Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS41171.roa
File: AS41171.roa (raw, json)
Hash identifier: bPl5hPMsVjR0pyrqRP8MTQV5/uKl+xbLjLmUbAjUhUI=
Subject key identifier: 26:C4:78:F2:21:91:05:85:C9:17:F4:59:EF:65:A3:8D:3C:2A:C7:82
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 538278692F564731A7E777284361C6D40C843A44
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS41171.roa
Signing time: Sat 06 Jun 2026 05:11:46 +0000
ROA not before: Sat 06 Jun 2026 05:06:46 +0000
ROA not after: Sat 05 Jun 2027 05:11:46 +0000
asID: 41171
IP address blocks: 82.47.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 12:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:82:78:69:2f:56:47:31:a7:e7:77:28:43:61:c6:d4:0c:84:3a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 6 05:06:46 2026 GMT
Not After : Jun 5 05:11:46 2027 GMT
Subject: CN=26C478F221910585C917F459EF65A38D3C2AC782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:2f:15:7d:da:ea:c2:7a:85:69:f8:91:96:
9b:b8:ba:f8:b9:48:3e:58:60:6c:80:bb:4e:97:46:
a5:b2:f1:ee:fd:95:8a:79:5b:6c:cc:c9:44:c9:14:
75:a2:0f:1d:18:c5:58:eb:d4:08:e0:44:3e:bf:86:
09:32:f8:3a:6c:28:f3:ac:26:52:2b:14:d3:08:14:
fe:72:02:1f:c3:48:1d:6f:26:b9:88:bd:05:ef:af:
54:82:51:b6:31:e9:fe:14:e0:ba:bd:d4:d9:3d:26:
d6:5b:38:1d:50:b1:48:59:4a:f4:eb:ef:d9:d8:77:
d5:92:ea:a1:6c:2c:da:92:f2:e8:de:3e:48:13:48:
a1:25:00:27:98:cd:60:ce:35:3b:8e:7d:de:52:ab:
4c:d2:cf:57:d7:02:18:cb:85:a0:c8:96:71:3a:a4:
42:c5:09:c0:e4:fe:ca:f1:91:05:6e:ac:7b:84:52:
46:5d:47:c4:45:12:9d:e6:69:fe:02:07:52:bb:07:
8b:0d:f4:e8:e2:50:f9:30:fa:6d:12:07:29:09:87:
0c:38:13:49:42:ac:af:e2:91:b6:a8:85:51:0c:03:
b1:a8:c7:a1:34:2c:71:bd:a8:d0:72:51:b2:a9:cd:
bb:96:63:fc:45:98:fa:9b:77:44:e3:3a:10:cb:92:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:78:F2:21:91:05:85:C9:17:F4:59:EF:65:A3:8D:3C:2A:C7:82
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS41171.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1d:6e:c1:b2:7e:0d:49:09:65:0e:ac:78:4b:63:83:7d:74:
18:88:02:10:77:3d:eb:8a:ae:c7:8c:b5:36:70:a3:ec:86:bb:
f0:a7:4c:4b:ac:9b:13:85:5d:df:f6:0f:7f:cf:21:be:e0:d5:
71:41:d6:29:7f:b5:c4:37:59:f3:e2:5c:4f:cd:8a:f9:92:bd:
86:2b:41:4d:5c:87:61:81:c1:10:47:c7:9f:5b:79:6d:41:3d:
3e:b6:80:e4:d7:f2:8d:c5:c8:b2:34:e2:17:7d:99:7d:e8:da:
97:cd:aa:43:1e:31:a9:9f:ff:92:1c:ff:e0:73:d7:48:3e:a0:
6a:56:e9:35:b1:f6:9d:37:46:70:98:93:1d:e2:d4:78:ab:00:
cd:70:18:1f:aa:b3:cb:0f:35:7a:0e:af:30:d6:1a:79:52:8b:
6d:e4:6b:ca:84:d2:67:ae:4e:59:ab:16:85:2f:e4:8d:57:96:
ec:9a:ab:a6:85:f2:b7:82:e8:e0:2b:b5:8d:30:77:92:eb:bd:
9a:4f:7a:48:6c:10:fc:c9:7e:3a:12:3a:6b:b8:da:f9:a5:8d:
2d:bf:f2:78:ca:ea:7a:b9:67:8b:f3:82:73:4e:12:8b:fd:8c:
e2:bf:f8:1a:70:53:24:f5:50:4e:9f:eb:9f:54:2c:47:3c:e3:
82:54:73:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 19:12:47 2026 by rpki-client