Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402257.roa
File: AS402257.roa (raw, json)
Hash identifier: f7EUXZab0luE1ppWqL47DiNv6DD54vvGy2jJ+vANew0=
Subject key identifier: CC:BE:6F:AB:29:B6:72:E8:B3:EA:5D:44:90:17:BC:90:E4:EC:B2:F8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3ADBF3EF5A55170B624CA26417127612B63BDB4F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402257.roa
Signing time: Sat 04 Apr 2026 04:01:12 +0000
ROA not before: Sat 04 Apr 2026 03:56:12 +0000
ROA not after: Sat 03 Apr 2027 04:01:12 +0000
asID: 402257
IP address blocks: 82.24.120.0/24 maxlen: 24
82.26.88.0/24 maxlen: 24
82.26.113.0/24 maxlen: 24
178.83.36.0/24 maxlen: 24
178.83.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Apr 2026 08:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:db:f3:ef:5a:55:17:0b:62:4c:a2:64:17:12:76:12:b6:3b:db:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 4 03:56:12 2026 GMT
Not After : Apr 3 04:01:12 2027 GMT
Subject: CN=CCBE6FAB29B672E8B3EA5D449017BC90E4ECB2F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:68:74:73:ed:a8:83:b1:41:ed:05:17:9c:
a0:6c:cf:e0:77:76:c0:68:d6:71:29:3f:f6:48:81:
80:f4:36:68:d0:ec:bd:eb:e3:80:f8:07:a6:de:79:
ea:9d:a4:97:d1:68:79:ba:86:3a:24:9b:0a:2a:d7:
a8:81:77:db:73:ba:bf:3d:d6:70:96:44:fb:e6:d0:
b9:5b:6b:cd:25:a2:74:ee:94:6e:c7:e7:f1:2c:a1:
a8:00:76:4f:99:32:7c:33:fd:af:07:2b:93:ad:af:
9d:17:11:70:00:dc:37:3e:eb:ab:6d:40:2c:46:7d:
ca:e1:32:a9:61:a6:60:45:46:1f:8c:5c:99:df:93:
5f:bf:3f:b8:3d:ea:db:d2:33:93:a4:66:5e:cd:64:
74:15:c7:80:7b:8e:9f:66:fa:29:79:fa:ae:41:6d:
49:79:04:7f:84:07:5d:d1:d4:01:cc:d9:09:15:9b:
a5:36:62:85:18:32:08:56:04:b6:6f:6d:14:af:e9:
07:76:9a:5d:bc:e0:e3:f9:f2:48:eb:ab:88:ed:b4:
47:4e:a1:ab:d9:f8:1b:15:f4:8f:02:71:20:4b:c7:
f2:d1:ba:ae:f2:b7:22:52:1a:77:35:c5:2b:1d:5c:
e5:6f:00:d1:ca:f1:52:62:96:27:23:5c:a0:79:10:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BE:6F:AB:29:B6:72:E8:B3:EA:5D:44:90:17:BC:90:E4:EC:B2:F8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.120.0/24
82.26.88.0/24
82.26.113.0/24
178.83.36.0/24
178.83.75.0/24
Signature Algorithm: sha256WithRSAEncryption
52:67:8a:18:5b:9e:c8:64:c7:e1:02:b8:a0:8a:3b:1e:22:1a:
60:dc:20:2a:df:a9:11:52:c6:dd:64:89:41:6b:16:32:9d:2c:
53:3b:a2:c1:04:89:92:81:25:e1:4e:76:13:47:a7:97:34:5c:
42:76:b8:fe:6d:b0:ce:86:29:b0:e5:48:55:c8:0d:22:43:27:
2b:ce:0e:c5:55:03:88:97:32:e3:ac:9d:3b:b5:38:3f:11:de:
cc:15:e6:be:16:2e:34:e2:2c:8f:87:40:84:7c:9c:fa:f6:2a:
7f:ec:65:49:5f:f7:b3:40:e5:af:67:ef:ee:8b:48:ca:d0:9f:
f0:0e:df:55:01:07:f8:2d:dd:49:26:0e:7d:3a:c1:89:5a:78:
d6:73:ff:3a:6e:23:fe:0a:2f:57:18:2b:55:25:e0:91:0f:88:
db:35:af:93:c5:9f:53:b8:2d:2a:96:62:dd:d7:c5:2d:9d:1d:
8e:b2:1d:db:46:8a:2e:f7:89:a2:16:07:08:ff:6e:36:1f:f3:
57:e1:76:c6:30:9c:a6:62:53:46:e3:e5:7c:c3:cc:c6:7a:67:
f7:50:10:eb:74:cc:8f:be:36:02:fc:82:e2:8d:00:a3:7c:5b:
9a:13:b2:6c:2c:ae:52:25:16:3f:d0:89:33:ed:84:b3:ae:b4:
04:35:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 16:56:18 2026 by rpki-client