Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402343.roa
File: AS402343.roa (raw, json)
Hash identifier: X5L4htfM46IwWfJRWNk3CAUFi1EOyk85cm4UO7MtUwY=
Subject key identifier: B2:44:2F:F8:94:0B:20:F4:59:62:D3:B4:7F:8E:9D:8E:A8:22:22:DB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 451D040544D50B721FDD9CC753F22595C5EDD65B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402343.roa
Signing time: Fri 19 Jun 2026 03:20:01 +0000
ROA not before: Fri 19 Jun 2026 03:15:01 +0000
ROA not after: Fri 18 Jun 2027 03:20:01 +0000
asID: 402343
IP address blocks: 82.39.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:1d:04:05:44:d5:0b:72:1f:dd:9c:c7:53:f2:25:95:c5:ed:d6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 19 03:15:01 2026 GMT
Not After : Jun 18 03:20:01 2027 GMT
Subject: CN=B2442FF8940B20F45962D3B47F8E9D8EA82222DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:77:a4:13:53:e6:fc:52:32:02:95:d0:03:
1c:9f:7f:2a:64:3b:7c:08:72:8a:a3:1d:83:f2:3f:
4b:4a:e2:dc:50:b2:42:41:dd:4f:ab:b0:b7:b5:16:
21:e4:14:d4:6a:34:ea:b6:ea:8e:5c:6f:e3:2b:b0:
0f:d3:28:61:1e:d6:cc:70:98:34:e8:cb:18:4e:6e:
35:c9:ea:1a:95:fe:9d:62:c9:8c:4d:b5:78:c9:95:
aa:14:63:74:05:e5:50:1b:94:52:3b:d8:5a:0e:69:
0f:69:04:9b:77:5c:5d:8e:78:c4:80:16:22:99:e0:
25:c1:dc:8d:74:0e:8f:6d:2b:67:59:67:01:20:c6:
5f:7c:f4:25:92:58:79:a4:26:00:d3:e3:1b:6b:f1:
d3:7c:c7:ba:e7:ee:8e:f2:98:66:73:ba:f9:48:6b:
a9:77:b4:f5:b8:20:eb:2e:a4:d9:59:c4:1e:61:51:
f4:5d:2f:64:0f:2b:aa:c8:c0:3b:4b:0c:0e:28:53:
09:12:db:f0:90:e1:51:78:c0:b9:82:57:05:b2:2e:
a2:fb:3c:c1:f7:0f:5d:22:0a:03:e2:46:a8:97:b3:
c3:c7:39:3f:2a:62:9b:86:b0:03:16:b9:7c:39:be:
36:7d:a8:6d:c3:ae:c2:28:e2:6e:0c:5f:2a:dd:8f:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:2F:F8:94:0B:20:F4:59:62:D3:B4:7F:8E:9D:8E:A8:22:22:DB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.64.0/24
Signature Algorithm: sha256WithRSAEncryption
75:81:37:87:df:5f:69:e3:9b:1f:07:92:28:22:7b:6a:54:7f:
28:72:7f:4d:59:e8:93:2f:19:13:fc:8e:98:bd:c8:48:78:f4:
a8:ad:e4:22:48:5c:71:22:97:0c:c5:95:e1:19:94:15:75:44:
31:0e:ee:55:eb:2c:2f:83:66:02:5e:fc:88:48:f6:d7:5f:36:
2f:77:26:77:7d:f7:18:c6:84:63:4c:63:7d:5d:ab:b5:f4:b5:
d1:e7:19:a3:2c:ec:45:3e:db:6e:ef:e0:14:81:89:9b:9c:6a:
3f:41:a3:01:c9:3a:99:d4:13:cc:5d:b5:9b:7a:4d:2b:94:1b:
76:96:c4:c6:fc:a6:a0:aa:7a:10:28:2d:eb:bb:02:bf:10:4c:
ee:c5:25:17:00:e4:66:7e:1d:96:2a:57:49:56:a2:8a:bb:90:
0c:a1:4f:58:24:23:54:ec:ed:39:13:1a:cc:ab:00:2f:1e:4b:
5c:6f:a9:4c:f1:d1:36:37:cb:6d:b5:e3:24:58:b3:16:da:9e:
6a:cd:b4:93:49:cc:e1:f7:e6:8c:c9:3f:dd:fd:3d:ba:c4:82:
24:54:c7:3e:69:43:e5:72:7f:73:db:60:cd:f8:35:fb:93:e1:
4d:a2:af:ab:61:bf:0a:5e:88:58:4f:e0:51:09:e4:55:82:71:
da:ab:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:08:14 2026 by rpki-client