Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: ihtBjQ5WSIjD/0AvN9mYgz6gKncUdoYdiENGfY6I4Iw=
Subject key identifier: 66:2D:1C:C0:66:B2:A3:36:B3:4D:4F:7B:43:D3:E9:B4:CF:D2:F1:3B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2B5F8FA7BF4795E87B71BE4C488BD08E6A7A260F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
Signing time: Mon 03 Aug 2026 02:56:00 +0000
ROA not before: Mon 03 Aug 2026 02:51:00 +0000
ROA not after: Mon 02 Aug 2027 02:56:00 +0000
asID: 401776
IP address blocks: 82.24.203.0/24 maxlen: 24
82.39.210.0/24 maxlen: 24
178.83.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5f:8f:a7:bf:47:95:e8:7b:71:be:4c:48:8b:d0:8e:6a:7a:26:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 3 02:51:00 2026 GMT
Not After : Aug 2 02:56:00 2027 GMT
Subject: CN=662D1CC066B2A336B34D4F7B43D3E9B4CFD2F13B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:12:4f:75:21:0b:99:f8:6e:8c:85:8e:b7:
2e:d7:f6:3a:dc:3c:b6:e3:d9:27:96:da:59:60:8f:
02:12:3f:0b:f5:ea:65:7b:de:17:37:25:5b:f6:11:
5f:23:4a:98:7a:19:9a:50:41:d5:fe:ee:57:ec:f4:
d5:c7:cf:75:65:5a:3f:09:df:c5:d8:26:f6:e9:dc:
16:31:f3:6c:01:f8:fb:c3:15:17:6c:1b:cc:f8:e2:
e2:4c:b3:f3:59:53:66:fd:64:e4:df:21:f1:e8:11:
f2:04:a1:de:4e:e4:c0:67:26:bf:a8:da:68:73:e0:
98:df:79:21:bf:a2:8e:8d:7d:89:07:0f:0a:79:82:
54:4e:48:2f:1a:df:4f:ca:25:a2:d1:8b:b6:3e:e2:
de:5f:8c:d7:48:5b:dd:55:19:48:73:e3:f5:84:16:
d3:37:75:61:99:ee:c0:d0:c4:44:dc:9c:03:dd:bc:
0b:83:5e:05:b0:8e:d3:98:07:6a:b9:c8:93:80:3a:
f4:85:e3:31:35:8d:c8:b2:9f:61:ed:3b:91:0b:36:
ef:c4:2a:66:9d:c3:12:ab:b7:8b:db:6b:3e:09:7f:
d2:2c:3d:83:79:94:12:57:dd:c7:00:38:52:c1:16:
57:df:93:3b:51:9f:8a:e5:57:f0:be:ca:43:65:4b:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:1C:C0:66:B2:A3:36:B3:4D:4F:7B:43:D3:E9:B4:CF:D2:F1:3B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.203.0/24
82.39.210.0/24
178.83.71.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6d:f9:45:7f:e6:bf:79:a7:df:f5:24:af:37:7f:2e:cf:51:
0b:7e:ea:f6:fa:d2:44:a7:fe:a6:37:85:18:d0:2d:54:d1:01:
b5:9d:39:c1:1a:fc:21:ae:b8:ad:53:d4:bb:b7:cf:b3:51:e0:
23:15:dc:99:55:f8:89:34:96:a4:96:dc:5c:a1:5c:b0:dd:39:
b5:27:e5:1f:2c:6e:fc:fb:94:90:7b:d8:16:1b:66:8f:e2:d3:
78:c3:6e:18:4c:08:73:20:bd:ae:31:4d:85:fa:f5:21:97:4a:
33:a3:d7:75:39:41:8c:87:da:39:3e:5b:5a:f8:a9:a4:d8:ba:
db:e0:7e:94:ff:3f:23:39:1d:73:c1:20:1c:ed:3d:ec:4d:c3:
cb:d3:a8:22:d1:5a:6d:e5:e3:a5:96:5d:df:25:db:8b:a5:50:
e7:65:df:7d:5e:b5:9c:a8:0e:38:d5:1a:e5:d9:12:88:d1:f8:
43:34:c8:a7:a8:4d:70:49:e8:25:b4:da:0a:2f:91:30:7d:63:
ad:29:86:5f:51:52:f8:59:f0:ac:c9:e6:34:25:1b:8a:8b:d4:
2e:67:78:35:5d:b1:ce:92:46:85:00:8d:38:88:2d:28:7a:11:
c0:fb:5f:11:be:8b:fb:e8:f9:11:df:59:a9:a8:dd:c4:38:20:
84:08:ad:09
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUK1+Pp79Hleh7cb5MSIvQjmp6Jg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MDMwMjUxMDBaFw0yNzA4MDIwMjU2MDBaMDMxMTAvBgNV
BAMTKDY2MkQxQ0MwNjZCMkEzMzZCMzRENEY3QjQzRDNFOUI0Q0ZEMkYxM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3RJPdSELmfhujIWOty7X9jrc
PLbj2SeW2llgjwISPwv16mV73hc3JVv2EV8jSph6GZpQQdX+7lfs9NXHz3VlWj8J
38XYJvbp3BYx82wB+PvDFRdsG8z44uJMs/NZU2b9ZOTfIfHoEfIEod5O5MBnJr+o
2mhz4JjfeSG/oo6NfYkHDwp5glROSC8a30/KJaLRi7Y+4t5fjNdIW91VGUhz4/WE
FtM3dWGZ7sDQxETcnAPdvAuDXgWwjtOYB2q5yJOAOvSF4zE1jciyn2HtO5ELNu/E
KmadwxKrt4vbaz4Jf9IsPYN5lBJX3ccAOFLBFlffkztRn4rlV/C+ykNlS9dfAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUZi0cwGayozazTU97Q9PptM/S8TswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhjL
AwQAUifSAwQAslNHMA0GCSqGSIb3DQEBCwUAA4IBAQCYbflFf+a/eaff9SSvN38u
z1ELfur2+tJEp/6mN4UY0C1U0QG1nTnBGvwhrritU9S7t8+zUeAjFdyZVfiJNJak
ltxcoVyw3Tm1J+UfLG78+5SQe9gWG2aP4tN4w24YTAhzIL2uMU2F+vUhl0ozo9d1
OUGMh9o5Plta+Kmk2Lrb4H6U/z8jOR1zwSAc7T3sTcPL06gi0Vpt5eOlll3fJduL
pVDnZd99XrWcqA441Rrl2RKI0fhDNMinqE1wSegltNoKL5EwfWOtKYZfUVL4WfCs
yeY0JRuKi9QuZ3g1XbHOkkaFAI04iC0oehHA+18Rvov76PkR31mpqN3EOCCECK0J
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:50 2026 by rpki-client