Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402643.roa
File: AS402643.roa (raw, json)
Hash identifier: KCHynknbJKE+t0KmWBwbGWtV2VbesOOMbIqDt1opLaE=
Subject key identifier: B8:B7:B9:32:D7:CB:8B:C7:73:94:F2:C7:F1:E2:92:A7:CF:34:44:37
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1C1E54512DAA91E86D3F663F4B809CEB4D845D87
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402643.roa
Signing time: Mon 29 Jun 2026 06:49:50 +0000
ROA not before: Mon 29 Jun 2026 06:44:50 +0000
ROA not after: Mon 28 Jun 2027 06:49:50 +0000
asID: 402643
IP address blocks: 82.47.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1e:54:51:2d:aa:91:e8:6d:3f:66:3f:4b:80:9c:eb:4d:84:5d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 06:44:50 2026 GMT
Not After : Jun 28 06:49:50 2027 GMT
Subject: CN=B8B7B932D7CB8BC77394F2C7F1E292A7CF344437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:75:da:f6:66:0e:e7:d7:81:37:cf:63:0e:
c9:06:38:49:ca:f8:40:cf:2d:6e:65:49:41:3e:ec:
7e:ca:37:c4:80:54:d3:9f:c7:af:cb:a0:47:58:8a:
dd:7c:51:a9:a9:a0:7b:ea:45:d5:3f:e9:aa:63:59:
91:50:84:68:68:ea:62:30:35:4c:02:7b:d5:d0:18:
17:4b:13:6f:55:45:2b:ac:f0:2a:08:97:ec:a7:2d:
45:69:6f:c4:ad:79:d5:86:7c:c0:23:a8:e8:e7:75:
c7:f4:19:ff:b3:a6:6a:8c:7d:81:9c:c2:9d:7f:2a:
11:0e:48:e9:ed:45:47:10:ea:09:ae:9a:cc:c0:69:
0c:d3:e0:e7:8e:5d:9d:90:f6:b2:2c:37:78:65:9c:
67:1c:dc:c3:2d:2e:34:37:0e:2c:88:53:a7:fd:06:
f5:92:0b:a9:21:5f:b0:6e:2e:f2:86:b7:c2:23:fc:
42:94:0f:a0:4b:c1:26:19:da:4a:24:f3:de:f5:a4:
53:48:8d:f8:f4:ed:9c:45:08:ef:27:50:76:d0:0f:
0c:4c:ef:03:58:49:64:58:4f:45:54:9a:bc:ca:58:
9a:a5:b6:79:33:ea:a6:2d:4c:a8:75:59:23:83:08:
ca:8d:6e:cc:46:3f:96:4f:04:62:ea:8f:b8:55:80:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B7:B9:32:D7:CB:8B:C7:73:94:F2:C7:F1:E2:92:A7:CF:34:44:37
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:39:b9:1a:8a:16:47:78:a1:d4:f5:3e:57:49:51:4b:36:5f:
79:f4:c6:8b:bb:1b:04:5e:e2:5f:a4:74:6a:37:94:dc:f9:a0:
fc:c9:d5:da:53:e9:1f:b4:12:93:a4:51:26:bf:c7:c2:07:71:
0f:88:25:53:0b:4a:b6:16:5f:86:ef:79:48:15:82:9b:c6:1e:
2a:c9:d6:f4:d3:14:11:00:d3:a4:8b:c6:9c:2b:5c:ff:48:ed:
f8:ea:18:3d:ba:ab:e7:82:db:c0:c5:cb:0f:af:16:1b:6e:6c:
91:c5:0b:15:40:c5:af:e0:53:d4:95:c2:11:fb:66:65:ac:8a:
1f:bb:4c:24:25:cf:3e:94:53:a5:aa:35:4d:be:6f:68:d8:94:
e3:8b:98:b6:19:51:06:4d:e1:b6:00:dc:24:5c:e3:9a:d6:6f:
d7:a1:b5:0f:36:02:32:a2:38:d5:1a:04:58:3a:4a:6e:a2:d1:
3a:03:d4:23:56:d5:48:c1:de:bf:e0:de:be:c4:46:43:55:dc:
02:33:e6:f3:d4:a1:28:05:97:27:02:d7:cd:37:d8:36:50:4f:
14:94:09:58:17:8d:70:e0:93:c2:1b:93:65:ff:3d:12:d4:70:
7c:49:03:bf:3b:02:a8:67:78:25:40:98:5f:0e:db:72:3a:89:
3e:91:a5:e3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHB5UUS2qkehtP2Y/S4Cc602EXYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MjkwNjQ0NTBaFw0yNzA2MjgwNjQ5NTBaMDMxMTAvBgNV
BAMTKEI4QjdCOTMyRDdDQjhCQzc3Mzk0RjJDN0YxRTI5MkE3Q0YzNDQ0MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTb3Xa9mYO59eBN89jDskGOEnK
+EDPLW5lSUE+7H7KN8SAVNOfx6/LoEdYit18UampoHvqRdU/6apjWZFQhGho6mIw
NUwCe9XQGBdLE29VRSus8CoIl+ynLUVpb8StedWGfMAjqOjndcf0Gf+zpmqMfYGc
wp1/KhEOSOntRUcQ6gmumszAaQzT4OeOXZ2Q9rIsN3hlnGcc3MMtLjQ3DiyIU6f9
BvWSC6khX7BuLvKGt8Ij/EKUD6BLwSYZ2kok8971pFNIjfj07ZxFCO8nUHbQDwxM
7wNYSWRYT0VUmrzKWJqltnkz6qYtTKh1WSODCMqNbsxGP5ZPBGLqj7hVgK6NAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUuLe5MtfLi8dzlPLH8eKSp880RDcwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAyNjQzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUi9h
MA0GCSqGSIb3DQEBCwUAA4IBAQCbObkaihZHeKHU9T5XSVFLNl959MaLuxsEXuJf
pHRqN5Tc+aD8ydXaU+kftBKTpFEmv8fCB3EPiCVTC0q2Fl+G73lIFYKbxh4qydb0
0xQRANOki8acK1z/SO346hg9uqvngtvAxcsPrxYbbmyRxQsVQMWv4FPUlcIR+2Zl
rIofu0wkJc8+lFOlqjVNvm9o2JTji5i2GVEGTeG2ANwkXOOa1m/XobUPNgIyojjV
GgRYOkpuotE6A9QjVtVIwd6/4N6+xEZDVdwCM+bz1KEoBZcnAtfNN9g2UE8UlAlY
F41w4JPCG5Nl/z0S1HB8SQO/OwKoZ3glQJhfDttyOok+kaXj
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:54 2026 by rpki-client