Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398704.roa
File: AS398704.roa (raw, json)
Hash identifier: pL7Q6ZarTTDp3K49c87m9At+9Te6ldsuPWd8KJUNhQ4=
Subject key identifier: 0E:25:FB:4B:3D:6C:E7:CD:58:2E:EA:86:05:58:44:56:36:BB:E4:B0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4E43BF08A95D9498E3EA28C7451FD59C0D68636B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398704.roa
Signing time: Wed 04 Mar 2026 08:30:17 +0000
ROA not before: Wed 04 Mar 2026 08:25:17 +0000
ROA not after: Wed 03 Mar 2027 08:30:17 +0000
asID: 398704
IP address blocks: 82.21.75.0/24 maxlen: 24
82.27.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:43:bf:08:a9:5d:94:98:e3:ea:28:c7:45:1f:d5:9c:0d:68:63:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 4 08:25:17 2026 GMT
Not After : Mar 3 08:30:17 2027 GMT
Subject: CN=0E25FB4B3D6CE7CD582EEA860558445636BBE4B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:79:92:ff:36:4b:a0:1c:96:03:93:0f:61:
48:17:a1:2f:08:60:bc:50:1f:6a:79:e8:c8:a6:72:
b1:a2:4e:40:70:7f:f4:94:7f:0c:79:87:63:2a:6b:
91:08:54:a4:8a:e5:f3:bc:64:bc:12:73:12:37:d3:
e7:cf:98:05:47:14:fc:ad:19:21:ed:c5:c6:27:c7:
ff:bd:dc:e4:f6:1b:88:5c:91:db:b6:6c:85:a3:36:
4b:cc:11:22:aa:5d:4c:d6:a9:a5:63:34:da:93:3d:
a9:ed:3c:1d:6d:fc:2e:e3:64:b4:d1:79:8f:e2:ca:
7b:37:d0:df:94:74:48:a9:03:d6:cf:86:86:48:ed:
99:c6:80:f7:d9:a5:5b:ac:b6:78:4e:16:32:e7:f1:
d9:1e:4c:70:fb:d6:1e:a6:23:ad:6a:ed:c9:7d:ef:
03:d7:89:2d:2b:7d:06:f2:2c:64:45:d8:8f:b2:fc:
f5:db:f7:9c:39:38:ed:10:bf:b2:41:47:53:d7:17:
44:dd:07:58:12:af:ac:48:6c:73:1a:fd:62:b4:6c:
0d:90:e6:79:7f:b2:07:e6:92:61:82:19:7e:59:31:
46:dd:ca:2e:29:c7:33:b6:fa:be:23:67:2a:26:f9:
cc:98:84:f0:6d:89:25:48:16:97:92:53:2d:4d:a5:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:25:FB:4B:3D:6C:E7:CD:58:2E:EA:86:05:58:44:56:36:BB:E4:B0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.75.0/24
82.27.131.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2f:51:c9:17:69:b6:1d:af:37:0d:94:9c:8d:b4:de:3e:3d:
a7:82:19:34:5a:51:e9:21:5f:82:b7:53:4e:73:cf:16:18:12:
d7:9f:00:d9:8b:13:86:94:89:2d:42:ef:f0:eb:ad:7c:04:83:
09:38:69:58:b5:02:4e:33:d8:49:55:ef:09:9b:b3:07:ae:92:
4c:15:cc:18:81:c1:a8:d4:f0:38:12:4a:ea:cc:67:b3:6e:0b:
ea:7d:73:d4:09:56:92:5f:28:8a:f2:e6:38:9b:0e:1c:9a:a9:
8e:f6:be:3c:e4:c5:d6:da:6f:a3:51:f6:53:c2:e9:02:2e:91:
85:07:c2:55:3c:86:54:12:50:c2:ea:e7:17:e1:3b:96:d8:02:
bb:d9:27:e8:22:90:96:ed:ee:e8:94:66:8b:05:83:a1:4e:c8:
f8:e8:60:5a:c4:21:92:4c:3f:98:a5:fb:58:3b:00:6b:b4:98:
0e:3a:60:01:87:31:6f:e3:e8:6e:b8:20:81:3f:91:4d:ce:30:
98:3f:b3:eb:a7:2e:68:b9:84:ab:bd:e5:f8:dc:ea:00:73:f5:
b6:cc:a1:a7:84:5a:39:97:65:6c:48:f5:1d:e4:4e:9c:14:b1:
c4:d8:8d:3a:23:fa:be:ee:39:1d:9c:47:98:86:98:46:f5:08:
a7:b0:37:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:43 2026 by rpki-client