Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402204.roa
File: AS402204.roa (raw, json)
Hash identifier: V2TcM/1BX3+4piiHgzUN6HVB61N1IXVrwPqmYIuY/Cs=
Subject key identifier: D5:6E:B7:14:AA:70:BE:7A:2F:31:C1:B2:10:A1:9B:05:E8:BF:A9:C8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0FDC5D1C2FAF985D69DBB68248D79BFB766007E8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402204.roa
Signing time: Wed 25 Feb 2026 10:21:07 +0000
ROA not before: Wed 25 Feb 2026 10:16:07 +0000
ROA not after: Wed 24 Feb 2027 10:21:07 +0000
asID: 402204
IP address blocks: 82.27.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:dc:5d:1c:2f:af:98:5d:69:db:b6:82:48:d7:9b:fb:76:60:07:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 25 10:16:07 2026 GMT
Not After : Feb 24 10:21:07 2027 GMT
Subject: CN=D56EB714AA70BE7A2F31C1B210A19B05E8BFA9C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:19:dc:23:1d:3b:29:36:26:47:40:98:c7:
00:2f:83:67:90:a8:ff:34:9a:a0:c8:e8:03:7d:77:
c2:a0:cf:ed:0c:6b:af:52:a1:42:9e:4d:f7:7c:91:
63:4c:55:d8:83:2f:42:f7:c4:f3:2a:39:e1:3b:37:
3c:3f:58:52:91:ac:5a:be:1a:1b:d6:08:e2:f5:19:
7d:e2:0a:c1:0a:a6:d8:30:eb:dd:62:02:31:0f:1c:
b7:69:44:09:c0:cb:2b:b3:ba:ad:92:49:39:f1:db:
f0:e3:41:e1:c7:83:c4:9e:85:39:12:3e:45:81:b9:
9b:e9:69:4d:d8:27:d8:13:b8:93:d2:f5:db:8c:3b:
69:7f:f5:77:2c:27:39:1d:2e:7b:03:a2:a9:d5:1b:
ee:39:52:ba:20:28:c3:bb:ae:85:ff:3f:e0:d6:52:
74:30:27:3b:67:3d:1e:91:dd:5a:1c:51:26:8f:1b:
93:e2:be:5d:9e:a3:54:12:78:4f:2a:5b:10:fc:c3:
72:98:fd:89:1e:ca:de:85:b6:0f:ad:81:17:9a:ae:
d3:06:5a:06:0e:21:9b:7b:c3:bd:11:ba:f1:28:a0:
3b:7d:b3:eb:c2:6d:c7:4b:3b:ea:c4:c2:54:95:21:
db:3d:65:54:0e:b3:48:26:e4:65:81:4d:69:94:c3:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6E:B7:14:AA:70:BE:7A:2F:31:C1:B2:10:A1:9B:05:E8:BF:A9:C8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402204.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1a:f5:ef:b9:3a:9a:82:e7:1e:40:2f:02:ea:e4:8e:2f:e5:
e5:fc:fe:a7:53:a9:85:b6:c7:e2:0f:02:f7:80:b0:93:60:56:
b6:46:5b:dc:99:ec:25:a7:9f:1f:b5:93:b6:73:2d:9c:92:46:
83:c9:29:44:62:40:c1:43:13:cb:5f:b4:cc:53:09:20:5f:e6:
d7:75:7f:ad:7a:b9:1c:b2:26:d8:3f:ae:06:82:9f:ff:0b:26:
5b:8d:4d:5e:1e:c8:b0:74:7c:f3:c1:ab:49:10:9c:95:24:2b:
b4:da:7d:f4:71:39:fe:fe:29:14:aa:fa:6b:00:e9:57:cd:af:
8e:61:05:d4:fc:fb:d5:47:84:5b:45:63:28:0c:16:57:38:e7:
06:fb:20:be:c7:98:af:6f:c0:02:3c:22:7b:39:8c:f7:9d:10:
f9:16:79:5b:99:6e:27:47:34:20:e6:9f:75:a4:b4:6d:1a:cd:
fd:90:04:19:ac:64:3a:10:42:3f:ff:1f:c4:c7:8a:f8:a2:bb:
9a:0b:e5:47:fa:09:c8:39:2f:0b:05:4d:8b:11:2f:1c:ac:76:
0e:ef:52:b9:b4:7a:05:13:0b:97:de:cb:56:cd:c0:df:ea:de:
76:7f:9e:c2:43:c6:57:01:1e:1d:79:ca:01:1b:a4:14:2c:0a:
c8:b9:d8:0e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUD9xdHC+vmF1p27aCSNeb+3ZgB+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAyMjUxMDE2MDdaFw0yNzAyMjQxMDIxMDdaMDMxMTAvBgNV
BAMTKEQ1NkVCNzE0QUE3MEJFN0EyRjMxQzFCMjEwQTE5QjA1RThCRkE5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7xncIx07KTYmR0CYxwAvg2eQ
qP80mqDI6AN9d8Kgz+0Ma69SoUKeTfd8kWNMVdiDL0L3xPMqOeE7Nzw/WFKRrFq+
GhvWCOL1GX3iCsEKptgw691iAjEPHLdpRAnAyyuzuq2SSTnx2/DjQeHHg8SehTkS
PkWBuZvpaU3YJ9gTuJPS9duMO2l/9XcsJzkdLnsDoqnVG+45UrogKMO7roX/P+DW
UnQwJztnPR6R3VocUSaPG5Pivl2eo1QSeE8qWxD8w3KY/Ykeyt6Ftg+tgReartMG
WgYOIZt7w70RuvEooDt9s+vCbcdLO+rEwlSVIds9ZVQOs0gm5GWBTWmUw8ujAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU1W63FKpwvnovMcGyEKGbBei/qcgwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAyMjA0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhtc
MA0GCSqGSIb3DQEBCwUAA4IBAQCbGvXvuTqaguceQC8C6uSOL+Xl/P6nU6mFtsfi
DwL3gLCTYFa2Rlvcmewlp58ftZO2cy2ckkaDySlEYkDBQxPLX7TMUwkgX+bXdX+t
erkcsibYP64Ggp//CyZbjU1eHsiwdHzzwatJEJyVJCu02n30cTn+/ikUqvprAOlX
za+OYQXU/PvVR4RbRWMoDBZXOOcG+yC+x5ivb8ACPCJ7OYz3nRD5FnlbmW4nRzQg
5p91pLRtGs39kAQZrGQ6EEI//x/Ex4r4oruaC+VH+gnIOS8LBU2LES8crHYO71K5
tHoFEwuX3stWzcDf6t52f57CQ8ZXAR4decoBG6QULArIudgO
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:15:22 2026 by rpki-client