Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: Ou8JvdJ7D+7DnBHJGsu+YMN4KCYoid3fWbV3cYlaQCQ=
Subject key identifier: E5:4D:88:69:9B:28:D5:0B:E6:23:CC:CC:93:28:55:30:7D:BE:4D:4C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2824EB62488C4210055C8567A5E25C26C8557F08
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
Signing time: Tue 07 Jul 2026 10:02:53 +0000
ROA not before: Tue 07 Jul 2026 09:57:53 +0000
ROA not after: Tue 06 Jul 2027 10:02:53 +0000
asID: 402265
IP address blocks: 82.39.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:24:eb:62:48:8c:42:10:05:5c:85:67:a5:e2:5c:26:c8:55:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 7 09:57:53 2026 GMT
Not After : Jul 6 10:02:53 2027 GMT
Subject: CN=E54D88699B28D50BE623CCCC932855307DBE4D4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:5b:d6:ce:b1:55:00:bc:b6:a0:b0:56:ed:
77:a3:63:2a:fa:08:54:6b:f0:2b:10:e6:77:32:b3:
a8:70:2b:4a:b4:29:6f:41:8f:da:7b:91:98:79:ea:
d9:54:04:ce:f0:86:7e:e2:89:1e:0a:a1:09:5e:96:
30:b6:f9:cd:34:b3:1f:e4:17:19:17:c1:7c:de:11:
15:d2:60:80:af:e6:92:cb:8f:d3:d7:b6:60:f4:1c:
77:43:4d:90:fc:2b:41:78:6f:d8:0f:43:61:e6:31:
29:aa:2c:93:23:5d:b1:76:47:6d:3e:6d:0f:ef:f7:
53:03:1c:af:9f:cc:f3:e7:fe:6d:af:b1:6b:fb:c1:
58:cf:57:2b:94:f7:f8:af:11:1e:67:6c:be:69:a8:
1d:2e:5d:b1:61:c6:a6:30:f3:cd:de:9a:4e:ce:92:
e0:65:a3:ad:9b:b5:a3:9b:c6:c4:4f:49:17:11:66:
1f:e0:eb:37:a7:11:0f:59:f1:75:60:30:9b:d8:1c:
22:40:56:31:7e:6f:ba:77:91:66:fb:38:7b:12:5a:
26:ed:54:a5:71:40:ce:2f:cc:25:ae:ae:78:9b:8f:
60:80:03:14:4d:ed:51:45:53:e8:64:d7:81:cb:e0:
a3:4b:dd:f6:3c:a8:7b:94:28:7e:32:98:c5:b5:2f:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4D:88:69:9B:28:D5:0B:E6:23:CC:CC:93:28:55:30:7D:BE:4D:4C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b3:48:3a:0b:d1:c2:cc:3a:6a:07:bc:41:fc:13:51:27:a3:
77:57:a3:14:a3:5d:0a:27:1b:a2:37:0b:58:e0:bf:9d:28:ea:
c8:82:97:26:9c:7d:6a:80:06:e6:da:c8:b8:f6:ee:f9:50:77:
34:dc:d7:30:58:a6:8a:66:ac:34:e6:50:7f:c8:bd:ef:14:92:
19:86:f7:5e:6b:1c:c5:b0:76:3c:6a:0a:4f:71:b3:e2:d9:64:
96:3a:16:b6:a2:ee:15:dc:b1:bf:95:c3:be:0f:9c:e1:6f:ba:
44:38:b0:c7:33:a9:91:89:3e:42:bb:c7:1f:93:4d:c8:3c:a4:
1c:5f:55:13:ee:f6:8d:50:65:20:83:8c:2a:2f:ca:8e:10:87:
66:14:0a:37:fa:75:45:be:48:f5:f1:09:d4:57:89:82:31:c4:
a0:d8:79:7f:fb:eb:5d:38:fc:ce:4f:71:a6:b0:a8:ae:fa:63:
c9:07:6c:70:c7:92:75:2e:86:f4:8a:a3:1a:07:ff:df:d1:0e:
e2:21:ad:2c:97:ce:42:e0:0b:87:7e:20:bc:b8:a2:b6:45:70:
eb:db:81:56:25:d7:3e:4d:9e:e9:ec:86:2e:94:11:a7:fb:2d:
d5:7c:7b:92:b8:42:8b:80:c7:28:b8:b5:28:02:c9:76:b1:b8:
12:58:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:57 2026 by rpki-client