Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: POGw/sLyIgZBHQcPKy23HfXiMWTl61qL4QebU9Z4CIY=
Subject key identifier: F3:99:FA:FD:8B:13:68:7C:AF:FE:9B:16:32:A9:C4:09:27:E1:76:F5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2FC0319F7C90B89DB70D534D3725A9168204AA96
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399359.roa
Signing time: Fri 14 Aug 2026 12:12:06 +0000
ROA not before: Fri 14 Aug 2026 12:07:06 +0000
ROA not after: Fri 13 Aug 2027 12:12:06 +0000
asID: 399359
IP address blocks: 82.27.131.0/24 maxlen: 24
82.27.135.0/24 maxlen: 24
82.47.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c0:31:9f:7c:90:b8:9d:b7:0d:53:4d:37:25:a9:16:82:04:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 14 12:07:06 2026 GMT
Not After : Aug 13 12:12:06 2027 GMT
Subject: CN=F399FAFD8B13687CAFFE9B1632A9C40927E176F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:18:92:ef:6c:03:58:f8:6f:3b:b3:ef:d2:
5e:9e:9c:13:8a:72:de:16:57:aa:11:b3:57:2c:0b:
1c:da:75:f8:6e:3c:1f:c8:15:c4:35:75:8a:49:8c:
53:8d:7d:b1:79:be:0a:22:d5:72:1a:8e:8d:61:30:
da:62:8d:12:63:f6:64:b0:23:41:bc:31:23:19:53:
28:d1:74:c3:b6:db:63:56:e8:b6:4d:1d:c6:b7:8a:
44:34:39:b3:ce:5b:98:9c:dc:45:79:10:a2:d4:08:
f0:d0:27:a7:8b:ad:d4:18:b8:80:db:b4:14:de:7e:
2c:da:a5:a4:0e:06:39:6a:40:77:c8:28:e4:fe:be:
ec:ba:b9:be:7a:90:46:8f:62:69:bd:31:43:e2:8a:
5e:43:67:6c:b1:28:c5:68:0c:5c:2c:23:38:e4:30:
aa:94:46:ae:47:b3:63:ff:26:ac:e5:7c:aa:9a:c1:
6f:be:da:8f:89:58:1f:6b:8e:0b:3d:2e:0d:cb:c2:
75:fa:13:73:fb:9e:c9:cd:01:e9:7a:94:88:68:97:
a2:8c:1a:03:75:f9:5d:41:2a:c1:08:e5:15:eb:96:
01:94:77:11:4c:2e:e6:97:ac:0e:26:97:f9:3b:cb:
b4:c3:91:dc:7c:e3:59:40:72:a5:59:a3:6b:3b:c7:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:99:FA:FD:8B:13:68:7C:AF:FE:9B:16:32:A9:C4:09:27:E1:76:F5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.131.0/24
82.27.135.0/24
82.47.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:af:0a:a1:84:65:24:0f:37:f4:a1:14:86:75:dc:93:15:19:
10:b9:9a:1a:71:6c:1c:7a:72:71:72:b9:09:43:c4:7a:3f:9c:
e2:87:16:b6:66:d0:ae:c2:3c:05:f0:d1:23:88:be:96:98:1b:
29:c2:ab:bb:97:31:8d:9e:42:ef:81:bd:4c:f8:4b:a1:b3:99:
22:97:3a:96:1a:88:8c:dd:a4:66:9e:c2:27:ff:4c:78:a0:74:
d0:07:72:45:8d:3f:db:e0:7c:a9:76:bc:37:ae:ae:06:34:37:
e5:32:78:4c:c2:6e:21:3c:6c:10:fe:07:5b:72:5c:56:89:06:
e2:7b:0a:75:46:cd:d3:6b:47:ca:d2:06:3e:bd:2b:e7:0f:9b:
2a:59:f8:2e:1a:a4:b9:0c:82:72:38:3c:e3:1f:6f:56:3f:a4:
7c:70:e8:2f:44:24:3d:51:57:dc:48:74:18:e3:ae:74:af:6c:
7f:d2:b9:02:91:1e:7c:8f:83:f6:e9:68:b2:54:87:f6:e6:a4:
0e:1a:c0:1b:d8:0e:89:79:07:5a:6b:a5:04:af:90:88:dd:68:
f2:f3:56:85:50:68:3e:38:6b:d7:98:28:3a:93:b5:c2:31:a2:
36:82:62:79:03:b6:64:76:d1:f1:22:a6:b2:0c:f0:9d:7b:4b:
e8:91:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:23 2026 by rpki-client