Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
File: AS402276.roa (raw, json)
Hash identifier: cBcbs9/Z1G4Qew2N5yVTNnS48i4boNUD3hQWR6JDhRM=
Subject key identifier: 50:DB:E4:C7:9B:FD:C1:D5:25:27:09:32:84:3D:46:62:6E:7B:47:B8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 35DEB69365A42CD92403BF3036B5F31DDA101388
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
Signing time: Tue 07 Jul 2026 06:28:19 +0000
ROA not before: Tue 07 Jul 2026 06:23:19 +0000
ROA not after: Tue 06 Jul 2027 06:28:19 +0000
asID: 402276
IP address blocks: 82.39.230.0/24 maxlen: 24
82.39.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:de:b6:93:65:a4:2c:d9:24:03:bf:30:36:b5:f3:1d:da:10:13:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 7 06:23:19 2026 GMT
Not After : Jul 6 06:28:19 2027 GMT
Subject: CN=50DBE4C79BFDC1D525270932843D46626E7B47B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fd:37:a8:74:e5:52:cd:2b:f8:c7:4d:6a:00:
0e:18:b2:94:a0:3a:f3:f9:ce:8b:d4:50:13:15:7d:
84:55:4e:97:a9:2c:c0:99:15:36:26:1a:79:1c:b4:
12:e3:83:d4:db:fa:39:ac:7e:6e:b4:71:54:d9:41:
83:51:89:a8:78:de:51:58:52:05:51:5a:2c:d8:94:
14:4d:f1:84:84:1a:c0:85:43:fa:6c:c5:af:5d:71:
14:38:a4:d9:3b:fa:27:e4:a1:74:b5:b4:81:42:7b:
ec:1f:5d:0c:e1:60:1b:54:5c:81:5a:fc:70:c9:f4:
7f:16:12:16:41:13:d3:79:84:a5:d1:e5:39:4b:54:
61:c4:1a:3a:5d:17:02:29:a0:d7:e9:b9:ad:0c:1f:
64:ac:0f:ac:7b:11:bc:bc:80:fb:7d:cd:e5:48:97:
ab:e5:f2:aa:a7:f1:82:4d:af:32:b2:b9:b8:bf:d8:
04:76:a6:4c:22:f7:3c:8e:de:bd:49:a7:54:36:31:
96:ea:f7:e0:ec:56:1a:51:bd:8b:fb:4e:51:5f:50:
33:b0:31:e3:39:8e:08:1a:e2:a8:f5:9f:cf:df:4a:
a7:f6:93:14:c4:bc:0e:fb:0e:c9:cb:11:77:7d:39:
0b:4b:b9:3e:e8:75:46:b3:a2:e0:fe:aa:e0:13:be:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DB:E4:C7:9B:FD:C1:D5:25:27:09:32:84:3D:46:62:6E:7B:47:B8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.230.0/24
82.39.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c4:6b:e4:26:32:a8:c5:66:f6:cf:58:b8:0f:fe:98:9e:8c:
ac:8a:a3:9c:0a:eb:75:02:2c:f3:7b:25:7b:a3:1f:7d:2a:2e:
0c:f4:af:42:67:55:be:fc:5f:8e:a2:39:9e:3d:f6:29:5f:ca:
db:e9:bd:da:08:ba:35:bb:95:30:d7:9b:a9:66:ec:50:17:c3:
93:ef:5f:8c:bc:f7:6a:ce:3d:e2:b2:ca:75:03:99:eb:29:90:
0f:4a:68:3a:00:d7:2a:0d:cc:90:6f:23:28:99:56:41:33:ad:
ce:29:ca:ad:1a:e2:14:e3:36:ab:40:ae:ef:ed:26:6e:64:6c:
e0:58:ae:8a:81:5b:1c:42:cb:fc:c2:13:27:50:e6:06:99:40:
46:e7:01:db:08:78:1b:3e:77:ca:2c:10:ba:00:a9:5c:9e:0c:
b4:3f:9e:df:64:cb:fd:2d:57:20:25:33:87:a2:60:17:4e:7a:
c5:67:34:d7:dd:40:b1:c2:2e:a1:92:7b:18:5f:5f:fc:a1:fc:
06:4c:f7:75:ab:73:8a:dd:d5:77:46:14:d0:47:19:f4:8a:d7:
dd:a7:28:5b:3a:f5:ca:c2:79:d4:e8:39:a5:42:29:36:9c:72:
6d:68:f3:42:15:41:2f:8a:1a:86:e1:15:69:ed:74:bf:ec:9f:
ab:3a:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:30 2026 by rpki-client