/48 maxlen: 48
2a13:9500:88::/48 maxlen: 48
2a13:9500:89::/48 maxlen: 48
2a13:9500:1b7::/48 maxlen: 48
2a13:9500:1b8::/48 maxlen: 48
2a13:9500:1b9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:de:ab:9e:f2:74:f2:c8:06:32:54:d3:36:78:9d:cb:aa:64:7b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 10 09:50:54 2026 GMT
Not After : Aug 9 09:55:54 2027 GMT
Subject: CN=31689047C4A8581D7EFE17652548FB1E77500E00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:e3:aa:2c:71:1e:90:9b:cf:98:37:b2:4c:
c0:cb:9a:41:fe:9d:44:d6:ad:e7:97:aa:2d:8c:4f:
66:57:e2:a3:60:e7:23:17:0c:3a:f4:94:10:0d:6b:
50:6a:f2:6a:fb:45:54:9e:2e:4e:e4:a2:13:15:44:
ad:c8:c8:67:c7:43:23:ea:f2:39:90:1e:aa:a9:b6:
d1:7f:a5:cb:8c:9c:2d:05:fc:41:85:c4:70:29:32:
26:ad:9b:40:57:0e:e1:8b:4a:12:07:77:c4:36:3d:
8d:a6:43:af:68:02:61:7b:8d:47:46:7f:f7:b0:f3:
eb:62:cd:ad:2c:3a:38:c7:47:1e:7d:4f:2a:03:6f:
92:98:b4:26:00:40:1d:2f:68:98:fb:04:6f:e9:ac:
c3:00:cd:a2:7b:31:c5:04:8b:f3:5f:c8:34:44:c0:
7c:3c:c5:3d:c0:70:ca:15:03:21:ce:1e:13:c4:fd:
3f:53:1b:f2:73:1d:21:fb:02:e2:d3:26:29:a2:03:
fb:51:2b:49:fa:c0:34:49:27:85:cb:ed:fd:b6:bc:
19:31:a6:02:e7:01:ed:10:59:d1:fe:53:a9:fe:7d:
12:c7:a0:27:60:e2:7f:3f:38:11:dc:4a:4c:b0:e7:
20:67:b1:86:17:da:f6:b4:dd:84:09:43:b0:8b:3d:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:90:47:C4:A8:58:1D:7E:FE:17:65:25:48:FB:1E:77:50:0E:00
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.242.0/24
82.24.144.0/24
82.26.243.0/24
82.27.100.0/24
82.27.243.0/24
82.39.81.0/24
IPv6:
2a13:9500:3::/48
2a13:9500:1c::/46
2a13:9500:24::-2a13:9500:28:ffff:ffff:ffff:ffff:ffff
2a13:9500:33::/48
2a13:9500:5b::-2a13:9500:5f:ffff:ffff:ffff:ffff:ffff
2a13:9500:82::-2a13:9500:89:ffff:ffff:ffff:ffff:ffff
2a13:9500:1b7::-2a13:9500:1b9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:a0:b0:8d:be:ab:a4:f4:cc:12:11:f0:48:47:49:1f:d6:ff:
62:53:04:dc:d2:15:0f:2a:d3:d8:f1:dd:4f:08:28:57:bc:41:
db:74:18:e2:5f:cd:fc:62:1b:07:08:f5:52:8e:64:6e:6e:73:
81:14:9f:18:5e:f5:49:62:d9:17:96:a0:5d:eb:12:7c:42:a6:
1b:27:90:08:f6:98:75:13:04:be:2c:4a:fe:58:35:39:4f:04:
fb:e5:d0:75:31:26:e9:58:b8:ff:9b:6f:57:57:bc:b0:12:8a:
b9:7e:14:9f:8f:38:bf:b1:db:83:d2:c6:0f:1e:8a:b5:a4:52:
9f:3f:60:9d:8d:c9:17:3c:5c:d4:95:39:f6:88:e1:82:bf:43:
85:1e:87:42:39:15:90:12:32:ce:21:15:ff:dc:3d:f4:4f:05:
d9:66:27:d0:74:b0:d5:5e:69:eb:b8:b0:a2:8e:a8:28:76:2b:
e2:09:97:0d:d0:6d:17:5f:ed:ac:dc:35:71:ad:75:74:59:0b:
1a:2c:e9:01:52:5c:bb:ed:51:14:bf:7e:7e:5c:8c:42:98:b3:
67:cc:da:92:0c:4d:a2:97:37:e4:e4:e6:ac:97:43:00:13:01:
a9:34:50:23:b9:6a:fe:1b:4f:3e:1d:ca:d1:de:50:df:c4:9c:
fe:cf:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:58 2026 by rpki-client