Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: 6Cj4AyqbiGlfUAF61NHALO0ckkP//n6Gqj1zjx/FaRw=
Subject key identifier: 13:A5:96:94:A2:5B:74:0B:B3:72:8F:86:E9:C3:C4:39:21:49:B2:30
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 59A2531D99174D57B4D65D401CBA006357BA9626
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
Signing time: Mon 06 Apr 2026 15:01:26 +0000
ROA not before: Mon 06 Apr 2026 14:56:26 +0000
ROA not after: Mon 05 Apr 2027 15:01:26 +0000
asID: 402265
IP address blocks: 84.75.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a2:53:1d:99:17:4d:57:b4:d6:5d:40:1c:ba:00:63:57:ba:96:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 6 14:56:26 2026 GMT
Not After : Apr 5 15:01:26 2027 GMT
Subject: CN=13A59694A25B740BB3728F86E9C3C4392149B230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:45:5c:e5:7c:24:20:13:e8:80:f6:68:6b:
de:25:28:2b:f6:a8:a5:54:42:d4:44:8c:25:b4:e9:
51:32:f9:88:ee:4c:da:25:ba:46:bd:99:3f:b5:54:
40:67:d8:3e:6d:47:5a:ae:de:c7:77:e0:95:c9:4f:
6a:ab:c0:dd:c2:7e:19:32:f8:4c:5c:2d:18:36:9a:
61:c9:41:58:ef:48:8e:c6:e6:e7:02:21:1e:48:1b:
c2:61:10:2e:72:06:08:97:68:85:15:c3:ea:f4:57:
f8:5b:78:2f:53:3b:5a:c9:6c:38:ca:fe:5a:3c:91:
55:4b:40:78:7f:f5:90:27:9c:3e:f7:8f:c3:5a:74:
91:45:53:85:26:d3:ba:d6:56:a1:a6:8e:4a:7a:5b:
0f:d8:f1:e3:e2:cf:42:9c:6f:1e:af:fa:07:10:fe:
c3:7d:96:18:92:7d:90:8c:bf:cd:cf:d7:b8:9a:96:
1a:07:95:02:e5:0f:cd:51:3b:13:3e:b2:7d:ce:fe:
04:59:b5:ab:42:64:21:16:9f:ce:5a:27:4f:0d:cf:
1b:3b:68:9b:41:fd:83:2e:ad:ce:68:ca:9a:8c:cc:
07:70:59:97:df:57:f8:fd:3b:ca:c5:eb:5b:fe:9c:
d1:8a:2d:a8:d5:dc:55:06:4f:dd:74:4c:8d:96:a1:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A5:96:94:A2:5B:74:0B:B3:72:8F:86:E9:C3:C4:39:21:49:B2:30
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.153.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a2:e4:7c:af:a0:ee:41:fa:28:87:71:2e:63:3a:d7:29:40:
ca:f6:18:c3:50:77:71:78:c4:b3:26:2f:1d:68:24:a8:58:99:
09:48:24:14:4a:fa:e8:9c:c9:3c:01:67:7e:c1:da:f9:ac:11:
e1:1f:5b:0a:7d:ce:37:1b:a9:ed:1d:b6:f2:e6:b9:fb:e7:5a:
34:48:69:61:94:4e:2b:38:d0:44:c7:54:fc:b9:00:11:71:60:
ac:17:ca:e1:9e:3c:5b:84:4e:d8:04:ab:dc:5f:f8:2a:83:8b:
75:2a:6f:e4:02:91:c3:a9:b4:6f:ae:3c:c7:3f:90:1c:3f:b0:
c3:25:7e:43:0c:4e:53:7e:98:3a:0c:7a:d1:4e:0f:87:f3:3c:
e8:c0:cb:76:b2:39:ee:75:e0:61:9c:da:2f:24:b6:01:ae:41:
83:3e:fa:74:79:c4:71:36:00:16:9a:9b:39:1a:9e:e0:33:c2:
e0:87:e9:9f:2e:3a:62:70:f7:e2:c8:26:42:e6:51:ae:48:e4:
90:04:2d:af:89:88:58:45:6a:5d:c7:11:94:98:2a:8f:4e:49:
dc:dd:f3:ff:21:ea:2b:f7:93:cc:f0:99:72:c8:28:24:7d:37:
8a:fd:64:94:99:b3:b5:fa:a8:cd:62:3c:3b:70:95:39:99:f6:
a5:07:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:34 2026 by rpki-client