Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202827.roa
File: AS202827.roa (raw, json)
Hash identifier: 9OIKNy4QGyVX85xbMBpr07YrMEDshHgxLLKAG1FPkLo=
Subject key identifier: 9C:7F:EC:4E:75:F9:3C:4F:29:67:28:65:25:F4:47:99:7C:CB:50:BD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 660E25C7B958713BC4522E0CBB0FC88BB5393A14
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202827.roa
Signing time: Tue 03 Feb 2026 20:42:08 +0000
ROA not before: Tue 03 Feb 2026 20:37:08 +0000
ROA not after: Tue 02 Feb 2027 20:42:08 +0000
asID: 202827
IP address blocks: 82.38.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:0e:25:c7:b9:58:71:3b:c4:52:2e:0c:bb:0f:c8:8b:b5:39:3a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 3 20:37:08 2026 GMT
Not After : Feb 2 20:42:08 2027 GMT
Subject: CN=9C7FEC4E75F93C4F2967286525F447997CCB50BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:af:fe:c8:73:f7:53:2e:da:8d:30:b9:ba:
aa:41:e5:a7:59:55:0d:12:70:d5:a5:2a:d1:35:ce:
8e:f0:8d:8b:b6:a7:37:50:54:34:e2:5f:37:85:af:
65:6e:16:b9:f2:59:b9:71:2c:ca:c0:72:33:f8:a2:
20:ea:c5:8e:d0:fb:67:93:1b:dc:11:a1:40:f8:7e:
45:db:82:b0:d7:eb:d3:fc:ec:3f:e7:fd:91:dc:81:
9f:b7:dc:4e:d9:b0:73:21:b8:e7:d4:c6:a2:e3:17:
54:57:44:b1:32:9b:60:8b:de:db:43:fd:16:33:0b:
54:b0:b1:66:46:40:a9:16:70:35:99:8f:4c:75:b3:
39:49:f1:f7:72:47:3e:05:c2:c3:cd:af:f3:ab:af:
cb:5b:9e:6e:87:06:d9:90:c8:3b:1c:b3:7e:6d:89:
2f:f9:9d:80:8b:ef:3d:85:8d:cd:6f:19:51:d0:ac:
e0:34:bf:07:56:5e:f3:57:85:64:51:e4:78:da:31:
0e:64:03:ef:0f:a0:b4:dd:c1:92:41:a8:a0:6c:f6:
3d:3b:bf:bb:97:57:d1:8f:a1:92:c7:71:ec:c3:45:
ea:fc:01:f0:dd:eb:0d:48:d8:e1:06:f0:2a:f2:26:
bb:da:4c:0e:cd:b0:51:ba:14:2e:9b:38:c4:76:2b:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7F:EC:4E:75:F9:3C:4F:29:67:28:65:25:F4:47:99:7C:CB:50:BD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202827.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.17.0/24
Signature Algorithm: sha256WithRSAEncryption
31:07:f4:62:19:12:7c:b9:bb:7f:93:98:98:5c:f5:07:bc:0a:
c4:60:28:d3:e2:61:bc:f6:77:31:3d:01:d4:7a:b2:a1:3c:ca:
88:ca:54:15:0d:3e:80:92:06:ad:de:f4:d2:ba:87:98:c9:8b:
3c:53:b8:dd:18:c1:ff:50:85:09:f4:a1:7b:7f:1c:4e:cb:5e:
78:fa:b1:4a:7e:cd:4e:48:44:4b:56:45:0d:a2:e6:68:09:4e:
41:25:e4:b6:54:3e:c6:de:ea:7f:dc:6d:9c:67:80:e4:d1:55:
49:a8:50:77:60:ad:01:3d:b9:9a:63:f4:e2:90:84:44:16:dc:
85:fd:56:d6:fb:e9:d9:65:78:ba:5e:bc:6e:34:c1:7a:65:84:
a9:21:30:c9:f9:84:90:bf:f9:ce:0c:2a:de:eb:04:80:01:70:
4a:eb:a8:2c:f5:ef:87:bc:64:ab:ed:a5:07:54:3d:7b:26:5d:
c5:7c:ff:a0:3f:c5:fa:59:20:b8:b1:61:11:f0:0e:2b:30:8f:
db:76:11:61:81:4b:29:20:1a:00:8d:85:c8:6c:d4:0f:b4:ca:
45:c3:3f:08:c2:c0:65:ff:df:de:50:8b:0a:e0:6a:50:b8:69:
b8:9d:52:c4:41:87:9d:42:13:f2:ae:2b:76:39:3e:ed:78:fc:
b0:19:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:53:30 2026 by rpki-client