Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: HkoFdWuhJ8r2+DRoHhBe93016Wx1Istt/xqN7NBWKI4=
Subject key identifier: DF:19:7F:9A:13:D9:7D:B3:3B:15:30:EF:BB:2A:D7:16:1E:58:D8:50
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 20544FEFEA716CE2A9FEFF02D8F0D862EB2F5648
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402288.roa
Signing time: Fri 03 Jul 2026 12:47:13 +0000
ROA not before: Fri 03 Jul 2026 12:42:13 +0000
ROA not after: Fri 02 Jul 2027 12:47:13 +0000
asID: 402288
IP address blocks: 82.41.233.0/24 maxlen: 24
82.41.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:54:4f:ef:ea:71:6c:e2:a9:fe:ff:02:d8:f0:d8:62:eb:2f:56:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 3 12:42:13 2026 GMT
Not After : Jul 2 12:47:13 2027 GMT
Subject: CN=DF197F9A13D97DB33B1530EFBB2AD7161E58D850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:06:81:50:1f:5b:3c:e8:fd:44:c8:7f:01:
32:a5:b5:be:ca:22:b1:15:31:4b:95:22:54:d2:a8:
9e:87:cd:7b:58:ae:e9:d9:d9:40:84:31:8b:58:1b:
4e:86:ba:79:80:68:df:4c:c2:65:e6:a2:1b:bc:92:
a9:c3:cc:69:41:dc:f9:49:d6:14:5f:a1:f4:d3:05:
65:6f:77:40:33:68:54:ec:ec:ce:89:c6:c2:6e:60:
69:8e:60:57:f8:be:e6:89:2c:44:40:69:6e:f6:b5:
9c:a8:bb:92:21:f2:d1:df:be:6d:fd:8e:69:38:8e:
30:17:75:88:64:b0:5c:69:0b:1a:fc:a3:63:0d:2a:
20:20:ea:10:51:77:19:d0:d6:11:69:0b:a4:58:cd:
32:37:56:91:c9:2a:c7:5f:2c:f8:d7:f5:76:39:27:
07:33:a1:c0:c4:d6:a9:23:57:b4:a5:b0:d7:c2:ec:
ff:52:8c:e5:4f:56:c7:fd:e1:35:d8:7d:da:4c:c0:
1f:57:29:4f:2a:73:f9:31:47:a8:a1:0e:bc:f3:0a:
34:af:3c:2a:45:06:26:4b:80:56:87:ec:2e:8c:c4:
24:59:63:fd:78:e2:02:c1:d1:03:e4:de:99:0e:47:
52:d2:52:c0:9f:c0:35:d7:72:7b:9d:b0:d4:ea:43:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:7F:9A:13:D9:7D:B3:3B:15:30:EF:BB:2A:D7:16:1E:58:D8:50
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.233.0-82.41.234.255
Signature Algorithm: sha256WithRSAEncryption
58:cd:76:15:81:5c:d1:b4:2c:0d:8e:1f:4a:27:8a:55:dc:8e:
55:f2:c3:75:9f:de:a6:d7:72:9c:c3:77:0c:2f:fb:cd:c5:7a:
aa:57:53:08:29:9f:63:39:64:35:c5:75:74:68:23:b7:94:b6:
0c:1a:08:6a:9c:81:65:58:7c:46:05:aa:da:b7:6c:e9:ff:b9:
6b:a2:cf:38:ca:1e:7a:1e:8c:b9:9e:c8:c2:d5:46:a9:c4:8b:
a5:ee:bb:dd:63:f1:88:c6:a2:12:ac:09:c0:a0:fb:9c:92:eb:
4c:8f:34:c2:9c:4c:67:39:1f:d1:4d:83:ee:17:09:47:1c:34:
15:fc:38:30:fd:42:65:a9:45:fc:25:bc:53:20:04:14:23:b5:
48:c3:8e:f3:7e:5d:44:b7:e7:ad:04:23:f1:bb:0e:80:77:a2:
aa:60:1b:79:44:21:7a:1a:50:dc:ed:01:a7:af:43:e0:86:73:
aa:30:5c:f7:04:11:f8:92:9f:f0:ce:07:ae:27:9f:c4:60:33:
9a:95:be:72:7c:b0:d5:9d:fc:6e:ee:61:dc:bc:2c:6e:01:45:
59:31:eb:93:da:3b:2e:56:92:73:e9:5c:20:0b:92:cd:11:04:
04:a1:59:68:ba:4f:48:2d:22:98:74:bb:50:d5:84:4f:6d:d0:
29:60:4c:1d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUIFRP7+pxbOKp/v8C2PDYYusvVkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MDMxMjQyMTNaFw0yNzA3MDIxMjQ3MTNaMDMxMTAvBgNV
BAMTKERGMTk3RjlBMTNEOTdEQjMzQjE1MzBFRkJCMkFENzE2MUU1OEQ4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdogaBUB9bPOj9RMh/ATKltb7K
IrEVMUuVIlTSqJ6HzXtYrunZ2UCEMYtYG06GunmAaN9MwmXmohu8kqnDzGlB3PlJ
1hRfofTTBWVvd0AzaFTs7M6JxsJuYGmOYFf4vuaJLERAaW72tZyou5Ih8tHfvm39
jmk4jjAXdYhksFxpCxr8o2MNKiAg6hBRdxnQ1hFpC6RYzTI3VpHJKsdfLPjX9XY5
JwczocDE1qkjV7SlsNfC7P9SjOVPVsf94TXYfdpMwB9XKU8qc/kxR6ihDrzzCjSv
PCpFBiZLgFaH7C6MxCRZY/144gLB0QPk3pkOR1LSUsCfwDXXcnudsNTqQxYjAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQU3xl/mhPZfbM7FTDvuyrXFh5Y2FAwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAyMjg4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABS
KekDBABSKeowDQYJKoZIhvcNAQELBQADggEBAFjNdhWBXNG0LA2OH0onilXcjlXy
w3Wf3qbXcpzDdwwv+83FeqpXUwgpn2M5ZDXFdXRoI7eUtgwaCGqcgWVYfEYFqtq3
bOn/uWuizzjKHnoejLmeyMLVRqnEi6Xuu91j8YjGohKsCcCg+5yS60yPNMKcTGc5
H9FNg+4XCUccNBX8ODD9QmWpRfwlvFMgBBQjtUjDjvN+XUS3560EI/G7DoB3oqpg
G3lEIXoaUNztAaevQ+CGc6owXPcEEfiSn/DOB64nn8RgM5qVvnJ8sNWd/G7uYdy8
LG4BRVkx65PaOy5WknPpXCALks0RBAShWWi6T0gtIph0u1DVhE9t0ClgTB0=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:54 2026 by rpki-client