Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: lyZo6LChuBjOhk9MnXIJVi0Uu/1rAC9smuOEx2e2GRM=
Subject key identifier: 1C:7C:61:AD:CF:A5:A8:C1:F7:85:D0:71:BA:F7:41:BB:52:BF:3A:A6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 587CE98A2BD80EB899ACD134E63EE7D4A20EF7A5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395374.roa
Signing time: Mon 03 Nov 2025 09:57:21 +0000
ROA not before: Mon 03 Nov 2025 09:52:21 +0000
ROA not after: Mon 02 Nov 2026 09:57:21 +0000
asID: 395374
IP address blocks: 82.22.49.0/24 maxlen: 24
82.24.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7c:e9:8a:2b:d8:0e:b8:99:ac:d1:34:e6:3e:e7:d4:a2:0e:f7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 3 09:52:21 2025 GMT
Not After : Nov 2 09:57:21 2026 GMT
Subject: CN=1C7C61ADCFA5A8C1F785D071BAF741BB52BF3AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:65:4a:1d:eb:91:0e:9a:bd:e9:54:7a:32:
78:71:1c:9a:23:55:45:21:eb:30:b3:25:06:97:02:
44:7e:be:9e:c6:94:46:a9:be:b8:f4:2c:75:6d:57:
9c:ca:5c:30:ee:8d:7f:08:52:e6:af:f2:b8:79:47:
18:10:02:ec:07:0d:e0:e4:24:72:16:38:72:1c:58:
e6:fa:b3:d8:3e:a1:b9:2b:ea:6e:de:99:a4:8f:68:
89:20:97:6c:5d:22:2f:fd:1f:6c:e7:38:fc:67:60:
6a:c0:44:a0:47:63:a6:e5:c1:c9:ed:b0:ba:66:8f:
a9:1a:46:17:6b:19:d2:ec:01:00:43:50:0b:82:2d:
80:20:4e:97:b7:55:87:1e:05:c7:99:89:ae:4a:72:
3d:dd:7c:b2:8e:6e:d4:bc:43:be:27:f1:e1:64:d2:
33:b7:9b:4e:7c:24:d7:a8:f4:1a:b4:53:c5:ef:37:
d4:22:9b:0a:4f:aa:95:0f:3c:5d:ab:d8:23:12:11:
e3:fa:35:8a:ae:27:8a:d4:bb:d7:71:f1:62:41:ab:
95:ef:68:ff:a1:eb:f7:fa:f3:b8:a7:d7:71:73:7a:
c2:5a:3d:17:f2:38:ea:9e:2a:74:a3:f4:40:4b:ad:
c5:7f:ed:6f:09:b9:6e:ec:ca:ba:70:71:b0:74:69:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7C:61:AD:CF:A5:A8:C1:F7:85:D0:71:BA:F7:41:BB:52:BF:3A:A6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.49.0/24
82.24.107.0/24
Signature Algorithm: sha256WithRSAEncryption
04:43:73:1d:fc:76:d9:e2:fc:be:01:7f:76:02:cc:3b:db:52:
68:ba:44:1b:ae:29:51:a0:9d:2b:af:c6:c1:24:76:26:a8:69:
4d:3c:cc:1a:49:85:37:cd:57:4f:86:7f:0d:b7:d4:4e:af:35:
10:fa:da:d4:c2:b6:a6:fa:93:e9:65:1b:79:90:5c:b9:cf:02:
c6:c1:e7:3f:6d:d5:ec:a3:b9:31:e5:61:3c:6f:2d:3b:b1:68:
91:ed:87:dd:99:fe:fe:1f:27:fc:22:ae:69:c8:46:b6:cb:3f:
7b:fb:12:28:7f:6c:07:75:c2:9f:5e:b6:01:1a:25:c7:27:69:
8c:99:3c:eb:5b:f0:48:e2:4c:1a:40:2a:5c:78:b9:a5:7f:5c:
63:49:53:e9:6c:77:d6:0d:76:7f:f2:13:62:08:52:8b:8e:7e:
59:54:1b:0c:50:1e:5b:e2:f4:26:f1:9a:41:53:8a:d5:0b:4b:
b2:cf:dc:31:e7:02:08:3b:bc:62:66:11:6a:56:65:0c:0c:5a:
7f:dd:b1:03:a8:43:ed:7c:b5:31:3b:f5:4f:ec:af:cd:cd:14:
e4:a5:25:c5:5d:62:dd:81:99:99:db:e0:1b:5d:52:d5:f6:19:
b9:f1:ac:0b:cf:f0:34:5c:1f:e5:bf:2f:d2:42:c9:79:72:e4:
2b:54:5e:bd
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUWHzpiivYDriZrNE05j7n1KIO96UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTExMDMwOTUyMjFaFw0yNjExMDIwOTU3MjFaMDMxMTAvBgNV
BAMTKDFDN0M2MUFEQ0ZBNUE4QzFGNzg1RDA3MUJBRjc0MUJCNTJCRjNBQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvx2VKHeuRDpq96VR6MnhxHJoj
VUUh6zCzJQaXAkR+vp7GlEapvrj0LHVtV5zKXDDujX8IUuav8rh5RxgQAuwHDeDk
JHIWOHIcWOb6s9g+obkr6m7emaSPaIkgl2xdIi/9H2znOPxnYGrARKBHY6blwcnt
sLpmj6kaRhdrGdLsAQBDUAuCLYAgTpe3VYceBceZia5Kcj3dfLKObtS8Q74n8eFk
0jO3m058JNeo9Bq0U8XvN9QimwpPqpUPPF2r2CMSEeP6NYquJ4rUu9dx8WJBq5Xv
aP+h6/f687in13FzesJaPRfyOOqeKnSj9EBLrcV/7W8JuW7syrpwcbB0aUa5AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUHHxhrc+lqMH3hdBxuvdBu1K/OqYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk1Mzc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhYx
AwQAUhhrMA0GCSqGSIb3DQEBCwUAA4IBAQAEQ3Md/HbZ4vy+AX92Asw721JoukQb
rilRoJ0rr8bBJHYmqGlNPMwaSYU3zVdPhn8Nt9ROrzUQ+trUwram+pPpZRt5kFy5
zwLGwec/bdXso7kx5WE8by07sWiR7Yfdmf7+Hyf8Iq5pyEa2yz97+xIof2wHdcKf
XrYBGiXHJ2mMmTzrW/BI4kwaQCpceLmlf1xjSVPpbHfWDXZ/8hNiCFKLjn5ZVBsM
UB5b4vQm8ZpBU4rVC0uyz9wx5wIIO7xiZhFqVmUMDFp/3bEDqEPtfLUxO/VP7K/N
zRTkpSXFXWLdgZmZ2+AbXVLV9hm58awLz/A0XB/lvy/SQsl5cuQrVF69
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:26:07 2025 by rpki-client