Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: whhl9iu+qxyitNMqvaICHiRu/bVbnUtOc2oNTIkBF9E=
Subject key identifier: 68:7F:D6:92:B0:C9:3E:2B:2D:D7:6A:9E:A3:F2:0B:EB:1A:DB:78:E2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 30DF7114E8AAEA589D5C813473748EA6997E219B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS23470.roa
Signing time: Sun 06 Sep 2026 16:39:58 +0000
ROA not before: Sun 06 Sep 2026 16:34:58 +0000
ROA not after: Sun 05 Sep 2027 16:39:58 +0000
asID: 23470
IP address blocks: 82.41.132.0/24 maxlen: 24
2a13:9500:1a8::/48 maxlen: 48
2a13:9500:1d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:df:71:14:e8:aa:ea:58:9d:5c:81:34:73:74:8e:a6:99:7e:21:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 6 16:34:58 2026 GMT
Not After : Sep 5 16:39:58 2027 GMT
Subject: CN=687FD692B0C93E2B2DD76A9EA3F20BEB1ADB78E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:4a:a8:2e:3e:f8:e1:be:6a:1f:a3:47:0b:
bd:93:0e:e1:f1:60:eb:cc:11:57:fd:60:d2:22:7b:
ba:13:c7:7f:83:21:80:42:14:a8:04:1e:f3:9f:a3:
c9:25:8d:8f:0f:95:92:66:4d:1b:05:c5:d2:5c:e9:
92:85:c7:b4:d1:9e:79:e1:63:bf:25:2d:a6:ae:f3:
51:a2:1b:0c:ac:a1:07:e1:bd:13:17:b3:8e:ca:60:
07:35:21:c7:2f:79:88:99:8f:ff:a7:42:c3:27:58:
29:c9:ef:e7:0b:8c:ac:99:88:6f:11:79:75:dc:40:
83:96:06:34:41:70:9f:7a:cd:48:90:22:bf:a1:28:
61:77:80:b0:90:f0:4c:7d:70:89:9c:e5:d7:83:9f:
3d:33:c3:2f:a4:ff:8a:36:1c:4f:fe:6b:b2:2c:b5:
b5:59:8d:74:2e:e6:c2:a9:f4:4b:17:a0:d5:17:ad:
4d:6f:3b:97:d0:be:31:69:8f:4d:33:68:73:a0:0d:
b8:5f:e2:af:b4:4f:f7:12:6c:40:79:d4:4b:da:0b:
60:93:26:32:f9:89:81:85:84:4f:52:02:bf:62:fb:
3e:df:9d:4a:20:5e:02:b3:2d:12:6b:0e:88:c5:4a:
1f:69:35:09:11:de:d8:6a:70:11:1c:02:61:27:66:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7F:D6:92:B0:C9:3E:2B:2D:D7:6A:9E:A3:F2:0B:EB:1A:DB:78:E2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.132.0/24
IPv6:
2a13:9500:1a8::/48
2a13:9500:1d1::/48
Signature Algorithm: sha256WithRSAEncryption
7c:f3:d5:25:ff:da:50:7c:ee:f6:bc:3b:39:07:2d:5d:9e:4e:
57:21:e8:41:fc:a3:68:28:02:cd:56:58:5b:30:b6:94:fa:a2:
28:73:9c:0a:01:68:6b:c1:3b:25:75:f8:6b:19:ce:1c:cf:4c:
e1:5a:d5:23:25:62:1a:5f:dc:fd:96:08:5e:4b:34:43:0f:44:
de:41:a3:9a:9d:57:74:d3:a2:9c:e4:cd:ce:b2:96:72:c4:51:
8e:22:d2:24:98:38:c6:82:21:3c:bf:a9:d9:8b:5a:95:d1:26:
84:ac:f2:13:82:2e:36:4d:6c:47:63:72:a9:ac:d9:55:00:d7:
5c:d8:67:4f:1e:3e:1b:31:93:9d:ac:0a:23:97:fb:9f:a7:40:
86:e0:30:d9:7b:23:de:ba:32:dc:ff:de:56:fd:8c:1e:23:b9:
d3:6a:d8:47:a4:19:0e:23:63:21:31:54:d0:43:00:67:b1:8e:
25:9c:c7:b2:8d:23:c7:67:e3:e0:3e:b1:01:e6:25:46:ee:95:
14:24:3d:19:aa:fa:d4:a1:18:e8:ff:a4:f5:ed:8a:a7:93:c4:
50:7b:a6:ec:e5:64:70:fd:35:90:bf:37:ca:94:ac:b7:84:cb:
5e:35:e0:42:97:57:1e:2c:6d:2e:a5:d8:00:8f:2f:bf:52:5e:
58:5f:c1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:22:49 2026 by rpki-client