Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
File: AS402857.roa (raw, json)
Hash identifier: aYqM+uorSwnrnZurf99BOy4azisRSMfM54wut4JvBAY=
Subject key identifier: 8F:2A:32:63:BB:92:30:F9:D5:56:79:59:5E:24:F2:9E:7A:E3:44:F8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 69B51F0ACC7F277240CC62FB872710CB10699DF6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
Signing time: Mon 05 Oct 2026 09:37:53 +0000
ROA not before: Mon 05 Oct 2026 09:32:53 +0000
ROA not after: Mon 04 Oct 2027 09:37:53 +0000
asID: 402857
IP address blocks: 82.27.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b5:1f:0a:cc:7f:27:72:40:cc:62:fb:87:27:10:cb:10:69:9d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 5 09:32:53 2026 GMT
Not After : Oct 4 09:37:53 2027 GMT
Subject: CN=8F2A3263BB9230F9D55679595E24F29E7AE344F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:7e:12:88:01:91:9e:9f:5c:53:7d:ce:3e:
f6:c6:fe:be:b9:25:68:79:47:6b:b4:e3:79:3d:20:
fd:83:f4:a1:30:40:54:79:54:2f:7b:80:d6:88:e0:
db:5e:ba:55:53:e0:bb:0b:93:0b:e2:50:8e:d5:bb:
9f:6c:42:53:d5:f3:cf:1a:6b:8d:30:9a:b6:39:79:
61:cf:37:bf:4e:a8:9b:2b:02:97:32:58:ab:60:d6:
c4:56:03:94:ef:2b:84:44:9d:f7:65:17:0a:bc:b6:
19:68:ca:30:f4:c8:9e:0a:68:76:f5:82:d9:f5:32:
40:53:8c:74:30:b7:cb:cd:77:e1:29:26:af:37:cc:
93:b1:54:b4:8d:41:88:c2:c6:01:8a:b7:19:23:29:
8d:16:a6:d2:5d:1f:11:64:b8:06:02:6c:fb:56:ee:
72:fe:e9:7e:d5:5b:82:64:97:8e:20:2e:8f:af:67:
c0:5d:16:65:a8:25:7d:7e:3f:f4:0f:15:29:47:a0:
6b:0b:bc:a9:ea:5f:19:bb:ac:bf:6f:c3:74:87:5f:
e3:16:23:c3:0c:e9:86:ba:e4:9c:a5:51:da:23:6c:
d2:2b:bd:bb:5d:e7:7c:88:02:b3:db:c4:bf:62:6b:
99:86:02:8a:51:aa:22:d6:21:f0:c5:21:3b:6c:d2:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2A:32:63:BB:92:30:F9:D5:56:79:59:5E:24:F2:9E:7A:E3:44:F8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.41.0/24
Signature Algorithm: sha256WithRSAEncryption
56:96:4e:6d:98:46:fa:08:54:84:a2:3b:45:41:2b:65:19:e4:
bf:c8:73:3b:af:08:b8:54:0b:73:5e:85:fc:76:4c:22:53:2a:
29:9f:84:c9:e6:3b:c9:ac:df:32:e8:b5:ce:7b:3c:2a:bd:e6:
84:b0:46:5f:cf:62:ba:11:dd:96:68:14:76:b2:b2:f5:ef:4f:
fa:6e:73:b9:99:3b:ba:ef:ac:7e:d3:38:8c:b8:80:ed:64:d3:
62:44:4c:5d:de:e8:55:5c:b1:84:57:ab:f3:e1:5b:25:a3:31:
a7:b6:e3:a3:0f:8c:5e:df:bf:db:4c:6f:92:1b:21:41:da:ae:
3e:47:ad:75:b2:f3:64:d7:78:04:b2:df:87:dd:50:84:65:5b:
ed:6c:d4:90:95:60:8b:8b:4e:e1:fa:8f:8c:c3:46:ca:94:a3:
e7:72:d4:13:b7:36:5b:c1:42:45:41:ed:4c:0a:dc:a2:1a:f5:
6c:2c:06:d4:2b:66:30:e4:48:52:94:02:88:9b:a8:9f:ae:68:
6d:b3:82:0c:10:01:9e:c0:c4:2b:3c:8d:c9:e2:cc:b0:a0:27:
37:a5:22:19:3f:bd:b2:2c:91:51:16:f7:3e:59:e3:2b:81:23:
73:96:ad:d3:1e:43:9f:ca:01:45:42:12:b1:45:57:6a:32:f7:
2c:fa:e0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:14:17 2026 by rpki-client