Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402651.roa
File: AS402651.roa (raw, json)
Hash identifier: pRFX/BjXHGPZwYkYspwNsbPXuQfBtVBLR8xy1PRwOZ0=
Subject key identifier: E2:9B:3A:09:3E:05:AA:80:E3:11:8D:74:F9:C9:25:59:22:67:ED:91
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 01A291B6EAA547F7693CE49403A03AA6F01B340A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402651.roa
Signing time: Wed 24 Jun 2026 10:45:52 +0000
ROA not before: Wed 24 Jun 2026 10:40:52 +0000
ROA not after: Wed 23 Jun 2027 10:45:52 +0000
asID: 402651
IP address blocks: 82.47.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a2:91:b6:ea:a5:47:f7:69:3c:e4:94:03:a0:3a:a6:f0:1b:34:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 24 10:40:52 2026 GMT
Not After : Jun 23 10:45:52 2027 GMT
Subject: CN=E29B3A093E05AA80E3118D74F9C925592267ED91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:7e:84:29:8e:43:f6:3a:66:57:48:89:dc:
b4:54:dc:92:bd:c6:53:1a:ec:2b:d2:27:fb:5b:ac:
9a:4b:45:21:3f:c1:7b:cd:e0:30:04:31:bc:ba:56:
e9:ca:61:9a:80:4f:40:5f:e7:c5:de:3c:9f:37:3f:
99:46:99:35:cd:d5:a6:37:a9:a7:4d:07:cb:ff:4d:
46:da:fe:bf:ef:ad:86:4a:52:1f:f7:8b:68:55:05:
ad:48:b7:2e:10:63:5c:55:9d:3b:71:d5:4d:4b:55:
40:93:85:fd:a5:bf:c5:10:9e:74:62:a5:24:97:28:
77:1e:d2:36:62:0c:0f:a5:61:a8:86:89:7a:6a:f3:
93:4b:12:7a:b1:e1:ae:10:38:54:bd:df:06:c7:14:
50:48:27:74:fb:d2:cc:6e:12:80:6e:1a:61:00:55:
c8:bd:38:7f:6d:a3:91:7d:f5:8a:d4:b7:53:a0:9e:
3c:e9:ba:03:a9:75:19:e4:20:a8:2c:3d:23:42:35:
fd:d2:92:df:66:a5:31:5e:e2:de:20:a0:6b:ef:81:
4b:b2:38:e6:27:36:c9:ae:83:5a:62:e2:b0:ae:fa:
21:e9:77:94:7f:1e:52:00:5a:9c:d3:82:da:23:9a:
5d:d1:b6:17:7c:56:46:11:12:f4:8c:cf:26:13:f3:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9B:3A:09:3E:05:AA:80:E3:11:8D:74:F9:C9:25:59:22:67:ED:91
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402651.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.38.0/24
Signature Algorithm: sha256WithRSAEncryption
23:89:bc:4d:d5:db:98:72:fb:d4:0a:4c:8a:41:38:80:a4:3a:
ae:c4:52:c1:70:a1:9f:26:0c:2c:e4:f6:a9:19:ad:59:2a:e9:
99:db:be:94:5f:80:b4:80:7a:ac:93:b3:52:bb:b9:79:d8:c9:
91:87:ff:31:90:7f:a1:f5:b5:71:fc:58:3a:17:1e:ed:9d:6f:
a6:4c:17:3b:0f:e1:eb:53:5b:c7:7e:a1:6d:37:ec:06:c3:27:
bc:6b:6c:57:ce:b8:ed:d8:93:03:ad:9e:26:f4:91:92:ff:9a:
e0:bf:78:37:bf:2d:dc:ae:0f:3a:c3:37:b5:09:67:08:49:89:
1e:8f:a4:6f:1c:ea:28:11:75:da:4e:a9:80:a4:14:9b:f6:dd:
bf:56:be:f0:2f:39:f5:e8:7c:db:69:6b:59:25:11:16:5c:c1:
bf:39:7d:0c:a4:0d:b7:4d:0c:e0:86:8d:f9:25:63:00:1d:5d:
37:09:95:43:fd:b9:af:d9:c3:62:52:34:ab:90:43:f6:25:3a:
42:72:65:cd:96:31:3a:e7:ac:be:03:08:85:52:16:ca:ec:d2:
e7:58:e0:72:1b:df:f0:8d:14:32:1d:0b:b2:d5:16:02:26:24:
e3:97:fb:24:d1:4e:bf:ba:13:b5:83:64:1f:2e:24:27:a3:5c:
a5:68:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:14 2026 by rpki-client