Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402548.roa
File: AS402548.roa (raw, json)
Hash identifier: Nrdxr19PEMHtVk5wBRCM0rZFEzNUY//auc+84qrJVfE=
Subject key identifier: 92:B3:8D:38:12:1A:80:C5:86:C4:87:A6:B7:55:B3:68:DB:99:E0:4D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 51BB9B44A44AF0D9A0F1666B1E5BE29D40E79C01
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402548.roa
Signing time: Thu 28 May 2026 07:25:15 +0000
ROA not before: Thu 28 May 2026 07:20:15 +0000
ROA not after: Thu 27 May 2027 07:25:15 +0000
asID: 402548
IP address blocks: 178.83.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:bb:9b:44:a4:4a:f0:d9:a0:f1:66:6b:1e:5b:e2:9d:40:e7:9c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 28 07:20:15 2026 GMT
Not After : May 27 07:25:15 2027 GMT
Subject: CN=92B38D38121A80C586C487A6B755B368DB99E04D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:b1:2c:14:f4:9a:41:0f:d2:87:aa:af:66:
28:9a:8f:ab:a2:2b:1c:d2:b4:fe:be:29:e3:94:8d:
5b:28:00:c0:ce:14:5e:7c:ec:59:39:2c:f6:3c:f2:
7e:52:e3:72:fd:90:c5:de:8a:d2:c1:e8:72:e4:46:
5e:94:98:07:11:7f:1c:8d:af:27:30:47:0f:f9:91:
65:f8:e4:c7:49:3c:c0:80:23:ab:6c:63:b8:95:02:
ca:94:0b:32:6e:3e:4d:bd:05:53:a3:59:d0:21:7a:
56:d3:b6:bd:44:03:88:2c:27:28:bb:61:71:c5:d0:
14:98:6c:77:b0:97:19:2c:28:78:04:c1:1e:d5:83:
58:5b:89:01:5e:35:c7:39:68:70:2c:0f:ae:2e:b7:
ed:26:49:c6:72:49:66:ab:be:1d:c0:5f:d1:22:2e:
d8:a3:bc:44:5d:ba:04:29:c7:ed:03:ee:86:c5:57:
10:b0:67:2e:35:48:2f:6a:93:42:48:76:01:47:00:
5b:c3:a5:34:5b:4f:fb:4b:83:09:16:60:8e:53:0f:
c5:f6:4e:10:15:18:30:8a:d0:10:d5:12:69:2f:76:
2a:bd:85:ef:fa:80:b0:aa:52:8a:b6:01:23:3d:95:
fe:9e:ee:8d:9f:cc:44:c3:94:22:46:fb:b9:9b:29:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:8D:38:12:1A:80:C5:86:C4:87:A6:B7:55:B3:68:DB:99:E0:4D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c3:26:a4:0e:7f:2f:ac:46:54:30:28:8e:89:cf:35:3c:ba:
a7:82:a7:23:13:42:48:33:40:2e:01:69:00:25:a4:bf:a3:56:
e0:63:58:05:b4:d3:15:63:a3:42:69:2b:c0:ce:18:99:44:99:
c5:b4:82:9b:29:14:4f:72:82:9a:66:17:d4:d1:d3:c3:ac:b8:
ac:4e:09:f5:de:a9:0c:c1:33:ad:b4:50:5f:d5:56:f9:01:f1:
ed:43:5b:4f:78:55:a0:8d:6d:97:64:80:fa:26:96:7f:c9:87:
16:c3:21:59:5a:b0:45:82:11:e0:fc:86:87:30:32:df:dd:a3:
1f:a6:60:0d:f1:44:88:2c:5c:a9:51:d1:20:3c:b8:90:67:ae:
a5:ab:9b:c9:9f:ab:b5:e3:49:57:51:e1:f6:12:7d:97:69:86:
51:84:e0:b3:95:cd:ee:78:a3:bb:f8:6c:49:90:43:df:42:20:
9c:66:81:e3:60:7e:3e:fb:91:6a:47:8e:53:9c:48:0c:97:ab:
f1:12:8e:04:95:57:e9:bb:cf:89:f1:24:f6:93:22:a9:f2:99:
a0:b2:da:69:7d:2e:97:15:6b:bb:c5:50:ea:76:ea:00:41:6e:
ad:73:a7:5b:04:49:63:21:27:ba:01:d6:82:d3:98:a1:3a:fb:
c5:dc:b9:ed
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUUbubRKRK8Nmg8WZrHlvinUDnnAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MjgwNzIwMTVaFw0yNzA1MjcwNzI1MTVaMDMxMTAvBgNV
BAMTKDkyQjM4RDM4MTIxQTgwQzU4NkM0ODdBNkI3NTVCMzY4REI5OUUwNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxbEsFPSaQQ/Sh6qvZiiaj6ui
KxzStP6+KeOUjVsoAMDOFF587Fk5LPY88n5S43L9kMXeitLB6HLkRl6UmAcRfxyN
rycwRw/5kWX45MdJPMCAI6tsY7iVAsqUCzJuPk29BVOjWdAhelbTtr1EA4gsJyi7
YXHF0BSYbHewlxksKHgEwR7Vg1hbiQFeNcc5aHAsD64ut+0mScZySWarvh3AX9Ei
LtijvERdugQpx+0D7obFVxCwZy41SC9qk0JIdgFHAFvDpTRbT/tLgwkWYI5TD8X2
ThAVGDCK0BDVEmkvdiq9he/6gLCqUoq2ASM9lf6e7o2fzETDlCJG+7mbKXC3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUkrONOBIagMWGxIemt1WzaNuZ4E0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAyNTQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAslN4
MA0GCSqGSIb3DQEBCwUAA4IBAQClwyakDn8vrEZUMCiOic81PLqngqcjE0JIM0Au
AWkAJaS/o1bgY1gFtNMVY6NCaSvAzhiZRJnFtIKbKRRPcoKaZhfU0dPDrLisTgn1
3qkMwTOttFBf1Vb5AfHtQ1tPeFWgjW2XZID6JpZ/yYcWwyFZWrBFghHg/IaHMDLf
3aMfpmAN8USILFypUdEgPLiQZ66lq5vJn6u140lXUeH2En2XaYZRhOCzlc3ueKO7
+GxJkEPfQiCcZoHjYH4++5FqR45TnEgMl6vxEo4ElVfpu8+J8ST2kyKp8pmgstpp
fS6XFWu7xVDqduoAQW6tc6dbBEljISe6AdaC05ihOvvF3Lnt
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:30 2026 by rpki-client