Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402664.roa
File: AS402664.roa (raw, json)
Hash identifier: dwFUKITMf/njG0DGC35tLoJubZtkDO5AHToJGnlEciQ=
Subject key identifier: BA:0A:19:F0:E7:C6:09:BF:A3:B9:50:18:7E:0B:05:E9:5D:C4:45:17
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4A775FD8B4487CDA35E877E006730B9B3AE20643
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402664.roa
Signing time: Thu 09 Jul 2026 08:31:03 +0000
ROA not before: Thu 09 Jul 2026 08:26:03 +0000
ROA not after: Thu 08 Jul 2027 08:31:03 +0000
asID: 402664
IP address blocks: 82.47.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:77:5f:d8:b4:48:7c:da:35:e8:77:e0:06:73:0b:9b:3a:e2:06:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 9 08:26:03 2026 GMT
Not After : Jul 8 08:31:03 2027 GMT
Subject: CN=BA0A19F0E7C609BFA3B950187E0B05E95DC44517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:b5:96:69:b5:cc:9e:de:55:ec:4e:16:b1:
02:c0:83:55:49:04:e8:b4:06:0a:55:db:bb:13:7f:
32:c3:c9:69:90:86:a1:a2:2a:92:bc:8e:23:9c:db:
36:3f:d5:91:b6:e9:b8:78:19:d4:71:a1:7c:f2:69:
fc:8b:a0:d1:21:bb:8b:a9:32:20:7b:eb:5d:c0:7c:
59:b3:f1:76:f2:56:a1:b8:3d:07:f7:12:13:3a:ee:
88:84:4b:84:1f:78:fd:23:a8:c9:a1:d0:aa:23:6a:
9a:27:d2:a9:d9:de:ea:36:a4:d1:9c:83:3a:1a:f9:
d3:a7:d4:7d:63:de:3e:65:52:a8:cc:68:2d:eb:23:
fd:90:a1:e4:5f:5a:14:97:90:0c:3e:c2:ce:da:6f:
09:4a:6d:e6:d1:ca:50:dd:ac:8f:76:a9:a3:e9:16:
b2:ea:2e:33:73:c5:65:ce:15:00:df:73:82:e7:ef:
13:41:0d:e6:2d:28:5d:e3:d1:53:21:1b:0c:fa:ab:
f7:f5:fc:66:5d:15:4e:55:63:9a:5e:ba:53:f9:50:
91:8c:62:0a:da:dd:c2:7a:b7:42:f9:4b:8f:f4:f8:
26:fd:de:42:f8:b4:07:ad:3d:1b:77:cd:48:6f:09:
25:d0:82:07:ed:6e:ee:61:22:57:bb:1d:fd:b2:42:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:19:F0:E7:C6:09:BF:A3:B9:50:18:7E:0B:05:E9:5D:C4:45:17
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402664.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.99.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c2:99:da:64:36:3b:69:68:4e:23:45:ba:fa:c0:5c:dc:86:
9d:2b:5a:fc:61:52:6f:20:45:fb:b2:39:af:88:41:55:33:57:
bf:0b:08:ad:48:ab:9a:1d:e0:06:96:cf:ca:d2:74:69:5d:40:
e7:6f:e5:cf:8d:30:02:5c:1b:e6:bb:99:3e:c0:97:93:db:b0:
54:73:e1:fc:e9:24:49:76:5c:01:ef:05:d4:d5:94:ef:6b:b4:
0a:da:b0:69:d4:7d:ff:06:d9:15:38:56:22:8e:e3:4e:95:e2:
c7:6a:85:75:4a:f3:c4:22:6d:f1:2e:89:9a:28:e3:ae:ec:2f:
2c:f1:84:71:7a:42:1a:df:da:c6:48:e7:a4:e9:b7:6c:4a:9a:
92:f8:2c:17:c1:d9:4a:f2:8f:e0:0b:ca:60:4a:da:43:14:a4:
35:3e:b1:cf:48:ba:49:93:bc:bb:f8:29:43:7c:b8:90:fd:4f:
02:c9:46:53:c3:c2:63:ff:4f:16:45:1f:96:9d:df:20:95:cc:
f5:e1:c7:f2:cf:d6:10:56:19:f6:6a:b7:97:81:cc:2d:47:a1:
ad:6c:0e:37:2c:8a:16:c1:48:e9:6b:3f:0a:91:bd:9d:45:ed:
f2:e2:3c:18:1e:46:a7:80:ca:00:46:fd:46:f6:94:0f:6e:2d:
6d:75:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:55 2026 by rpki-client