Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: iA9rbawawn66DQ9Q89kKvSAssr8NfU++oFwVorpT8uM=
Subject key identifier: 47:C5:17:95:F3:40:D1:84:39:1B:2C:43:E0:79:24:D8:27:48:CA:1B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 683CD9E1A7544B7EE8A16BA054840C900F21DC60
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402288.roa
Signing time: Thu 13 Aug 2026 00:47:17 +0000
ROA not before: Thu 13 Aug 2026 00:42:17 +0000
ROA not after: Thu 12 Aug 2027 00:47:17 +0000
asID: 402288
IP address blocks: 82.25.145.0/24 maxlen: 24
82.26.141.0/24 maxlen: 24
82.41.233.0/24 maxlen: 24
82.41.234.0/24 maxlen: 24
178.83.129.0/24 maxlen: 24
178.83.220.0/24 maxlen: 24
178.83.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3c:d9:e1:a7:54:4b:7e:e8:a1:6b:a0:54:84:0c:90:0f:21:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 13 00:42:17 2026 GMT
Not After : Aug 12 00:47:17 2027 GMT
Subject: CN=47C51795F340D184391B2C43E07924D82748CA1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:f2:0f:6a:b6:01:6f:3b:cc:f0:ff:9b:a9:
bc:81:61:d1:23:6a:9b:23:ec:68:af:55:3b:b2:1d:
42:e3:aa:bb:0a:d0:6e:aa:7f:ce:2d:12:6d:cd:9d:
fc:e0:ce:49:d4:44:b8:7a:fe:7f:c8:c7:93:6c:1a:
b3:81:3a:9f:f5:b6:b1:0d:31:9d:18:ab:c7:5f:98:
bc:27:11:e9:b1:fe:04:11:50:99:19:60:8e:35:00:
50:48:5e:b2:30:80:b6:5a:f1:a4:d6:fc:92:91:24:
7c:26:e0:82:52:17:4a:b0:d5:a8:1c:5f:44:d7:72:
7d:3d:1c:59:0a:66:40:5d:20:d7:13:ad:02:3d:f9:
b1:be:e0:1d:ef:32:2e:23:ee:70:ac:e8:71:d8:04:
c1:a1:86:d3:15:c4:a2:34:77:1d:3f:31:b7:b4:85:
b3:ff:47:1a:70:af:45:01:86:cc:2a:0a:af:ad:9e:
58:c4:a4:d9:a5:a7:ab:0c:17:ad:1b:65:6f:63:98:
ae:4c:4d:26:ee:b4:4f:7a:5e:ff:2c:bd:ab:45:1b:
73:25:a7:71:eb:57:90:28:79:93:34:79:e0:11:15:
3d:7e:70:15:da:0d:24:d5:69:f2:bf:f3:2b:76:58:
e1:14:8d:6b:2d:80:be:84:a2:92:2a:cf:24:d4:04:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C5:17:95:F3:40:D1:84:39:1B:2C:43:E0:79:24:D8:27:48:CA:1B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.145.0/24
82.26.141.0/24
82.41.233.0-82.41.234.255
178.83.129.0/24
178.83.220.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:eb:e6:dc:e7:ff:ee:e9:51:37:b6:91:bc:6f:c7:45:3e:c6:
c4:28:c0:11:45:7d:53:29:d3:2a:0f:52:36:f5:55:1f:c8:12:
2c:bf:03:fc:31:45:87:af:6a:a6:0c:0a:0e:73:85:ad:75:4d:
16:c1:3b:eb:c7:1f:9b:57:d2:67:14:89:05:e4:a1:ac:27:ab:
99:7d:bf:3d:d7:2c:5b:9e:49:15:36:52:26:6a:55:39:a9:fe:
b0:22:c0:8c:05:d4:56:66:91:96:50:c9:bc:77:02:6d:b9:fd:
98:24:a7:57:b0:85:73:5f:b4:db:02:e7:2d:19:41:c6:27:38:
46:83:03:41:aa:1b:8c:22:ba:a4:52:a7:9c:f4:2a:f5:ee:1a:
e7:19:91:4e:fb:1c:bd:3b:78:1c:ee:75:07:8b:ef:c0:8a:91:
56:b5:42:ed:7b:82:26:ba:00:c4:6f:69:88:a5:8f:e4:b5:77:
f2:9c:8b:0e:be:f3:af:c4:b3:55:c7:28:ac:89:f0:98:a5:2c:
f8:be:a5:12:78:33:f3:89:96:b3:29:5b:0c:3c:ef:c2:3c:07:
2b:32:1d:45:16:d1:1f:a6:b9:d5:f1:44:c9:47:71:d5:60:fa:
d2:da:6d:d1:b7:e9:6f:ec:20:71:c1:7d:2c:0c:a2:bc:26:93:
d3:bd:9f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:56 2026 by rpki-client