Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396526.roa
File: AS396526.roa (raw, json)
Hash identifier: 3eMQrfaW3SOC+Gs4ahVwQnYcFD2sZUmNZhptSu6SYrA=
Subject key identifier: 18:9A:F8:26:F4:BF:A8:3B:A2:E1:36:35:2F:50:8E:5D:7E:C8:52:CF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 523ADD7626CB9AC4BA2F1DAFD31DAC7DFDB447B2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396526.roa
Signing time: Thu 10 Sep 2026 16:26:13 +0000
ROA not before: Thu 10 Sep 2026 16:21:13 +0000
ROA not after: Thu 09 Sep 2027 16:26:13 +0000
asID: 396526
IP address blocks: 82.21.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:3a:dd:76:26:cb:9a:c4:ba:2f:1d:af:d3:1d:ac:7d:fd:b4:47:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 16:21:13 2026 GMT
Not After : Sep 9 16:26:13 2027 GMT
Subject: CN=189AF826F4BFA83BA2E136352F508E5D7EC852CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:0e:4d:0e:41:49:cd:4a:e3:8c:75:bd:f4:
ec:d8:bc:8e:5e:21:f3:50:ba:d0:2d:33:2a:3a:e3:
c4:ee:90:10:ff:fb:5f:89:37:f7:bc:59:e3:69:4e:
d3:46:ad:df:be:05:8c:af:87:26:56:5a:c7:25:51:
aa:dd:02:29:72:0c:eb:be:f7:e5:b2:67:2b:38:9f:
4a:f6:e9:ae:04:af:ad:62:a5:e7:8f:6b:f1:7b:42:
ac:fc:45:c6:8e:0b:fc:7c:8d:13:ee:ff:86:85:8a:
1a:72:6f:95:00:06:d2:41:bb:43:a6:0a:ce:29:c4:
50:00:79:cf:a4:80:ac:82:ea:d0:f5:fb:2f:b0:b0:
74:46:f3:44:98:f3:dc:2e:33:2b:3c:ef:36:b5:dc:
b8:0b:e3:f8:e9:5f:dd:e2:a2:f2:04:ba:7a:68:37:
8b:7b:50:74:41:1b:26:54:af:4a:ea:d8:48:3a:66:
f5:38:27:90:dd:ef:d3:71:aa:3e:61:a7:fe:ad:76:
5e:e9:48:25:6a:d8:00:9f:7d:8e:5b:46:44:b8:57:
1d:c7:51:5f:0f:10:a9:64:79:7d:56:f7:d6:8c:7b:
f2:fb:cd:e5:7e:7e:5b:be:f6:b5:4a:c6:5f:6c:c7:
32:e5:de:6f:a6:cc:0a:e7:6f:02:37:98:6f:fb:4a:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9A:F8:26:F4:BF:A8:3B:A2:E1:36:35:2F:50:8E:5D:7E:C8:52:CF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.76.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d7:f8:11:bd:d0:b8:67:c7:90:df:4b:78:de:33:07:c0:a4:
ee:13:4b:ba:1b:50:19:6f:11:1c:0b:65:17:61:03:15:e6:8f:
46:87:30:43:ad:07:c3:a7:6f:e6:49:a5:16:9f:9d:48:b5:e3:
97:51:76:85:46:39:18:42:99:81:ae:0b:8d:ba:5d:4d:82:46:
10:b6:06:78:ba:a5:14:a1:76:8e:c1:94:13:2a:40:fc:2f:2a:
b6:cf:5a:9e:2f:77:79:ab:bf:e7:e0:25:9b:e3:bb:5b:67:79:
42:96:e1:c1:58:28:88:7b:60:11:82:1a:db:48:15:cc:2b:2b:
40:e4:4e:e1:d1:2d:f0:f4:86:7e:1e:a0:af:31:36:dd:26:08:
d4:8b:09:c3:d1:52:a9:dd:67:6a:16:16:8f:72:21:cb:4a:d9:
f2:66:3a:73:7c:e7:09:ef:d8:81:70:7d:55:76:89:b3:b7:a1:
ea:85:95:36:f8:6c:f4:a1:2c:89:84:57:3c:2b:92:cf:8b:44:
69:b1:c9:73:52:70:12:02:98:de:b0:3a:8d:fc:78:0c:52:21:
a8:dc:69:34:75:79:43:4a:91:2c:b0:1c:b8:4d:50:73:77:34:
3b:b2:5a:90:9d:e9:ac:a5:ce:fd:9b:23:2c:b1:26:6c:51:80:
c7:89:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:14 2026 by rpki-client