Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: jn7DwMuWSbdtm+GTy8tWXfduepa8waxf7vUir64g7rY=
Subject key identifier: 5A:CA:51:57:DC:1D:F2:6B:D6:4A:FC:0A:DF:7C:5C:E4:A9:57:98:41
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2E706F6EE45B240F1FADB3A4AC7469B8EF2AE6F2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS23470.roa
Signing time: Fri 24 Jul 2026 07:53:02 +0000
ROA not before: Fri 24 Jul 2026 07:48:02 +0000
ROA not after: Fri 23 Jul 2027 07:53:02 +0000
asID: 23470
IP address blocks: 82.41.132.0/24 maxlen: 24
2a13:9500:1a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:70:6f:6e:e4:5b:24:0f:1f:ad:b3:a4:ac:74:69:b8:ef:2a:e6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 07:48:02 2026 GMT
Not After : Jul 23 07:53:02 2027 GMT
Subject: CN=5ACA5157DC1DF26BD64AFC0ADF7C5CE4A9579841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6a:4c:d4:01:b2:2a:0a:c5:5d:59:a5:7d:e7:
35:47:f9:31:42:55:36:24:87:2a:05:48:5f:d2:4d:
9b:d2:8d:07:97:a5:61:06:7a:bf:e4:e6:fa:0d:9b:
11:cf:e5:86:84:c1:b8:66:b5:37:b6:aa:8f:5c:07:
ca:10:53:ab:b5:5a:47:99:f5:28:56:85:a6:6c:17:
79:1c:1e:d8:ba:a4:41:88:4f:75:1c:9b:ff:31:b0:
de:dd:6f:cc:2a:12:c7:24:c3:25:74:97:37:94:6e:
9b:c0:13:27:f3:f4:34:c1:b3:df:4a:1f:40:1a:48:
7a:af:6a:a9:ce:f2:a7:ee:c2:0a:84:a5:80:5a:94:
ca:24:88:6f:e0:6e:9e:59:60:0f:c8:68:36:c3:90:
da:7c:32:5b:8b:d7:37:db:4f:ef:23:82:e0:65:53:
c7:ea:96:a8:29:dc:fa:1c:0b:17:e6:6b:81:86:ac:
9b:15:56:41:00:89:a0:cc:dd:d1:66:c0:ee:26:b2:
84:d5:d1:db:c0:fc:7e:04:b8:02:9b:2d:4c:a3:51:
c4:53:1b:16:b3:e5:e4:d9:b4:c8:e4:5e:2e:bb:e7:
ba:c2:4a:64:6b:06:74:0f:b0:b0:42:60:e8:d2:9b:
c2:ac:30:4f:8f:20:ba:fa:ef:c9:ef:5c:6a:d4:c6:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CA:51:57:DC:1D:F2:6B:D6:4A:FC:0A:DF:7C:5C:E4:A9:57:98:41
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.132.0/24
IPv6:
2a13:9500:1a8::/48
Signature Algorithm: sha256WithRSAEncryption
91:f4:ae:1f:36:a7:62:bf:5d:0b:20:ed:c6:92:a6:40:a2:81:
47:78:fd:05:ef:5a:1c:2a:4f:3b:6d:2f:3e:ce:84:33:d1:15:
d7:0f:f1:a3:b3:ea:ef:16:e0:fe:25:48:5e:de:d2:ff:11:c4:
41:22:f6:65:5a:1a:95:72:88:bd:f7:41:21:da:b5:1f:38:8e:
f7:b5:62:f4:a9:de:5c:3b:3f:e5:9b:81:dc:6e:15:db:22:28:
2b:3e:5b:97:ca:8c:7c:c4:bb:2b:41:b9:8a:14:3f:e2:41:d8:
0b:a9:cf:d2:da:bf:14:cb:06:56:c1:e4:e8:c9:1f:6b:f2:eb:
c2:41:c2:c4:33:57:6a:87:89:04:d4:ce:af:fe:4f:68:34:b3:
1a:a2:9e:a9:63:ed:1b:62:86:e3:67:c7:1f:69:7e:98:50:86:
23:c8:cc:17:48:0f:79:2f:ff:1f:46:a2:bb:20:1c:73:5d:8b:
9e:b2:6a:bd:e4:54:74:62:b4:ad:d7:ce:a9:c2:38:ca:74:52:
4c:14:e1:1b:ef:85:20:74:40:2b:fc:8e:c1:66:3e:c4:4f:68:
e8:32:3b:50:b6:c9:4b:25:36:ce:e3:a5:27:70:1e:f9:ec:2c:
84:5e:ae:33:b1:bd:b9:c9:d2:14:31:8f:37:54:70:1b:87:60:
a9:bd:3c:45
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIULnBvbuRbJA8frbOkrHRpuO8q5vIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MjQwNzQ4MDJaFw0yNzA3MjMwNzUzMDJaMDMxMTAvBgNV
BAMTKDVBQ0E1MTU3REMxREYyNkJENjRBRkMwQURGN0M1Q0U0QTk1Nzk4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrakzUAbIqCsVdWaV95zVH+TFC
VTYkhyoFSF/STZvSjQeXpWEGer/k5voNmxHP5YaEwbhmtTe2qo9cB8oQU6u1WkeZ
9ShWhaZsF3kcHti6pEGIT3Ucm/8xsN7db8wqEsckwyV0lzeUbpvAEyfz9DTBs99K
H0AaSHqvaqnO8qfuwgqEpYBalMokiG/gbp5ZYA/IaDbDkNp8MluL1zfbT+8jguBl
U8fqlqgp3PocCxfma4GGrJsVVkEAiaDM3dFmwO4msoTV0dvA/H4EuAKbLUyjUcRT
Gxaz5eTZtMjkXi6757rCSmRrBnQPsLBCYOjSm8KsME+PILr678nvXGrUxlwDAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUWspRV9wd8mvWSvwK33xc5KlXmEEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjM0NzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABSKYQw
DwQCAAIwCQMHACoTlQABqDANBgkqhkiG9w0BAQsFAAOCAQEAkfSuHzanYr9dCyDt
xpKmQKKBR3j9Be9aHCpPO20vPs6EM9EV1w/xo7Pq7xbg/iVIXt7S/xHEQSL2ZVoa
lXKIvfdBIdq1HziO97Vi9KneXDs/5ZuB3G4V2yIoKz5bl8qMfMS7K0G5ihQ/4kHY
C6nP0tq/FMsGVsHk6Mkfa/LrwkHCxDNXaoeJBNTOr/5PaDSzGqKeqWPtG2KG42fH
H2l+mFCGI8jMF0gPeS//H0aiuyAcc12LnrJqveRUdGK0rdfOqcI4ynRSTBThG++F
IHRAK/yOwWY+xE9o6DI7ULbJSyU2zuOlJ3Ae+ewshF6uM7G9ucnSFDGPN1RwG4dg
qb08RQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:08 2026 by rpki-client