Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402475.roa
File: AS402475.roa (raw, json)
Hash identifier: GnDpx/9ARu1Po76elzd6kASA3YEFtdiSSjte/dNjlfY=
Subject key identifier: B3:75:F5:04:DE:3A:B1:89:64:FC:56:7C:29:CB:2D:F2:FB:EE:C0:E3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 73B49AF9340DA99A30BDCDAFD693E2033ABF3C41
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402475.roa
Signing time: Thu 25 Jun 2026 20:01:33 +0000
ROA not before: Thu 25 Jun 2026 19:56:33 +0000
ROA not after: Thu 24 Jun 2027 20:01:33 +0000
asID: 402475
IP address blocks: 82.47.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b4:9a:f9:34:0d:a9:9a:30:bd:cd:af:d6:93:e2:03:3a:bf:3c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 25 19:56:33 2026 GMT
Not After : Jun 24 20:01:33 2027 GMT
Subject: CN=B375F504DE3AB18964FC567C29CB2DF2FBEEC0E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:09:3a:c1:ff:d0:8f:35:b5:cb:77:c9:aa:
43:19:b4:93:12:ca:b7:28:16:79:2f:ae:2f:92:2c:
0a:2a:69:9b:af:1d:ac:b8:49:55:51:e1:89:27:94:
7e:ec:44:b6:20:49:bb:f6:a0:a6:35:c6:50:f7:91:
c0:56:83:b1:46:ce:9a:c5:76:66:22:a7:f0:91:fc:
26:a5:cf:8f:30:f4:76:ed:41:2a:c9:0b:57:49:f1:
81:68:da:02:f4:11:dc:04:6d:d0:d0:c7:17:b4:1d:
95:ab:1f:52:a1:57:9e:8f:f5:c0:83:4e:75:c2:35:
b7:90:e7:c2:ff:3f:05:54:88:e2:9a:cc:9d:2b:eb:
2b:f0:04:6d:03:14:95:0b:44:28:c1:3c:0a:e2:57:
77:e1:28:39:b3:6e:d3:90:9f:e5:63:00:17:95:17:
9b:89:65:0f:07:f8:0a:d5:67:5b:f8:ab:8a:df:23:
4c:fc:d3:50:e7:57:8f:cb:f1:ff:5e:7a:2f:03:d4:
a4:0e:3c:1a:e6:02:3d:f8:a2:20:32:dd:3d:f3:55:
3f:b4:67:cb:0c:de:86:5b:32:d9:57:d6:0d:83:31:
5a:39:4e:b5:18:a3:de:2a:6e:68:d4:42:b3:e7:f2:
3f:59:8e:b8:d4:0d:d1:b5:b5:39:14:34:70:82:40:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:F5:04:DE:3A:B1:89:64:FC:56:7C:29:CB:2D:F2:FB:EE:C0:E3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:25:9f:69:db:fc:8e:fd:d4:9e:0f:4a:a5:e7:00:d9:3b:dd:
15:d3:74:5b:71:8e:6a:ec:c2:c6:ed:1e:f4:58:91:d2:57:ba:
9f:61:67:89:38:45:19:f1:7b:b1:b2:49:ac:b3:04:76:96:94:
69:16:df:a0:20:23:78:30:c7:a6:b5:e7:60:6b:60:6e:60:06:
78:4d:e0:32:dc:5c:a4:a6:15:a0:8a:82:28:99:f4:57:21:ed:
a0:5d:36:06:f6:59:e6:f0:79:9f:9e:23:c2:02:eb:c6:d2:de:
71:f8:e8:ff:50:a6:dc:9a:78:d2:1e:2f:0b:33:22:2d:9f:fe:
e0:57:dd:aa:53:81:61:95:2f:c8:18:9c:cc:b3:37:eb:a1:2d:
99:38:d7:26:37:48:93:7c:de:3d:46:31:7b:3a:35:02:17:9a:
4a:7b:12:c1:ff:f5:5d:76:5d:7a:b6:0d:a8:03:71:b8:2c:02:
4d:4c:2e:96:f4:5e:4b:b2:51:4d:d7:f0:50:c6:7a:fd:4f:1c:
83:d0:2d:a6:4e:b0:d2:f7:03:e5:2b:89:b5:cd:e2:6c:7c:3b:
71:03:e3:a7:dc:ff:84:c8:82:43:34:98:23:58:0f:e7:b5:ef:
d4:68:45:97:d7:8b:4e:73:46:1e:43:3b:55:3e:b1:1d:ba:b0:
20:a6:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:54 2026 by rpki-client