Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
File:                     AS402276.roa (raw, json)
Hash identifier:          ShHVCf9x+/a1R4N/Cq9L2mDm7wd/sg9B+ClPUtk+mOk=
Subject key identifier:   ED:FA:07:19:04:21:59:5C:40:23:70:50:25:25:19:97:8D:8C:C0:60
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       24398510D71E90FCFDA1AF6BF9518F2AA7C6910B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
Signing time:             Mon 06 Apr 2026 12:41:18 +0000
ROA not before:           Mon 06 Apr 2026 12:36:18 +0000
ROA not after:            Mon 05 Apr 2027 12:41:18 +0000
asID:                     402276
IP address blocks:        178.83.26.0/24 maxlen: 24
                          178.83.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:39:85:10:d7:1e:90:fc:fd:a1:af:6b:f9:51:8f:2a:a7:c6:91:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Apr  6 12:36:18 2026 GMT
            Not After : Apr  5 12:41:18 2027 GMT
        Subject: CN=EDFA07190421595C40237050252519978D8CC060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:81:9d:87:0a:92:b2:8f:86:c5:11:1d:97:
                    6f:a0:1a:5b:f0:53:f2:18:39:ef:0e:c3:a6:c4:5c:
                    de:fb:0f:13:0a:73:e9:2e:83:32:28:95:20:12:33:
                    33:d5:e2:3b:2f:c2:17:a8:cb:eb:88:5b:93:84:6e:
                    d9:e1:a2:48:63:ca:f3:66:1d:bc:a3:b3:51:42:2e:
                    c8:be:dd:03:33:d1:68:24:19:59:c2:5d:af:87:5c:
                    1f:ef:75:76:4e:27:74:0e:fe:76:36:59:a6:58:58:
                    e5:34:5a:42:18:af:21:dd:ea:22:6b:2d:9a:f2:af:
                    09:d5:97:3c:bf:52:a9:38:05:41:49:a0:40:3e:51:
                    0d:76:60:5f:07:8c:01:5d:2c:c5:9b:7f:6e:3f:e1:
                    2e:ba:38:8c:a4:6f:d2:62:61:00:cd:7e:5a:6e:93:
                    f6:4c:1c:b3:df:4a:3e:e2:02:c8:94:19:66:ac:69:
                    2d:b7:cf:26:1a:65:de:2e:68:ff:76:4e:6b:7d:5c:
                    1e:9a:61:52:2e:a8:9d:f0:2c:fc:ee:74:cf:4b:19:
                    f7:a5:43:3c:80:b6:e1:13:24:0a:19:05:a5:bb:21:
                    e6:3a:10:a5:8e:f8:58:20:6d:09:12:c7:22:2b:b0:
                    fc:ea:46:5e:e2:d0:99:45:99:aa:ac:c5:0c:e5:40:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FA:07:19:04:21:59:5C:40:23:70:50:25:25:19:97:8D:8C:C0:60
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.83.26.0/24
                  178.83.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:75:78:25:0e:08:74:c9:4f:02:55:7a:40:1c:79:7e:20:45:
         6c:c8:5c:7a:c4:eb:54:2b:9f:7c:c5:5d:bd:2e:f3:9b:e8:1e:
         1b:4f:d0:34:e4:d0:cc:91:d2:68:9c:e0:a0:ff:88:6b:96:4b:
         c7:e9:35:9c:31:87:11:32:d1:18:b7:5e:06:eb:65:0b:00:d6:
         37:86:1a:dd:a0:15:bb:6e:53:0e:30:f3:c8:78:6e:1c:0d:d4:
         34:ad:73:07:57:02:fb:1f:cc:bd:0c:c5:46:9c:f1:de:0a:02:
         92:62:06:ad:d1:7f:da:43:5d:21:82:57:d9:a2:fa:f0:ad:ec:
         38:d7:9e:cb:a3:48:b6:06:b6:f0:29:ef:07:22:1f:04:f8:71:
         5d:ac:a0:17:18:07:ea:1c:f6:d2:7f:fe:c4:4d:a0:d3:38:e2:
         98:1a:44:53:2f:94:95:e2:0b:d3:db:b0:56:52:54:09:5e:e0:
         83:26:95:bf:40:75:b9:d4:2a:c0:cf:a5:92:25:c3:3b:90:59:
         20:21:bc:e6:a5:31:41:0b:9b:cd:72:a4:e3:fb:e5:00:9e:4a:
         03:b6:77:3f:0e:db:d3:c7:70:ae:41:b0:2d:bc:77:da:ee:83:
         db:fb:07:10:83:27:b5:b8:59:37:54:85:ea:2c:32:5c:be:6d:
         5e:ab:ac:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:34 2026 by rpki-client