Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: OtP44/x9+iiTRXwU3RZqq4u/c7nJYV9/HPpvhcHf3iM=
Subject key identifier: BA:86:56:8E:43:A1:82:3A:37:0F:3F:98:23:13:77:57:40:E6:D5:DF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 122EF0C53331629DFBC31438008B8EDC441752CB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402215.roa
Signing time: Wed 27 May 2026 05:37:33 +0000
ROA not before: Wed 27 May 2026 05:32:33 +0000
ROA not after: Wed 26 May 2027 05:37:33 +0000
asID: 402215
IP address blocks: 82.26.132.0/24 maxlen: 24
82.39.233.0/24 maxlen: 24
84.75.145.0/24 maxlen: 24
178.83.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2e:f0:c5:33:31:62:9d:fb:c3:14:38:00:8b:8e:dc:44:17:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 27 05:32:33 2026 GMT
Not After : May 26 05:37:33 2027 GMT
Subject: CN=BA86568E43A1823A370F3F982313775740E6D5DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:42:d6:8e:5f:65:6f:59:d5:fe:8e:1b:17:
ab:82:5e:18:a5:bb:34:04:75:0f:24:00:7e:b3:72:
15:62:78:08:bc:e8:37:5c:e1:55:b3:23:05:51:2e:
cd:53:1b:a7:dc:24:d5:31:3c:21:31:b3:2f:44:b0:
81:03:07:ca:39:5d:40:d5:2b:bf:38:00:0d:a2:31:
44:d3:e5:ee:f3:54:18:fd:8f:0a:1a:df:44:6b:16:
5b:10:e9:d2:7a:79:e9:c5:73:ed:bd:07:d0:4c:46:
c4:d4:b9:a2:63:a1:e1:f1:35:1f:eb:a9:a2:00:81:
93:01:32:37:ec:f0:8b:8a:f8:68:f5:45:fb:21:46:
21:47:47:c8:43:05:b6:22:fc:68:57:69:2c:10:b3:
3a:ae:09:4d:98:c0:a4:b2:9b:5e:7e:77:5f:e4:b2:
91:bc:6b:bb:7f:72:57:96:ac:1b:bc:3f:9c:e9:4e:
a2:77:cb:32:6c:c6:68:bd:84:dc:b7:3a:25:a8:e2:
3d:fe:8f:5b:88:59:99:95:a2:7b:37:53:02:9c:40:
ad:14:ab:ff:13:24:70:a2:9a:67:b4:57:2e:cd:b5:
4b:0e:a6:11:58:b8:2f:1a:b3:7f:db:c7:64:db:00:
36:2a:e1:72:a5:08:ef:c5:0d:e4:b7:82:a3:3e:35:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:86:56:8E:43:A1:82:3A:37:0F:3F:98:23:13:77:57:40:E6:D5:DF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.132.0/24
82.39.233.0/24
84.75.145.0/24
178.83.165.0/24
Signature Algorithm: sha256WithRSAEncryption
62:36:17:02:bb:e3:11:c2:85:fa:56:e0:f5:2c:48:a0:f5:f7:
a7:dd:b6:c6:0a:51:b4:de:30:b2:50:03:d3:46:c6:d3:07:4b:
8c:98:1c:d3:96:40:5a:ae:5e:8e:41:68:5c:a2:d4:8f:d6:b0:
df:2e:b3:fb:4c:7d:a9:b7:92:a2:5b:13:ea:0e:f2:12:e8:fb:
bc:fe:fc:38:11:8b:c0:80:93:a2:b0:fd:b8:3e:8c:61:75:87:
71:25:94:48:22:83:86:50:69:9b:f8:97:16:c3:0a:75:f2:3b:
14:dc:63:e9:1a:6d:71:4e:17:6d:82:34:52:a3:96:97:f3:02:
c5:81:df:e6:20:fa:c7:70:b4:d6:4f:6b:ca:bb:13:ac:e4:4a:
db:03:5c:3a:48:56:d6:5f:c2:3c:6b:ff:99:4f:0e:9d:ad:b7:
ec:77:f5:d6:fc:e8:14:43:a3:f3:13:4d:db:60:9f:e9:34:42:
f8:28:e1:7e:36:0e:ac:ff:a5:ed:d4:74:76:87:04:96:66:be:
52:61:d9:1b:39:2c:44:0d:1a:43:5e:01:81:3c:53:91:c7:b7:
8a:c7:61:01:b2:12:97:cf:46:af:b1:ff:84:1d:8e:6e:27:16:
73:4b:ee:a3:4a:06:c6:37:aa:0e:2a:0b:96:0f:67:4f:57:f0:
6a:dc:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:31 2026 by rpki-client