Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401443.roa
File: AS401443.roa (raw, json)
Hash identifier: 0/QJUF42sfo/Pk/U2Bu/9GhEeA4JAYNpT5Qt/tDoMxo=
Subject key identifier: 4F:B3:7E:AD:AA:69:92:85:F1:B5:A8:E7:37:AD:50:D1:26:A1:A2:2C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 366478B081CAE05816B0D297E92C310F168AE74F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401443.roa
Signing time: Thu 09 Oct 2025 13:08:24 +0000
ROA not before: Thu 09 Oct 2025 13:03:24 +0000
ROA not after: Thu 08 Oct 2026 13:08:24 +0000
asID: 401443
IP address blocks: 82.27.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 20:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:64:78:b0:81:ca:e0:58:16:b0:d2:97:e9:2c:31:0f:16:8a:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 13:03:24 2025 GMT
Not After : Oct 8 13:08:24 2026 GMT
Subject: CN=4FB37EADAA699285F1B5A8E737AD50D126A1A22C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:7e:f3:88:b7:3d:ba:f2:ec:7a:26:b5:0a:
66:54:40:14:4e:8a:4e:4c:19:e0:37:c4:bd:63:ae:
9e:b7:66:20:a0:3c:e5:05:28:1c:4a:3c:e2:9e:23:
cd:8d:ea:88:d8:c7:15:83:6d:48:21:5f:c9:c0:ba:
d9:e9:d1:8a:47:37:fc:13:64:15:ae:b8:eb:f5:e6:
76:9d:f3:a3:9d:b1:f5:0d:e9:68:e1:81:2f:7f:18:
32:f8:ee:25:11:fe:5e:74:f0:30:55:2a:7b:35:1e:
7c:b3:0b:39:31:71:12:f3:cb:76:50:ef:08:7b:ee:
08:43:15:d4:59:56:80:a0:a4:10:ec:f5:25:db:3f:
83:34:88:80:6f:f6:17:81:8e:ea:33:21:2a:05:6f:
86:96:15:e6:b5:47:79:93:a2:ed:bd:2d:fc:42:7d:
ff:e4:37:84:b2:f2:e4:e2:01:56:2b:f4:d8:d4:ff:
07:07:c0:c7:02:d3:11:a9:d2:c3:1d:42:0d:f6:7f:
79:5b:41:2e:98:6a:df:1d:04:1d:ac:dd:17:20:a4:
f5:f4:d3:05:d2:90:ea:87:05:bb:60:9c:c6:4a:94:
d0:19:23:9d:b6:fe:cc:6d:01:93:f6:9f:1d:63:ae:
8a:3b:e1:ea:74:5a:52:48:a9:09:c4:3c:18:5a:02:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B3:7E:AD:AA:69:92:85:F1:B5:A8:E7:37:AD:50:D1:26:A1:A2:2C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401443.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.11.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8f:db:ee:1c:48:fc:94:dd:55:ba:38:d8:d6:90:fe:bc:fc:
bc:f0:f8:dc:f3:fb:34:96:c9:ff:61:f9:cb:0b:21:ee:a2:08:
76:72:c2:40:94:5c:b3:fe:8f:5d:e1:d7:43:93:7d:df:59:dd:
da:2f:82:0b:50:67:42:14:81:ee:49:33:39:a8:9f:30:09:9c:
18:be:e9:a9:3c:05:9f:28:d4:3f:41:93:8b:01:85:86:e2:b9:
2b:c8:72:50:9e:bf:27:2d:7c:2c:ed:e2:2f:c1:00:e9:67:53:
f9:e4:cd:cb:50:19:2d:e3:65:92:da:14:31:d6:10:a7:31:7e:
3f:b9:31:fb:00:e5:3a:61:cb:32:79:a5:5a:bc:e3:46:9c:f9:
9a:fc:36:05:cf:32:0a:7a:2a:cf:d6:5d:13:cf:0b:93:a6:b9:
53:e8:89:18:2f:f8:2f:5c:c9:b6:21:67:6a:c4:8f:95:1f:f2:
a2:81:ef:26:b9:f8:2a:ff:ec:92:f3:81:4e:ff:d3:00:75:cd:
7f:1f:5d:53:a4:cb:11:7a:8e:f7:bc:ba:13:e2:37:fd:1d:f1:
c6:74:b7:e7:a0:28:b0:9a:bc:77:68:bb:45:73:48:7a:cf:e3:
c7:0e:f6:ed:69:3c:15:ee:be:ed:56:09:29:d0:18:77:01:00:
60:0e:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 04:38:17 2025 by rpki-client