Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402976.roa
File: AS402976.roa (raw, json)
Hash identifier: fEN6CiXb9nCKb/CFX6PE9wfbWAM+TY5BtR5SeCBuQvM=
Subject key identifier: 51:7C:7F:AC:16:70:83:EA:5D:89:DC:48:6B:DD:8C:68:63:DE:BF:F8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6451478323FE728BC3DC481C6BEB5C2C28427E2B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402976.roa
Signing time: Sat 10 Oct 2026 03:40:51 +0000
ROA not before: Sat 10 Oct 2026 03:35:51 +0000
ROA not after: Sat 09 Oct 2027 03:40:51 +0000
asID: 402976
IP address blocks: 82.24.100.0/24 maxlen: 24
84.75.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:51:47:83:23:fe:72:8b:c3:dc:48:1c:6b:eb:5c:2c:28:42:7e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 10 03:35:51 2026 GMT
Not After : Oct 9 03:40:51 2027 GMT
Subject: CN=517C7FAC167083EA5D89DC486BDD8C6863DEBFF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:e2:70:dd:e9:cc:81:d1:43:ec:7a:3e:74:
ed:ff:3b:a2:be:a6:93:52:fd:77:57:55:3f:6d:1f:
71:81:2e:76:89:6a:a5:66:de:db:cf:81:95:e6:9c:
e6:40:01:f4:2d:da:6b:06:6f:7e:66:57:b9:5a:2b:
2b:1d:72:10:dd:00:33:7f:ea:35:9e:33:ad:b3:c2:
51:bb:4d:e0:cf:d5:e5:78:67:56:c2:b6:bb:2d:70:
7a:4d:44:58:21:fc:a5:1a:6a:14:8f:87:f4:4a:a5:
71:45:88:e4:be:9b:ce:5f:01:a6:9a:52:80:27:70:
cf:1a:d6:b1:77:6f:55:b0:56:d9:80:39:d9:74:05:
79:9b:d0:ee:f2:d3:5c:db:92:8c:9f:ec:ed:17:a5:
f1:0f:c9:f8:37:0c:87:4a:0a:ca:67:9a:e3:62:7f:
ff:51:7d:d4:ed:a0:7b:bc:06:50:a2:f0:70:7c:a7:
86:49:ad:6a:20:02:59:74:18:52:9d:19:11:23:3f:
0e:12:29:e9:2a:16:98:33:ac:84:12:8d:69:14:89:
91:12:a4:97:fd:5f:6e:a0:38:49:16:d5:4b:f9:eb:
c2:a8:7f:49:03:63:92:0b:01:07:a5:32:0f:f9:8b:
0b:f8:da:99:5c:2b:24:30:83:85:78:e4:e5:21:3f:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7C:7F:AC:16:70:83:EA:5D:89:DC:48:6B:DD:8C:68:63:DE:BF:F8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.100.0/24
84.75.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:95:7f:a2:10:2c:da:da:3d:88:fd:f5:ae:d8:33:14:c1:4c:
72:b9:23:f5:b5:9f:d7:24:4f:13:5b:dc:99:3e:27:be:5a:2c:
b1:71:a9:2d:b1:9d:04:bb:08:f1:3a:5d:91:4a:5e:14:5e:a7:
35:d3:43:1d:f4:ea:2c:8d:25:2b:83:6c:d7:fe:83:16:57:86:
bc:26:73:bd:3c:fe:b5:3f:e4:3f:b8:22:cd:a2:23:5d:6f:00:
c8:84:40:e7:a9:60:a0:89:02:e6:54:62:e1:2a:15:8c:1c:26:
fe:c4:13:bf:b5:f6:5e:e8:a6:5d:c5:50:7f:2a:b0:f0:65:20:
2d:9b:41:0a:71:58:6e:ca:14:a3:40:a5:e6:73:d3:68:b9:21:
61:14:4d:c9:5e:e7:62:39:cb:16:a7:ba:5f:b1:56:16:32:5b:
c1:34:29:cd:76:45:71:48:8a:20:14:ba:fc:b3:bb:15:7e:4d:
14:5c:11:d7:07:ed:27:ca:79:2d:37:51:79:70:d3:4e:c3:17:
05:49:cf:43:3c:4f:76:8b:ed:11:1a:37:47:80:aa:9a:c4:71:
7e:82:3e:19:dc:f0:66:59:9a:d5:4f:f5:25:55:43:e4:81:2e:
29:41:0a:d0:d1:35:84:5d:37:20:b0:8f:f4:d1:8e:f5:ea:ce:
2e:c7:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:54:51 2026 by rpki-client