Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS979.roa
File: AS979.roa (raw, json)
Hash identifier: d40CzAdnbOb9bukkBrTrtGXCpEvVvaAkTHx1kuBPsCc=
Subject key identifier: 50:5C:9F:30:67:E7:93:63:26:7B:6C:0A:46:0D:3A:B4:A2:EF:AF:42
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4F982A4557C8A16686260FF192F9C762DA212581
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS979.roa
Signing time: Fri 11 Sep 2026 08:14:48 +0000
ROA not before: Fri 11 Sep 2026 08:09:48 +0000
ROA not after: Fri 10 Sep 2027 08:14:48 +0000
asID: 979
IP address blocks: 82.38.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:98:2a:45:57:c8:a1:66:86:26:0f:f1:92:f9:c7:62:da:21:25:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 11 08:09:48 2026 GMT
Not After : Sep 10 08:14:48 2027 GMT
Subject: CN=505C9F3067E79363267B6C0A460D3AB4A2EFAF42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:e4:bc:33:ce:a4:38:5e:6c:94:36:e9:a6:
0d:db:dc:dc:be:a3:b2:7e:09:1b:ea:b6:a5:e6:7b:
6d:f4:29:ba:c4:86:b1:ca:3b:c9:ff:b6:75:64:de:
94:c9:d3:ee:1e:3f:05:11:30:2d:85:16:0a:1c:52:
26:e8:4e:2f:02:a1:bd:a1:78:8a:96:8e:2b:69:04:
b6:2e:9b:13:76:1a:65:6a:84:9b:71:64:bc:54:e7:
2c:97:1a:fb:3a:7e:cf:05:c4:10:87:42:0c:b1:dc:
fb:55:8d:19:5f:db:cc:c3:11:b4:81:2b:c6:9c:e5:
6c:ba:4d:88:af:ab:c9:b9:b3:f7:b2:ac:60:2a:76:
b7:d9:9f:64:87:00:11:fc:d8:19:89:33:c6:e1:44:
f4:11:45:6a:17:cc:b8:df:d2:fd:d2:b5:57:65:42:
6c:a0:a9:a2:b4:f1:1a:b2:1a:90:37:b7:6e:aa:c2:
1b:e4:0a:83:a8:e4:5d:fc:46:85:0c:69:78:e5:2f:
cc:79:6a:ea:24:2d:40:fb:2e:c3:a0:5d:a9:27:49:
00:97:c3:20:e1:17:3d:9a:3b:44:cf:a1:84:1b:e9:
1b:a0:88:d5:0b:4c:c7:98:8a:92:c0:05:35:c6:73:
69:81:20:dd:02:b8:ff:16:75:9e:98:18:06:3b:89:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:9F:30:67:E7:93:63:26:7B:6C:0A:46:0D:3A:B4:A2:EF:AF:42
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.42.0/23
Signature Algorithm: sha256WithRSAEncryption
36:d7:c7:f8:d0:13:23:fc:4e:90:9e:c4:78:c0:ee:1b:f6:c0:
d5:46:ba:14:97:53:ac:08:7f:43:7c:66:7d:4f:5a:ce:40:37:
65:d0:65:ca:40:34:15:fe:59:6d:75:02:4a:5f:76:e6:42:12:
89:4a:fc:5f:39:a6:1e:f6:e3:eb:75:f1:d2:bc:39:00:4a:2e:
81:fe:5a:79:95:c8:59:d5:7f:20:34:24:8d:f3:29:b7:45:c4:
b1:af:ad:4e:f5:17:9a:69:61:bd:7c:52:dc:70:ba:78:d6:be:
7a:3a:43:ce:b5:28:c2:46:83:34:52:1b:af:a5:cc:ca:1c:6a:
5d:0d:7a:0f:5d:04:7b:dd:e0:06:19:ed:4b:c5:e0:8c:9c:6e:
42:4e:88:93:31:20:49:cc:72:23:4c:7e:26:40:ec:42:b2:88:
cd:ef:65:8f:60:fc:96:99:f7:0b:0b:48:5f:ee:1b:a8:20:58:
38:8e:e7:3d:cf:3e:8f:2b:f1:5c:27:d1:1a:61:e0:9f:37:c0:
95:cd:f9:e6:cd:9a:21:8a:f8:f6:c3:37:e6:64:df:38:cb:d8:
94:1b:37:dc:06:b7:fb:cc:c9:76:9c:cd:18:6d:4a:c2:20:d3:
7a:6a:88:35:49:f7:69:d1:da:8f:e8:ee:97:2b:3e:2d:7b:78:
a6:22:01:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUT5gqRVfIoWaGJg/xkvnHYtohJYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTEwODA5NDhaFw0yNzA5MTAwODE0NDhaMDMxMTAvBgNV
BAMTKDUwNUM5RjMwNjdFNzkzNjMyNjdCNkMwQTQ2MEQzQUI0QTJFRkFGNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFeS8M86kOF5slDbppg3b3Ny+
o7J+CRvqtqXme230KbrEhrHKO8n/tnVk3pTJ0+4ePwURMC2FFgocUiboTi8Cob2h
eIqWjitpBLYumxN2GmVqhJtxZLxU5yyXGvs6fs8FxBCHQgyx3PtVjRlf28zDEbSB
K8ac5Wy6TYivq8m5s/eyrGAqdrfZn2SHABH82BmJM8bhRPQRRWoXzLjf0v3StVdl
QmygqaK08RqyGpA3t26qwhvkCoOo5F38RoUMaXjlL8x5auokLUD7LsOgXaknSQCX
wyDhFz2aO0TPoYQb6RugiNULTMeYipLABTXGc2mBIN0CuP8WdZ6YGAY7iZ2dAgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUUFyfMGfnk2Mme2wKRg06tKLvr0IwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTOTc5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUiYqMA0G
CSqGSIb3DQEBCwUAA4IBAQA218f40BMj/E6QnsR4wO4b9sDVRroUl1OsCH9DfGZ9
T1rOQDdl0GXKQDQV/lltdQJKX3bmQhKJSvxfOaYe9uPrdfHSvDkASi6B/lp5lchZ
1X8gNCSN8ym3RcSxr61O9ReaaWG9fFLccLp41r56OkPOtSjCRoM0UhuvpczKHGpd
DXoPXQR73eAGGe1LxeCMnG5CToiTMSBJzHIjTH4mQOxCsojN72WPYPyWmfcLC0hf
7huoIFg4juc9zz6PK/FcJ9EaYeCfN8CVzfnmzZohivj2wzfmZN84y9iUGzfcBrf7
zMl2nM0YbUrCINN6aog1Sfdp0dqP6O6XKz4te3imIgHx
-----END CERTIFICATE-----
Generated at Sat Sep 19 10:01:04 2026 by rpki-client