Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: lQK2wcmNGI/WpFZT64bGabS2/rwmKN+gDoWA5NEEd5Q=
Subject key identifier: F4:CD:15:4F:AC:45:10:96:29:41:8A:6D:F4:B0:11:93:24:B3:5F:04
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7CB6A769E9D022EB3D4D1BF2A3C0595986E17E16
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
Signing time: Wed 24 Jun 2026 07:22:46 +0000
ROA not before: Wed 24 Jun 2026 07:17:46 +0000
ROA not after: Wed 23 Jun 2027 07:22:46 +0000
asID: 401776
IP address blocks: 82.39.210.0/24 maxlen: 24
178.83.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b6:a7:69:e9:d0:22:eb:3d:4d:1b:f2:a3:c0:59:59:86:e1:7e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 24 07:17:46 2026 GMT
Not After : Jun 23 07:22:46 2027 GMT
Subject: CN=F4CD154FAC45109629418A6DF4B0119324B35F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:7c:cf:a4:6b:6c:3a:b9:30:15:aa:c0:5c:
a8:26:52:f4:d1:c3:f5:9a:08:be:9f:8e:a3:0b:dc:
29:13:47:3f:7f:0d:db:bc:f2:9c:3e:62:b6:b5:02:
c0:14:31:fd:31:c3:34:bf:3d:78:96:b7:b1:db:ba:
6f:39:12:fb:46:fd:c9:8b:43:91:aa:da:e3:02:75:
4d:c4:16:75:d3:24:f7:7c:29:4e:eb:87:c3:0c:d9:
f6:a6:43:ef:b7:a2:45:16:7c:95:55:34:19:83:3e:
f2:3a:1e:d1:9e:91:e0:c4:df:41:ad:2c:59:4b:00:
11:6f:8e:b0:2d:c6:3e:85:a4:d8:2d:01:3d:a2:a4:
a6:69:f1:15:a1:ea:08:f0:7d:03:54:6d:7e:4e:fd:
33:b9:e8:b0:fe:e6:17:87:a0:f0:cd:2d:b2:3b:60:
10:c7:73:0a:b7:15:aa:dc:b6:c7:51:bf:c2:56:a6:
68:06:81:df:5f:16:4b:7d:5e:47:cd:81:5e:25:1a:
e7:9c:3d:54:38:08:5a:58:94:f1:5d:e9:e2:27:ba:
86:de:28:08:05:4f:bb:1c:2d:b1:05:7b:37:87:d9:
bb:bf:23:e5:9b:e4:b2:a7:e8:9b:e9:03:83:e0:1f:
26:51:60:38:3a:87:47:fa:db:99:ba:f0:0d:ad:04:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:15:4F:AC:45:10:96:29:41:8A:6D:F4:B0:11:93:24:B3:5F:04
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.210.0/24
178.83.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:95:83:3b:4f:dc:2e:82:a2:44:66:1a:0f:73:aa:5c:a9:be:
c0:f5:b8:af:82:f5:2e:f1:a0:78:f9:92:d3:fe:6f:13:27:8a:
e5:71:35:70:22:5d:ad:eb:24:9c:dd:72:22:55:9e:24:9a:9d:
72:04:4a:9f:b7:9e:ce:1e:91:9f:1d:b9:35:94:26:61:fc:ec:
7c:db:4d:44:8b:a2:c0:d8:6d:49:e8:87:61:cf:ae:54:90:fc:
97:98:20:bc:cb:9f:d9:05:62:9b:5e:cf:fa:d1:80:b7:ce:83:
14:22:aa:d7:81:58:e5:86:7a:fd:eb:59:ca:5e:0d:7c:58:c7:
44:8e:8e:9e:db:ac:96:e1:c7:83:9b:17:fc:44:c8:4e:11:62:
21:e5:ec:6f:66:3a:26:f3:54:64:70:7a:07:14:54:be:91:bf:
65:81:3d:e7:f0:88:d1:3a:e6:2b:d2:8a:e3:92:78:ef:f1:78:
18:42:02:c3:af:e9:15:d3:f8:b7:dd:e1:52:a5:bc:fb:29:6e:
90:00:ca:50:13:e6:60:c1:8a:6c:b8:59:3d:20:6d:6d:87:01:
65:94:d8:dc:8c:a5:a3:e0:98:33:2c:a9:b0:c3:8c:dd:5c:13:
4e:42:1b:97:f0:a6:ae:0f:89:ce:33:ae:ee:e4:6a:4c:0c:4d:
f0:b8:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:26 2026 by rpki-client