Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398547.roa
File: AS398547.roa (raw, json)
Hash identifier: FVFazKYyQBYhn3Sk1HMTVyQQRJxMqnufi1K5scI50YI=
Subject key identifier: F4:18:70:E8:07:0B:E4:76:44:76:B8:1A:81:6E:5D:F3:F3:3D:EA:3C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 61AE4D149387E6A4E4FBFECDEAD08127A006AA36
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398547.roa
Signing time: Sun 14 Jun 2026 19:49:56 +0000
ROA not before: Sun 14 Jun 2026 19:44:56 +0000
ROA not after: Sun 13 Jun 2027 19:49:56 +0000
asID: 398547
IP address blocks: 82.22.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ae:4d:14:93:87:e6:a4:e4:fb:fe:cd:ea:d0:81:27:a0:06:aa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 14 19:44:56 2026 GMT
Not After : Jun 13 19:49:56 2027 GMT
Subject: CN=F41870E8070BE4764476B81A816E5DF3F33DEA3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:c7:96:22:0f:1d:ed:69:b1:9e:4f:25:0c:
4d:26:37:ab:58:22:4d:5a:42:e4:4a:87:ce:a3:7c:
d0:52:e5:81:19:09:0d:8d:83:45:9c:fd:28:17:ca:
2c:db:81:61:73:07:4b:d7:c7:b9:b0:a8:24:49:f1:
be:a1:ae:6f:c0:7f:e5:10:41:0c:c3:ca:1a:53:53:
e6:ed:6e:b0:ea:be:22:46:7d:eb:14:3a:60:af:b8:
be:9a:7f:26:d1:ae:f3:48:0e:d4:e2:2a:ed:c1:b8:
f9:48:c8:f5:7c:2b:6a:5d:1a:22:9f:99:d0:1d:e3:
19:e7:78:08:a4:65:e5:9e:1c:25:22:4c:5f:18:9f:
b5:99:12:09:21:79:38:03:f0:9c:cd:0b:40:ae:93:
b0:5f:19:30:05:a3:ca:52:92:1c:c9:42:32:c1:4b:
f0:1c:0d:2c:0d:d1:8c:59:82:89:9e:7f:d6:92:ff:
9f:97:17:ff:92:a0:7a:7e:2e:c6:21:6d:62:9d:b1:
38:e6:4c:f1:f0:c4:da:a7:14:89:07:d1:ae:db:48:
85:9e:df:06:c5:23:5b:ed:bf:3f:99:03:0b:cd:de:
ae:ed:90:61:1d:6d:70:b0:e3:ec:b5:7d:cd:62:2f:
5f:48:ab:c9:6a:83:42:18:b2:cf:9f:b3:b8:e6:07:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:70:E8:07:0B:E4:76:44:76:B8:1A:81:6E:5D:F3:F3:3D:EA:3C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.39.0/24
Signature Algorithm: sha256WithRSAEncryption
23:89:2d:81:f9:34:38:01:b4:4c:cd:4d:ca:2e:d3:7f:d8:2f:
ab:8c:5d:52:5f:8d:3d:e6:21:8c:ab:2f:5e:56:63:06:65:c8:
6f:e3:31:9c:7d:92:cf:f0:70:0e:57:b9:15:c7:ae:55:ce:88:
74:bb:d2:e6:c3:9d:8f:d0:c3:44:69:0f:e4:5a:52:88:76:98:
27:18:6d:14:5f:e9:91:7c:ca:e4:44:38:0d:ab:95:92:6e:15:
2e:3d:c7:24:2f:75:1d:10:ed:08:44:0d:2f:91:ec:3d:6f:1a:
d6:4f:68:60:d5:7a:f1:0e:e6:e5:f0:b8:3e:52:81:d6:50:fc:
fd:45:39:01:ed:6a:20:93:af:bd:84:b7:35:e5:50:b8:91:9c:
2e:db:62:8c:e5:78:5b:2a:04:e7:8a:76:23:82:bb:4e:0d:8f:
25:82:ea:35:c7:4c:b0:55:e0:c2:47:a2:b8:b4:84:37:45:72:
fa:e5:62:aa:ef:47:44:63:10:81:d8:de:d7:99:5a:56:f1:8c:
f5:1d:03:a9:46:4e:b0:20:d1:4e:ea:61:43:eb:bb:89:59:dd:
f6:7d:a3:c7:92:a8:9a:f5:30:32:20:0f:fd:86:dd:6f:a7:94:
8e:31:b4:a1:b3:a1:5a:4b:80:4a:28:83:ca:96:d0:d8:1e:a3:
19:2c:69:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:09:16 2026 by rpki-client