Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402493.roa
File: AS402493.roa (raw, json)
Hash identifier: K2fvDsIxejauOs1fW+b2GuoZS+M3+tha/X6q5XR2Rgw=
Subject key identifier: 28:B3:1F:6F:52:1E:53:B7:34:1C:AB:11:D7:26:F3:43:F7:DF:B8:14
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5A6ED92E4FE328A92A53BEF039120C672223FB1E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402493.roa
Signing time: Fri 29 May 2026 17:07:28 +0000
ROA not before: Fri 29 May 2026 17:02:28 +0000
ROA not after: Fri 28 May 2027 17:07:28 +0000
asID: 402493
IP address blocks: 82.47.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6e:d9:2e:4f:e3:28:a9:2a:53:be:f0:39:12:0c:67:22:23:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 29 17:02:28 2026 GMT
Not After : May 28 17:07:28 2027 GMT
Subject: CN=28B31F6F521E53B7341CAB11D726F343F7DFB814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:50:cd:92:13:cd:6a:d8:c9:f8:04:5a:85:
a0:18:88:4e:77:28:90:fa:ce:d9:bc:cf:22:0f:55:
48:ed:46:05:c1:2f:2c:62:b8:12:24:3e:cd:dd:cb:
2d:db:2f:fa:9a:d2:ce:d3:b2:b0:ec:83:1b:e2:0a:
ba:0d:5c:ec:56:0a:a7:86:85:62:1e:2f:73:06:44:
75:44:0f:fd:66:3c:ff:88:97:fd:d8:fd:0e:c5:69:
f8:a0:e8:c5:de:ce:37:d6:61:aa:87:f2:f0:80:44:
bc:52:ab:30:38:ca:29:ab:aa:60:e4:fb:bb:29:e1:
79:18:2f:09:c4:8b:08:b0:90:a0:44:73:10:53:79:
6f:42:ca:2c:e3:e2:4d:4f:06:ec:45:2d:c0:26:18:
4e:1e:58:6a:a2:f6:8c:e9:f4:da:50:50:83:40:85:
1a:0a:00:d4:e0:00:b2:32:9c:1f:e8:88:b3:f2:99:
52:2e:7a:25:1b:08:af:4a:27:4e:d9:fa:89:4e:7a:
ac:2a:1e:32:08:1e:31:ce:d0:08:9f:45:d1:28:87:
91:84:f4:19:0a:a5:c2:ae:11:f5:df:c9:6e:e6:54:
2a:7b:63:7d:fa:fa:c9:67:ce:75:da:8f:de:8a:48:
32:04:a3:c7:eb:e9:76:4f:56:26:00:10:25:8a:5a:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:1F:6F:52:1E:53:B7:34:1C:AB:11:D7:26:F3:43:F7:DF:B8:14
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.188.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1a:bf:b4:0d:29:10:f1:59:13:7c:51:8a:f7:50:6f:3e:5d:
2f:7e:c8:2a:a3:ee:70:35:7a:8d:3e:49:cd:32:45:c0:39:9b:
37:af:75:23:10:58:69:f4:95:ae:b1:99:8b:73:12:3e:7d:96:
34:ac:1e:8d:a7:6e:0e:79:98:0a:75:a6:9c:6d:b3:ac:83:5a:
0e:4d:a7:33:d3:5a:dd:2f:fc:75:6c:61:16:d6:9b:34:59:f4:
67:e0:03:6e:14:34:08:9a:b2:b6:dd:48:73:1a:0a:27:2e:18:
db:49:48:a2:42:dc:ba:16:41:a8:20:1c:55:2b:6e:c1:5f:9f:
e7:92:15:98:0f:eb:11:5d:0d:7a:d1:04:58:f5:a6:fd:31:12:
4d:8f:28:1f:6f:16:5a:a0:f1:83:16:1f:94:f1:a2:a3:23:95:
49:b2:d3:e0:49:9b:fc:05:49:35:66:00:e2:b3:bd:d4:fa:0e:
e6:08:28:c4:f9:7d:5b:17:f6:61:56:7e:b5:72:9d:78:ed:f3:
45:44:fc:dd:f1:66:ef:0d:c2:24:de:1d:6d:46:6f:08:68:bf:
f1:4d:91:0e:f1:e8:3d:65:51:27:df:c0:8e:6d:5a:6d:aa:8c:
87:10:1b:c3:1f:db:be:09:de:a3:fe:fc:44:d5:33:dd:b3:d9:
8c:46:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:29 2026 by rpki-client