Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: YLO84EdCI9YSuHtwuZuK4xizBZc09QiDszB0jGWsO8Q=
Subject key identifier: FB:89:D7:53:0D:99:BB:5C:CD:B4:E9:77:CD:BC:D8:D8:FE:12:41:0F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7D359641EF9C057E260E7A4CFADF42B8C89B00CB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402215.roa
Signing time: Sat 29 Aug 2026 02:11:18 +0000
ROA not before: Sat 29 Aug 2026 02:06:18 +0000
ROA not after: Sat 28 Aug 2027 02:11:18 +0000
asID: 402215
IP address blocks: 82.22.49.0/24 maxlen: 24
82.27.95.0/24 maxlen: 24
82.39.65.0/24 maxlen: 24
82.41.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:35:96:41:ef:9c:05:7e:26:0e:7a:4c:fa:df:42:b8:c8:9b:00:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 29 02:06:18 2026 GMT
Not After : Aug 28 02:11:18 2027 GMT
Subject: CN=FB89D7530D99BB5CCDB4E977CDBCD8D8FE12410F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:6a:b6:8d:96:6b:15:fc:40:17:46:88:3c:
01:4e:a8:6b:0f:7a:62:df:7c:3d:e9:0b:48:78:01:
ad:af:0a:64:80:6c:b4:15:78:a3:11:28:34:43:72:
96:ba:15:47:0e:d2:8b:91:35:15:72:60:53:35:77:
a3:fb:4e:37:e4:4e:ba:f0:25:4e:1a:91:63:cd:c5:
11:ba:c3:14:6c:5b:eb:4e:fc:51:53:6b:bb:23:e1:
cd:1d:52:b7:15:3c:93:c3:9d:14:d9:db:bb:3d:29:
65:0c:36:3c:b6:9f:82:8a:d7:a8:85:fd:49:13:cc:
9e:2e:7e:94:e1:5f:d0:c0:66:f7:c3:fc:fd:33:0c:
da:b8:96:fd:c1:1e:0a:8a:d1:3e:36:d3:d2:20:bf:
99:e8:87:98:18:a5:09:fb:76:8d:9e:40:19:3e:90:
49:31:8a:c3:02:20:68:80:80:f3:73:5c:05:33:63:
cd:df:df:5d:b9:e0:79:96:2e:24:ce:3d:55:7f:a9:
53:89:de:84:28:9d:5d:0f:14:0f:88:55:cc:f6:70:
9f:f3:e0:80:53:5f:4c:86:ef:d9:60:d0:f4:c6:33:
c2:4f:04:bc:14:56:4e:37:38:5b:7e:0e:3d:05:10:
f9:8e:b8:d1:42:43:02:d0:97:f0:bf:2c:0b:67:06:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:89:D7:53:0D:99:BB:5C:CD:B4:E9:77:CD:BC:D8:D8:FE:12:41:0F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.49.0/24
82.27.95.0/24
82.39.65.0/24
82.41.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b6:11:84:25:ac:ed:7f:65:2f:a8:5e:6d:f4:1c:4b:e7:bf:
cb:08:b5:da:e3:1f:e5:e4:7e:a3:ee:95:28:3f:d4:bf:aa:48:
53:2d:71:af:76:15:13:9d:c1:e1:53:dd:5c:68:d0:e5:d6:38:
44:8e:fe:13:31:02:5c:94:94:7e:99:1d:4e:a7:59:40:51:47:
81:20:b0:b5:38:5b:61:87:44:66:14:61:d3:1a:52:6e:77:5a:
39:7a:6e:83:7e:aa:b3:b8:30:0e:98:8d:94:a7:7c:df:97:e6:
44:9b:f0:c2:e5:b7:84:ce:7a:e2:3f:d1:a4:5b:f5:9b:5d:c3:
f4:3e:a3:db:ed:38:ee:89:09:e4:ba:0a:0d:ca:8d:a5:5b:81:
ba:20:9d:c9:b0:87:03:fe:d0:63:b8:6e:62:a0:86:f8:1c:00:
93:07:6b:5a:e5:af:2b:82:1d:98:81:91:aa:e0:d8:2f:a5:4d:
d3:58:af:c7:98:46:c6:ea:96:fa:af:43:c7:8f:58:7d:a2:4c:
10:8f:43:f8:fd:2a:e8:e0:88:86:ed:06:ff:09:51:5c:0c:5a:
6b:00:c1:8c:54:1a:98:2c:c1:d5:fc:71:02:d5:f5:9e:82:00:
77:f9:7f:ad:dc:31:8b:ac:4e:bc:18:dd:3b:e4:e8:73:32:b6:
4d:22:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:16 2026 by rpki-client