Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
File: AS402857.roa (raw, json)
Hash identifier: meb8iyPwZ5isBQ7uonjkWb0wkTRdd5UZrdvkFDRymKU=
Subject key identifier: D9:AE:2B:E3:03:B6:71:1D:FB:49:C6:92:EB:A9:5E:6D:8E:9D:E2:CD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 24D4A79A162FD5DD582FAAF676E83CE7BF233870
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
Signing time: Wed 12 Aug 2026 02:21:35 +0000
ROA not before: Wed 12 Aug 2026 02:16:35 +0000
ROA not after: Wed 11 Aug 2027 02:21:35 +0000
asID: 402857
IP address blocks: 82.24.69.0/24 maxlen: 24
82.26.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d4:a7:9a:16:2f:d5:dd:58:2f:aa:f6:76:e8:3c:e7:bf:23:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 12 02:16:35 2026 GMT
Not After : Aug 11 02:21:35 2027 GMT
Subject: CN=D9AE2BE303B6711DFB49C692EBA95E6D8E9DE2CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ed:a9:85:91:9f:e9:18:be:14:2d:3b:44:86:
e1:a8:d2:09:69:8c:5c:de:fc:44:3f:d1:eb:bb:4f:
97:b1:45:7e:87:bd:d1:0b:03:c2:bf:15:fd:cb:e9:
01:16:82:f4:c1:4c:7c:80:e9:a2:b6:7a:27:ad:a9:
58:e8:28:11:ff:0c:b4:21:73:19:41:02:04:2e:15:
8b:7e:55:fd:9c:96:db:33:7a:3a:0a:5d:a3:7a:55:
55:d0:7c:41:95:f4:31:d3:a1:92:53:d2:cc:3e:b3:
bf:75:e2:66:b3:74:8b:83:14:c0:5f:55:69:d3:ec:
84:9d:3f:63:68:9f:f7:04:ac:23:c3:70:f5:18:28:
83:fc:db:37:aa:75:45:f6:2c:e2:c0:7b:4c:8e:ab:
d4:0f:e4:73:d6:ff:e8:bc:b4:d5:f5:8b:0f:27:35:
43:47:a5:70:94:18:d3:1b:0c:9d:ee:e5:8b:5c:38:
66:13:a6:74:d3:e9:f9:64:c6:3d:c5:d9:04:72:88:
42:59:7d:5a:11:b3:30:2b:38:f1:87:e9:08:03:d5:
28:2d:4f:c7:8a:01:d0:b7:da:d3:36:8a:74:d9:44:
a9:c9:e3:67:c1:a7:17:77:ae:7d:ac:81:7d:69:fd:
54:a3:e0:db:27:5b:7c:26:46:57:12:a4:6a:5d:ed:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AE:2B:E3:03:B6:71:1D:FB:49:C6:92:EB:A9:5E:6D:8E:9D:E2:CD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.69.0/24
82.26.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:bf:5c:2a:0d:b5:31:18:7e:13:38:57:9f:c8:6f:55:83:a1:
8d:57:7b:da:af:37:b3:d2:97:71:2a:7d:4a:e8:f7:ba:7e:c7:
91:68:7a:99:91:1c:f3:7b:9b:e9:22:e6:fe:22:21:0a:bf:7e:
54:88:47:e4:e2:61:0a:69:92:0d:7f:45:fd:e7:2a:c1:b8:b5:
b4:fd:c0:bc:96:e6:9d:2e:57:9d:cd:08:03:80:e1:57:e6:21:
b3:74:aa:51:81:41:8d:db:61:ce:d1:7c:88:62:53:68:91:67:
60:95:e3:a0:e3:1c:ab:bd:2c:5e:57:50:0c:e6:aa:01:36:9a:
03:3a:94:00:cb:f2:d8:f0:44:0f:7e:f4:8c:70:4d:43:67:5d:
cb:cb:c8:cc:c5:a3:57:ad:6d:e9:99:f5:ca:35:02:6f:6c:6f:
f1:74:32:60:f3:b6:c7:1d:e7:5f:e9:ab:6f:ca:a9:2a:e7:63:
7d:45:d7:7d:da:57:17:4f:26:fb:23:65:6c:6c:2d:ac:1a:ae:
c4:8b:44:67:06:b1:ee:86:bc:a7:da:dc:b4:f6:91:79:4a:b9:
97:4b:e7:d9:ad:c9:3e:ee:a1:6b:08:f6:d6:fc:47:1e:5c:9c:
f7:7d:0f:37:1b:9d:f3:cd:07:10:8e:b7:a3:e6:0f:f2:67:7f:
0f:00:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:10 2026 by rpki-client