Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: I4xlbGokhmLplhtcKuVoAQbKTkvv4TwZZupORIHCy/o=
Subject key identifier: 9C:F3:FC:C2:BC:D0:F8:17:0B:A9:E7:A5:70:E3:C7:3C:F8:75:88:9D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 17D63BB5D03B838A6525CE91CB321856D7C7A389
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402215.roa
Signing time: Mon 13 Jul 2026 08:31:26 +0000
ROA not before: Mon 13 Jul 2026 08:26:26 +0000
ROA not after: Mon 12 Jul 2027 08:31:26 +0000
asID: 402215
IP address blocks: 82.21.200.0/24 maxlen: 24
82.23.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d6:3b:b5:d0:3b:83:8a:65:25:ce:91:cb:32:18:56:d7:c7:a3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 13 08:26:26 2026 GMT
Not After : Jul 12 08:31:26 2027 GMT
Subject: CN=9CF3FCC2BCD0F8170BA9E7A570E3C73CF875889D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:81:01:ad:15:72:95:55:c7:fb:26:52:64:
dc:0a:fd:3d:de:c5:f1:b2:93:8d:2c:4a:d9:8f:f4:
a8:e2:df:2c:bb:4b:da:37:6d:f5:73:73:cf:26:ec:
27:cf:6e:d7:8f:8d:18:08:9d:29:2e:e8:8f:bd:ba:
f3:74:d0:da:c2:36:ea:7e:0f:69:a8:bd:59:67:15:
a4:1d:6d:2a:d3:52:f8:c4:52:24:37:79:4f:08:93:
17:95:25:c4:72:36:89:e3:6c:d7:80:38:22:18:42:
ba:3b:58:cd:13:3e:50:a9:eb:e1:43:99:04:05:66:
a5:bf:26:ff:46:49:49:ba:7e:4e:5e:f6:cc:25:a2:
fe:26:b5:71:de:49:48:0b:8b:c1:cd:1f:cd:95:52:
e2:fc:46:31:3c:cc:cf:88:87:76:b1:94:47:60:9c:
71:95:13:11:02:28:58:da:17:f8:20:e2:a3:71:f0:
0e:16:27:b0:1a:9e:ae:96:3c:b4:20:99:4b:fd:56:
77:ee:0b:19:5a:6d:e3:0f:09:49:72:f4:e8:21:fb:
70:08:7f:d1:21:dd:07:82:d1:3b:60:0e:b3:42:9e:
51:8e:96:e8:58:4b:d7:71:a4:43:43:c0:fd:8e:42:
4e:f5:b5:44:65:a0:a5:6a:ea:e8:eb:57:8f:a6:0b:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F3:FC:C2:BC:D0:F8:17:0B:A9:E7:A5:70:E3:C7:3C:F8:75:88:9D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.200.0/24
82.23.142.0/24
Signature Algorithm: sha256WithRSAEncryption
37:19:4a:da:c9:35:1c:92:88:38:1a:b5:f6:78:41:54:95:41:
e5:c8:19:8d:29:1d:57:c9:ef:51:bc:2f:02:76:c8:80:44:9a:
47:e6:14:a3:77:24:4f:61:8f:ed:69:78:82:d6:7f:2c:6c:1a:
1f:64:0b:ad:25:aa:38:7a:2f:43:30:ba:c0:93:34:bd:e6:ee:
f1:06:8d:d0:bc:f7:6a:49:b5:f5:50:44:a7:9b:a0:6c:d9:9d:
7f:af:82:b5:3b:7e:b4:d0:03:af:93:aa:3f:cb:d4:7f:a3:51:
cf:1a:6f:40:bc:45:c3:6b:b8:73:9b:37:47:29:08:c7:94:c2:
da:67:d9:cf:8c:a6:2b:75:61:33:58:1b:1a:da:10:ab:49:d0:
83:56:fb:8a:e6:0c:2e:42:dc:d9:97:21:a4:29:96:1b:6c:41:
30:5a:9d:0a:bb:b9:58:54:cb:c7:a6:00:c0:48:cb:4b:09:d5:
15:83:fe:91:40:4f:b3:19:bd:d2:d9:15:87:31:bb:bb:40:d8:
a8:44:dd:d1:a4:ca:4a:4b:56:c8:8a:de:13:f9:7b:9e:6e:f3:
d3:c6:d7:2a:10:1e:7f:e3:ca:25:59:de:69:c2:5a:7a:33:04:
0b:9b:e9:98:34:43:5c:da:14:45:87:ab:b1:70:14:8a:4f:0b:
c7:28:5c:94
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUF9Y7tdA7g4plJc6RyzIYVtfHo4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MTMwODI2MjZaFw0yNzA3MTIwODMxMjZaMDMxMTAvBgNV
BAMTKDlDRjNGQ0MyQkNEMEY4MTcwQkE5RTdBNTcwRTNDNzNDRjg3NTg4OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVIoEBrRVylVXH+yZSZNwK/T3e
xfGyk40sStmP9Kji3yy7S9o3bfVzc88m7CfPbtePjRgInSku6I+9uvN00NrCNup+
D2movVlnFaQdbSrTUvjEUiQ3eU8IkxeVJcRyNonjbNeAOCIYQro7WM0TPlCp6+FD
mQQFZqW/Jv9GSUm6fk5e9swlov4mtXHeSUgLi8HNH82VUuL8RjE8zM+Ih3axlEdg
nHGVExECKFjaF/gg4qNx8A4WJ7Aanq6WPLQgmUv9VnfuCxlabeMPCUly9Ogh+3AI
f9Eh3QeC0TtgDrNCnlGOluhYS9dxpENDwP2OQk71tURloKVq6ujrV4+mCxVBAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUnPP8wrzQ+BcLqeelcOPHPPh1iJ0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAyMjE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhXI
AwQAUheOMA0GCSqGSIb3DQEBCwUAA4IBAQA3GUrayTUckog4GrX2eEFUlUHlyBmN
KR1Xye9RvC8CdsiARJpH5hSjdyRPYY/taXiC1n8sbBofZAutJao4ei9DMLrAkzS9
5u7xBo3QvPdqSbX1UESnm6Bs2Z1/r4K1O3600AOvk6o/y9R/o1HPGm9AvEXDa7hz
mzdHKQjHlMLaZ9nPjKYrdWEzWBsa2hCrSdCDVvuK5gwuQtzZlyGkKZYbbEEwWp0K
u7lYVMvHpgDASMtLCdUVg/6RQE+zGb3S2RWHMbu7QNioRN3RpMpKS1bIit4T+Xue
bvPTxtcqEB5/48olWd5pwlp6MwQLm+mYNENc2hRFh6uxcBSKTwvHKFyU
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:18 2026 by rpki-client