Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402394.roa
File: AS402394.roa (raw, json)
Hash identifier: TX7dk1kpKwxHCso3LF5ADsL+eieGpcDVf0MPjLuem/k=
Subject key identifier: 49:27:72:F3:D9:BC:67:5A:EB:C8:12:B9:20:52:BA:1B:DD:15:1D:C8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 277E5C2DF0400825DAA97657FD5BBB94B5C2EA2F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402394.roa
Signing time: Wed 29 Jul 2026 13:08:37 +0000
ROA not before: Wed 29 Jul 2026 13:03:37 +0000
ROA not after: Wed 28 Jul 2027 13:08:37 +0000
asID: 402394
IP address blocks: 82.23.197.0/24 maxlen: 24
82.47.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7e:5c:2d:f0:40:08:25:da:a9:76:57:fd:5b:bb:94:b5:c2:ea:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 29 13:03:37 2026 GMT
Not After : Jul 28 13:08:37 2027 GMT
Subject: CN=492772F3D9BC675AEBC812B92052BA1BDD151DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:26:d0:54:1e:8e:a6:57:71:9c:67:59:79:
3e:04:e9:f8:26:c7:16:ac:f1:54:b8:1c:bd:5c:81:
05:b9:61:71:61:ab:62:d8:5d:f8:54:e8:96:58:01:
04:e3:70:f4:91:b0:22:2e:7d:7a:2f:56:e9:06:b7:
1d:3d:96:76:f4:51:4a:8c:57:94:b2:dd:24:c2:14:
81:b9:15:2e:b9:8f:d5:b3:82:a2:d0:7d:c2:ae:a4:
7e:c6:5a:23:93:39:cb:e8:0d:9f:a7:24:4a:00:7b:
b8:06:21:95:31:04:bd:d8:e8:c9:15:e9:54:7f:22:
15:80:ba:68:aa:95:a6:9b:75:cd:e8:9b:32:6b:f0:
c9:84:4b:55:de:64:ba:e5:20:00:37:c6:b5:e3:6e:
72:75:91:fe:e0:3d:fc:a1:6b:23:e0:52:a3:ea:e5:
2c:88:1f:a0:59:59:b5:8d:8f:1c:e7:53:39:f2:55:
0f:5e:10:ea:21:0f:81:11:82:ed:54:5c:3e:32:ea:
a7:0d:9d:57:77:80:1f:07:0e:d3:7f:af:05:03:b4:
e2:4a:8e:eb:d8:65:5f:91:02:24:32:e9:7d:ca:6b:
fd:12:ab:7b:ec:74:ad:71:81:aa:dd:ce:6b:87:34:
c0:d0:63:cc:08:11:15:15:d6:ca:f9:0b:76:8f:e6:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:72:F3:D9:BC:67:5A:EB:C8:12:B9:20:52:BA:1B:DD:15:1D:C8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.197.0/24
82.47.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e5:e3:b3:d7:42:2c:49:11:7a:61:7b:8c:fc:00:bc:08:1a:
f3:53:5b:9c:52:80:23:03:fb:cd:78:15:7a:db:a4:90:8c:b2:
d9:1c:40:71:10:da:3b:40:65:bb:5d:3a:ad:0d:e7:ba:c1:2e:
33:4e:ff:08:4c:a3:c0:e0:ef:0f:69:93:5e:61:a2:c5:dd:53:
d0:7c:4e:33:66:8f:eb:76:a9:80:36:44:9f:cd:ed:15:62:9c:
5a:4c:56:5a:4c:12:0e:80:8c:55:19:2f:08:e5:01:74:0d:c5:
7e:d6:4e:06:45:88:e9:36:af:05:21:e5:36:60:b2:4d:24:da:
84:9b:a7:1e:f7:93:6f:c0:f5:3d:05:cc:6d:dd:96:38:b1:11:
06:55:44:49:7c:e3:5b:82:55:62:ad:dc:93:06:82:d9:54:6e:
88:d9:b7:86:9b:54:23:15:32:16:1a:bb:8e:a8:0b:a9:66:03:
9c:01:b6:5c:78:e9:a4:6a:df:41:de:80:5b:dc:bb:d1:ab:c6:
8e:d0:1b:2c:7a:7c:42:70:89:64:85:e1:a6:97:6d:2e:cd:c2:
46:bc:10:0e:77:74:75:f1:d5:38:ba:8c:cf:18:9c:d6:df:5e:
37:ef:50:5d:eb:35:34:6f:87:2b:7b:2c:29:9f:d0:fd:50:b3:
65:e3:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:30 2026 by rpki-client