Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: jb6h5mFHgOu5bE8GF0nFW6YDO9iMXa3dtWpGdGLKcrg=
Subject key identifier: F0:4A:B0:C9:2C:23:3A:C7:C0:BD:16:2C:8C:D5:4D:DA:92:F4:A5:70
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7C44A3B2EAD3A247B4E4DE46E608A095366B8D46
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
Signing time: Sun 28 Sep 2025 06:19:50 +0000
ROA not before: Sun 28 Sep 2025 06:14:50 +0000
ROA not after: Sun 27 Sep 2026 06:19:50 +0000
asID: 401776
IP address blocks: 82.25.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:44:a3:b2:ea:d3:a2:47:b4:e4:de:46:e6:08:a0:95:36:6b:8d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 28 06:14:50 2025 GMT
Not After : Sep 27 06:19:50 2026 GMT
Subject: CN=F04AB0C92C233AC7C0BD162C8CD54DDA92F4A570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:34:22:b0:46:6b:48:68:b0:a9:34:8c:d4:
13:de:86:94:fe:8b:7b:ce:17:e2:cf:1d:c7:95:78:
cb:2e:32:ec:bc:c1:7a:83:10:09:64:da:f1:85:60:
08:8b:9f:89:02:2d:26:d3:ef:7f:7b:c1:b8:d8:a9:
ca:a1:ad:7b:3c:15:f1:5a:79:b1:aa:56:46:58:29:
f4:c1:aa:94:8a:f7:ff:7c:60:e8:4e:1e:e2:5d:b1:
0b:11:55:3b:be:1d:7e:21:e3:bf:13:90:e0:a0:8e:
42:e4:e6:10:e0:54:30:ee:7a:ab:49:e3:3e:98:f1:
f0:f7:4f:e4:b4:f0:1b:45:0d:83:3d:f3:0f:17:22:
44:a7:07:4c:40:39:4e:40:0e:d0:2c:1e:f2:fa:20:
37:e2:c5:7e:78:9a:47:02:4f:77:59:03:b8:56:d2:
da:f2:fd:16:68:f0:d1:be:d7:a7:94:7b:f8:7a:b4:
c6:3b:e4:f2:2f:f6:2c:c3:a3:a9:9b:59:94:95:60:
2c:b7:7e:e8:d5:0f:57:d8:9a:dd:99:7f:0f:93:d7:
8a:bc:d3:42:12:1d:4f:54:c6:53:4e:8c:46:ac:4b:
cb:32:97:c9:8b:21:b7:16:bc:f9:e0:0f:42:8d:3d:
f6:a6:20:77:99:aa:55:b5:d3:e2:03:0c:e5:00:aa:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4A:B0:C9:2C:23:3A:C7:C0:BD:16:2C:8C:D5:4D:DA:92:F4:A5:70
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.39.0/24
Signature Algorithm: sha256WithRSAEncryption
23:87:95:a8:c7:81:1b:31:69:30:b7:81:e2:c2:ce:69:c7:87:
98:d0:af:81:3d:8e:41:10:17:6d:fb:d2:b2:4e:e4:48:71:4e:
0e:fb:b1:5a:37:b8:99:1a:7f:c6:5b:d4:28:e6:c2:7c:9d:c6:
28:92:2d:38:45:c6:e6:12:20:df:09:b1:4d:40:b6:d6:29:08:
00:c9:db:77:ef:f8:28:10:80:93:fe:1f:5d:7c:8b:ac:4d:ff:
3c:22:d7:13:1b:6a:74:9e:5b:80:80:6f:a3:e3:f5:3d:fd:bd:
55:92:66:1e:23:a5:9e:8c:40:1e:f8:9b:7e:e7:4a:e3:09:1a:
8e:45:38:15:85:78:15:b7:65:9e:6d:b3:3f:20:fa:04:27:d9:
d7:9e:bb:ed:58:01:53:f0:28:21:bf:eb:17:9d:33:1e:bb:0a:
20:12:52:3e:84:d1:c4:8a:6d:26:5d:52:8c:4f:5d:88:00:89:
4a:05:00:29:81:8b:4f:61:59:0e:51:9e:93:a0:f9:46:f7:1c:
ac:97:94:4c:bf:88:01:e3:36:3f:49:66:c1:23:5c:51:cd:02:
b3:8d:18:2c:7f:2f:64:75:aa:a0:0e:8c:0c:bc:98:b7:34:0c:
0a:c0:fc:46:35:c0:c9:49:f5:11:38:6d:24:87:1e:16:b3:bd:
6c:22:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:29:27 2025 by rpki-client