Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: D/bdgCuFh6DRgXedWr4nfJtdAcYJUwYDG+pSs9k4r/M=
Subject key identifier: 08:7A:36:D0:52:6D:5F:21:89:35:08:71:62:1C:37:A3:47:7A:EB:9F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5A4FD0CECA3C03908D165A294277EF008C725BC5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
Signing time: Thu 05 Nov 2026 12:08:19 +0000
ROA not before: Thu 05 Nov 2026 12:03:19 +0000
ROA not after: Thu 04 Nov 2027 12:08:19 +0000
asID: 396356
IP address blocks: 82.21.242.0/24 maxlen: 24
82.24.144.0/24 maxlen: 24
82.26.243.0/24 maxlen: 24
82.27.100.0/24 maxlen: 24
82.27.243.0/24 maxlen: 24
82.39.81.0/24 maxlen: 24
2a13:9500:3::/48 maxlen: 48
2a13:9500:1c::/48 maxlen: 48
2a13:9500:1d::/48 maxlen: 48
2a13:9500:1e::/48 maxlen: 48
2a13:9500:1f::/48 maxlen: 48
2a13:9500:20::/48 maxlen: 48
2a13:9500:21::/48 maxlen: 48
2a13:9500:22::/48 maxlen: 48
2a13:9500:23::/48 maxlen: 48
2a13:9500:24::/48 maxlen: 48
2a13:9500:25::/48 maxlen: 48
2a13:9500:26::/48 maxlen: 48
2a13:9500:27::/48 maxlen: 48
2a13:9500:28::/48 maxlen: 48
2a13:9500:33::/48 maxlen: 48
2a13:9500:5b::/48 maxlen: 48
2a13:9500:5c::/48 maxlen: 48
2a13:9500:5d::/48 maxlen: 48
2a13:9500:5e::/48 maxlen: 48
2a13:9500:5f::/48 maxlen: 48
2a13:9500:82::/48 maxlen: 48
2a13:9500:83::/48 maxlen: 48
2a13:9500:84::/48 maxlen: 48
2a13:9500:85::/48 maxlen: 48
2a13:9500:86::/48 maxlen: 48
2a13:9500:87::/48 maxlen: 48
2a13:9500:88::/48 maxlen: 48
2a13:9500:89::/48 maxlen: 48
2a13:9500:1b7::/48 maxlen: 48
2a13:9500:1b8::/48 maxlen: 48
2a13:9500:1b9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4f:d0:ce:ca:3c:03:90:8d:16:5a:29:42:77:ef:00:8c:72:5b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 5 12:03:19 2026 GMT
Not After : Nov 4 12:08:19 2027 GMT
Subject: CN=087A36D0526D5F2189350871621C37A3477AEB9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:e0:5a:2b:e3:61:c3:4f:cf:22:f0:66:3f:
e0:2e:8d:dd:6f:ae:71:72:12:3b:95:b0:8e:0c:43:
65:94:c0:a1:53:f5:85:2d:4f:af:8b:71:61:9a:3e:
5b:28:58:22:62:a1:e8:2a:13:90:07:b7:aa:98:a9:
ee:be:1e:b4:19:e5:8c:43:c6:8c:0e:d9:e2:6c:81:
19:8e:51:bf:3b:ac:c8:63:ed:31:c3:0c:c1:8e:d7:
79:8d:eb:1a:44:d0:63:cd:03:07:9e:28:1a:0a:8d:
6b:53:0e:f4:3d:84:a2:91:5d:1d:1e:33:f9:c8:19:
23:86:1c:0f:66:ea:6e:07:35:a9:c2:9a:ba:8d:7f:
cb:1e:03:b8:b4:32:af:1a:b0:66:3f:66:be:94:99:
41:30:c5:32:13:e6:0a:7f:35:55:70:80:0b:f4:50:
59:3c:84:cb:dc:b8:be:e6:b2:c4:14:94:9c:df:b9:
3b:0b:1a:59:b0:3f:f5:6a:07:dd:a6:1e:3b:8b:94:
50:e7:37:78:f2:19:27:39:db:b9:17:e1:1a:bb:b7:
c6:b2:88:82:73:73:aa:28:c5:01:2d:de:51:03:d0:
75:e7:89:44:ad:00:2d:02:85:91:8f:60:fc:01:2c:
59:54:d9:5c:c2:ad:69:db:e7:fb:c4:24:bd:6d:71:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7A:36:D0:52:6D:5F:21:89:35:08:71:62:1C:37:A3:47:7A:EB:9F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.242.0/24
82.24.144.0/24
82.26.243.0/24
82.27.100.0/24
82.27.243.0/24
82.39.81.0/24
IPv6:
2a13:9500:3::/48
2a13:9500:1c::-2a13:9500:28:ffff:ffff:ffff:ffff:ffff
2a13:9500:33::/48
2a13:9500:5b::-2a13:9500:5f:ffff:ffff:ffff:ffff:ffff
2a13:9500:82::-2a13:9500:89:ffff:ffff:ffff:ffff:ffff
2a13:9500:1b7::-2a13:9500:1b9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a7:69:25:81:2e:8c:4a:04:ca:73:8d:4c:51:95:f5:94:55:a5:
b2:9c:a7:e6:c1:9a:cb:aa:d3:d1:ba:ad:05:0e:ed:95:23:a1:
be:12:82:33:f7:99:02:20:22:26:a7:0d:8c:4b:b2:66:81:c8:
82:36:6f:dd:dd:17:9d:78:02:a9:23:b2:dd:94:c1:64:2c:4c:
d3:20:ce:c7:ca:bc:32:58:6f:ae:1c:fc:ad:15:7c:1c:3c:23:
34:6a:aa:85:ec:2e:07:1d:92:42:50:d5:e9:1b:53:68:6c:25:
25:f1:0b:cf:88:11:64:06:1f:59:99:d6:5d:1d:74:55:b6:6e:
a4:84:c8:a7:e8:c5:3e:75:ba:1b:90:73:d0:2f:96:d0:18:53:
a8:57:f5:c9:88:9d:f1:fa:c7:32:ba:7a:7a:2d:ac:d2:b6:c4:
67:c6:a6:1f:f4:c7:8a:83:b7:94:67:1b:63:db:25:f2:8b:30:
b8:f1:40:17:0b:56:5b:34:34:ba:c9:23:29:e7:22:b2:e6:6b:
6f:23:2a:a6:bd:a0:14:bc:ef:f9:89:12:5d:aa:f7:ac:6a:14:
8f:56:5e:e2:9e:fa:87:6e:de:35:64:e0:38:82:b7:43:23:9e:
6f:90:44:90:46:6d:4a:20:9a:86:37:bd:fa:03:c9:b2:58:a6:
fb:bf:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:13:25 2026 by rpki-client