Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1405.roa
File: AS1405.roa (raw, json)
Hash identifier: HgjwUlaWPvcjPCsxZQYXKdQu1PnX+kjbhlx8zPaRGKs=
Subject key identifier: 80:83:39:93:B7:45:53:AE:EA:93:59:B4:9B:49:B0:A1:D5:C8:B1:34
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1D5A2EE8FF97AACDDE770266D238A17C5D4F3F5B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1405.roa
Signing time: Sun 06 Sep 2026 23:40:52 +0000
ROA not before: Sun 06 Sep 2026 23:35:52 +0000
ROA not after: Sun 05 Sep 2027 23:40:52 +0000
asID: 1405
IP address blocks: 82.39.160.0/24 maxlen: 24
2a13:9500:1a2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5a:2e:e8:ff:97:aa:cd:de:77:02:66:d2:38:a1:7c:5d:4f:3f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 6 23:35:52 2026 GMT
Not After : Sep 5 23:40:52 2027 GMT
Subject: CN=80833993B74553AEEA9359B49B49B0A1D5C8B134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:be:52:06:6d:cc:ad:e0:e2:b4:d7:af:cd:93:
df:0d:0e:17:60:f6:ba:3f:a8:f5:9d:fb:92:1c:0c:
6d:bd:80:8e:2b:6b:6e:d6:74:46:e2:5c:42:a7:1b:
84:4b:97:d4:21:ea:a9:71:cd:ea:1d:b1:18:dd:20:
55:13:9a:f3:92:86:86:c2:86:e4:de:7c:8b:0e:78:
3d:d0:ff:61:7d:15:b3:31:d3:d4:06:58:89:ce:45:
aa:3a:7b:35:ce:6d:3d:78:1b:eb:2f:a2:4a:a6:5e:
69:96:28:e4:a4:5a:d7:11:81:87:13:8c:1a:89:7c:
1e:5b:08:9a:18:53:1a:c7:ac:e0:30:d1:80:ca:f4:
00:c6:11:39:0d:4f:47:76:94:21:a0:1c:17:2f:f3:
dd:c2:c2:0c:11:cd:e1:f5:19:f2:6e:00:f7:c5:0c:
c0:8d:60:f7:5b:5d:0a:81:13:d1:43:e9:88:06:e8:
a1:63:bf:c7:a0:a2:cd:05:96:4e:34:88:30:c4:2c:
f2:19:4c:d4:14:63:65:53:aa:9f:f4:9c:2c:c1:2b:
6d:74:f9:b2:c8:71:a4:cf:a3:c3:b0:26:7e:c2:ad:
ff:46:3c:87:db:42:db:68:76:e3:02:60:32:0b:1b:
8a:da:82:3a:db:3e:18:9e:94:ab:cd:86:11:10:81:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:83:39:93:B7:45:53:AE:EA:93:59:B4:9B:49:B0:A1:D5:C8:B1:34
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.160.0/24
IPv6:
2a13:9500:1a2::/48
Signature Algorithm: sha256WithRSAEncryption
54:03:7e:54:9b:dc:76:2a:a9:d2:a8:ff:43:bb:de:59:97:e4:
37:09:11:6b:77:23:57:92:6f:05:33:38:db:7f:c2:64:3b:9f:
8d:98:9e:9d:d4:bf:c1:6c:48:69:e9:d4:7f:42:84:e9:97:af:
07:f0:ca:25:00:74:ec:c3:07:03:10:19:29:f8:fe:4f:77:82:
61:8e:d2:68:66:42:6b:e3:b0:13:00:e1:fc:a2:0d:22:14:68:
57:1e:a5:a4:b3:2f:bd:f1:64:2c:3c:7d:7e:28:71:30:32:3f:
6f:00:92:20:a4:0f:cf:59:40:26:46:b5:99:95:a0:8a:01:af:
54:c1:9f:e4:5c:53:1b:a7:e5:f5:e8:0e:52:37:c6:ef:ec:c3:
08:4a:d3:c4:73:3e:b9:65:60:5b:ff:07:f9:9d:fd:3b:fe:c5:
fa:19:1b:af:4d:7e:14:26:7c:6f:6d:7f:36:3a:f9:18:dd:a9:
b9:92:c1:93:d5:f6:35:c5:b0:d2:ac:8b:87:41:85:b4:8b:fd:
c8:fe:90:5f:54:db:63:4c:8d:6f:0a:b4:f2:06:90:f7:ac:8f:
6f:da:b1:85:8b:5e:c0:fb:b7:ec:37:a7:64:f3:68:6e:4b:a0:
81:e5:00:e2:da:4f:3e:e3:68:b3:4b:d8:6c:a3:5f:bb:a2:26:
19:bf:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:08:26 2026 by rpki-client