Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401881.roa
File: AS401881.roa (raw, json)
Hash identifier: rE+Ou017yKUlKwxLoMpi6vICm5UY09ejEWlOKqy7UmM=
Subject key identifier: 1C:58:9E:57:9A:3F:15:5E:76:75:EF:F3:B1:C8:9A:BE:E5:47:76:F8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 29B945EC97F9B41F63B2DBBDE504DD66FF261A29
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401881.roa
Signing time: Thu 28 May 2026 13:54:23 +0000
ROA not before: Thu 28 May 2026 13:49:23 +0000
ROA not after: Thu 27 May 2027 13:54:23 +0000
asID: 401881
IP address blocks: 82.41.72.0/24 maxlen: 24
82.41.75.0/24 maxlen: 24
82.41.98.0/24 maxlen: 24
82.41.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b9:45:ec:97:f9:b4:1f:63:b2:db:bd:e5:04:dd:66:ff:26:1a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 28 13:49:23 2026 GMT
Not After : May 27 13:54:23 2027 GMT
Subject: CN=1C589E579A3F155E7675EFF3B1C89ABEE54776F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:33:12:50:74:2c:98:34:2e:d5:45:21:99:
4e:8c:73:78:47:5c:41:84:70:69:22:5c:10:d1:1c:
66:60:60:18:d7:af:5c:1b:86:7b:c6:81:bf:26:34:
60:af:fc:48:ab:5b:61:a5:f6:73:04:4f:44:2f:a3:
0a:25:0e:8c:98:5f:71:6e:12:ee:2d:ff:b8:22:0f:
4e:01:3d:d4:c3:71:9f:8e:47:85:26:97:29:f2:27:
80:3c:19:e5:f3:a5:72:db:c5:26:19:42:c2:34:8c:
2f:59:8a:97:89:ec:8b:a2:b6:67:3d:b1:07:93:6e:
da:30:92:ad:08:b7:6b:f1:97:1a:2c:14:55:6d:76:
e5:c8:e3:a7:cd:f4:a1:d9:30:75:3c:28:20:58:bf:
0a:b1:a2:a9:e2:ad:5b:97:b8:a8:4b:ef:ef:99:c0:
40:fb:15:72:c6:cf:f2:2a:b1:d4:9c:18:13:3d:8a:
a4:1b:39:8f:68:f6:e8:73:86:51:6c:05:42:bc:57:
a3:a7:ca:3e:7e:56:02:d0:c9:ce:e7:84:5f:63:8e:
f9:7b:46:dd:d0:6d:df:c1:82:e7:f9:52:c4:19:2e:
34:8e:d9:94:64:34:2a:75:be:72:ba:e7:0d:a0:b7:
6b:e1:79:9f:8c:a4:40:d4:a8:ef:0b:58:81:10:12:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:58:9E:57:9A:3F:15:5E:76:75:EF:F3:B1:C8:9A:BE:E5:47:76:F8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.72.0/24
82.41.75.0/24
82.41.98.0/24
82.41.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0e:f6:68:94:7e:38:18:86:4f:c7:d5:3a:70:ef:06:56:99:
6c:88:5e:e9:a3:66:56:42:62:32:c5:c4:21:2f:d5:53:ca:3e:
f7:13:83:fe:79:e0:66:92:7f:ac:33:41:e9:50:71:1d:9d:cd:
7e:18:9c:5b:c9:f5:87:c5:56:76:f7:5c:7a:76:4e:4a:84:62:
f7:9b:e2:90:a8:1e:ca:6b:b6:5b:a3:8f:46:d4:c5:69:c0:05:
42:ce:2a:55:ab:4e:12:d8:8c:26:e4:a9:86:7f:94:46:68:b8:
11:64:ec:6e:8c:8e:70:43:7e:ee:4e:a1:c4:08:a9:12:24:ba:
51:e3:a5:24:75:4f:ca:f4:ea:9f:5c:4b:9b:59:6e:06:7e:cf:
7b:cd:f2:61:5b:22:d2:e1:9d:c4:45:4b:b9:61:27:76:a0:05:
e7:5b:56:8f:37:0c:db:0b:48:78:16:e1:8f:61:12:15:ff:7d:
ad:0d:d6:ad:83:a1:02:97:41:a8:81:4e:a0:8e:da:91:8a:31:
17:db:bd:67:42:02:a9:34:60:ad:9d:d7:50:66:ab:1e:e8:ca:
eb:35:e7:f0:56:3d:60:bd:30:d9:b6:c5:38:f4:a8:fc:73:55:
80:2d:d7:30:c7:fb:15:2f:d0:5d:b2:09:f2:c2:75:3e:6a:5d:
3d:94:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:11:27 2026 by rpki-client