Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: IA3ynhxBqB65v8jY1979THibTVxbZXK4ILS8tvvro+w=
Subject key identifier: 39:47:4E:2D:AA:58:F6:6D:D7:3F:FA:82:64:67:33:78:45:94:81:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 75C4DF878EB26EE36EF170A9FA3C7553A435EDF9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395374.roa
Signing time: Tue 24 Feb 2026 10:13:19 +0000
ROA not before: Tue 24 Feb 2026 10:08:19 +0000
ROA not after: Tue 23 Feb 2027 10:13:19 +0000
asID: 395374
IP address blocks: 178.83.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c4:df:87:8e:b2:6e:e3:6e:f1:70:a9:fa:3c:75:53:a4:35:ed:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 24 10:08:19 2026 GMT
Not After : Feb 23 10:13:19 2027 GMT
Subject: CN=39474E2DAA58F66DD73FFA82646733784594813E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6a:e6:af:f0:7d:cd:8f:2e:f9:52:ee:5e:fa:
ca:18:91:82:af:3f:e0:d9:06:f3:0b:29:4e:52:90:
2f:21:8d:cf:d0:ff:bb:5e:d4:9b:9e:0f:17:b4:fe:
f8:37:47:d3:8f:d1:1c:42:49:88:a0:b0:e1:22:d8:
f8:71:25:ad:81:3f:84:92:5d:57:5e:ee:00:03:ad:
16:c7:07:bb:c9:2b:91:31:ce:55:ab:cd:2d:78:8b:
a4:6f:04:ac:02:c3:0b:e4:f6:aa:a6:86:c5:22:bb:
4e:d9:4d:2f:5b:1d:38:44:f0:0e:45:d0:6f:f5:59:
01:52:8d:b7:45:b2:1e:e5:9f:37:3f:da:ad:66:77:
c4:6f:d9:0f:48:39:34:b6:75:87:7d:65:8a:62:6c:
b6:10:a6:6f:2a:0f:25:05:cc:06:b4:18:72:85:ba:
cc:2f:55:aa:f3:72:9e:53:0e:75:41:a7:f6:6e:8c:
00:f4:de:b0:0d:a6:bc:83:5b:6a:cc:ff:64:03:23:
6c:b9:33:50:49:37:ab:36:b8:43:cd:1f:02:8d:e6:
b6:31:e7:8a:62:40:eb:5e:4a:8a:0a:ea:44:23:bc:
3c:1d:88:53:4c:30:c3:33:3b:8d:0c:b5:ad:4b:57:
4b:89:1a:be:24:b4:b1:c5:4f:15:08:59:f0:0d:b4:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:4E:2D:AA:58:F6:6D:D7:3F:FA:82:64:67:33:78:45:94:81:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.69.0/24
Signature Algorithm: sha256WithRSAEncryption
62:be:85:c9:ff:2b:34:12:e9:1c:b8:03:b5:f7:b2:70:d2:2b:
42:0c:6e:5a:a5:5d:05:21:eb:d8:c4:90:38:f4:ca:57:e1:1b:
1c:eb:95:a5:18:00:02:5f:55:af:5e:2a:42:52:1c:8e:c3:9e:
90:cb:60:f1:b0:e8:61:16:e9:5e:ab:fd:6a:ef:bb:b6:98:a2:
c0:e0:ce:3f:21:2a:64:8a:87:ff:28:06:76:05:b9:f3:8d:98:
06:d6:6f:e6:9f:54:8f:e2:a4:cb:83:09:f8:63:17:be:3b:a1:
3e:85:7b:fb:85:e8:04:83:9e:77:15:1d:bc:6c:e6:34:97:18:
0b:06:54:35:aa:46:50:6b:3c:c0:d9:9a:c6:10:2e:e6:37:8d:
e7:3e:56:8f:35:f8:55:50:cd:20:98:2d:f2:2e:af:a6:30:dd:
28:ae:4c:0e:24:64:dc:9f:46:4e:96:d9:dc:17:32:97:d0:64:
37:a9:97:e3:26:a4:ca:f9:6b:76:70:8d:21:c8:4e:fa:84:5d:
e1:57:b6:3c:17:9a:59:15:d6:d9:ef:2b:6d:96:14:eb:83:de:
c4:ca:d2:13:56:a2:5e:05:ed:39:47:78:67:f7:a4:ab:c0:fa:
21:43:eb:45:0f:dd:86:ca:8f:02:83:aa:d2:22:19:99:63:8f:
7f:59:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:57:39 2026 by rpki-client