Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201830.roa
File: AS201830.roa (raw, json)
Hash identifier: KBAOhA/sphB/hMj6HjbrQVg3dXhJjE9kyNxJGXTnZTk=
Subject key identifier: 27:A1:FA:2B:34:47:72:64:64:82:75:BF:AE:C1:62:B3:81:6E:6B:46
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6EE895188EC1802EDA160DE4A4DDB79241BD41EB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201830.roa
Signing time: Thu 29 Jan 2026 15:21:00 +0000
ROA not before: Thu 29 Jan 2026 15:16:00 +0000
ROA not after: Thu 28 Jan 2027 15:21:00 +0000
asID: 201830
IP address blocks: 82.41.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e8:95:18:8e:c1:80:2e:da:16:0d:e4:a4:dd:b7:92:41:bd:41:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 29 15:16:00 2026 GMT
Not After : Jan 28 15:21:00 2027 GMT
Subject: CN=27A1FA2B34477264648275BFAEC162B3816E6B46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:85:76:91:64:05:2e:5a:2d:8f:b9:89:0c:
0e:85:98:4a:be:88:75:7e:25:04:71:77:df:2c:ca:
8b:cb:f1:4c:8d:97:a0:2c:dc:38:8d:7d:94:8b:af:
11:7c:b7:c7:c5:72:6f:6e:41:01:cc:d1:b7:82:1e:
28:58:8d:4c:1c:aa:29:6a:be:ca:53:d0:42:72:14:
6e:89:b0:58:12:42:18:16:ba:d3:31:71:7d:fe:ec:
e6:d6:46:02:a8:d9:3c:5f:47:1b:8d:70:3f:7a:31:
33:56:4f:c8:eb:33:cc:69:29:7b:e4:3c:ae:04:7c:
45:48:22:68:3c:47:68:66:5c:ab:eb:aa:f6:4c:61:
ac:f3:74:64:42:18:f9:21:e6:a5:7b:26:5c:89:39:
e2:41:f1:c1:0f:4b:55:84:0c:e6:85:3f:3e:87:1e:
fe:ce:cd:27:ec:af:4d:0c:1d:83:6e:1a:a2:8e:5e:
ec:68:f0:16:85:2b:44:40:98:69:de:04:c7:e3:85:
47:46:35:44:bd:f7:51:ad:b4:49:65:8b:71:90:33:
db:e3:e8:19:89:b2:ac:ea:21:a9:b1:5e:b7:88:62:
f2:ab:96:47:e2:6a:d2:bf:a8:d8:66:fc:c3:06:d2:
6f:65:62:b0:41:07:6c:45:c3:5c:7f:83:53:59:2d:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:FA:2B:34:47:72:64:64:82:75:BF:AE:C1:62:B3:81:6E:6B:46
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.36.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ae:cd:f8:ae:53:b5:03:81:79:90:f5:80:d9:b1:4d:a6:09:
44:9e:b0:78:69:e2:3b:41:d0:a7:df:e8:af:b9:df:3e:bb:14:
22:c0:40:f4:09:be:2e:28:f5:0a:ba:59:dd:40:ab:3d:7f:1f:
f4:ae:ac:d9:33:d7:79:b6:cf:e2:0b:0a:60:6c:90:c9:f8:d6:
62:0a:c7:37:0b:22:1a:96:05:da:82:d6:66:2e:b2:5f:f0:7e:
eb:8b:e4:f5:7a:d2:f7:f4:f9:af:67:10:21:15:fb:9a:c5:95:
a5:a8:c9:43:25:9e:0a:34:69:2a:72:4e:25:c4:c7:85:cb:9a:
aa:c4:06:b4:9a:c5:6b:0a:c7:7a:42:15:8e:db:6c:11:57:f2:
aa:82:a9:9f:ca:02:c1:1b:45:47:fc:88:81:aa:db:63:4f:dd:
e5:bc:89:f5:ee:01:1c:21:1f:f0:d1:a7:72:58:7d:22:79:fb:
65:b5:23:a3:01:6c:bc:3c:21:ca:53:b1:b3:f3:15:a7:18:2e:
4b:f4:04:ad:60:48:ff:43:72:c4:e1:07:37:2e:f0:3b:82:da:
8e:ec:f1:eb:73:9c:39:70:a4:f4:c8:48:b0:f8:e4:40:eb:5c:
d5:79:1a:94:2e:0d:1f:76:50:1f:03:38:89:cd:f4:e5:95:c9:
18:d8:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:02 2026 by rpki-client