Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: FapfRlW5G8rsY84GjDJrKZBaGHlVURtmw3ZaS8BmOrI=
Subject key identifier: 5D:42:EE:95:65:32:6A:61:00:B5:5D:CE:3E:FC:79:DD:DC:99:EF:FC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 534F75A110DB378AAD4AD7FAD0E2B91E95A86144
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396982.roa
Signing time: Sat 21 Feb 2026 10:15:18 +0000
ROA not before: Sat 21 Feb 2026 10:10:18 +0000
ROA not after: Sat 20 Feb 2027 10:15:18 +0000
asID: 396982
IP address blocks: 82.39.118.0/24 maxlen: 24
2a13:9500:13c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4f:75:a1:10:db:37:8a:ad:4a:d7:fa:d0:e2:b9:1e:95:a8:61:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 21 10:10:18 2026 GMT
Not After : Feb 20 10:15:18 2027 GMT
Subject: CN=5D42EE9565326A6100B55DCE3EFC79DDDC99EFFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:78:98:41:f3:59:fa:a9:48:3a:7f:83:7f:
c0:f9:94:e1:97:90:a0:7f:2a:91:82:18:31:62:db:
90:d5:9b:7c:71:b8:de:87:c3:90:fe:8f:88:2c:6b:
72:9e:b9:96:03:ef:13:5c:2b:e9:3f:b5:d7:d2:0d:
90:3a:60:49:ec:a2:90:50:4a:9d:e4:f9:60:ea:38:
b8:c7:50:90:2f:4b:aa:6a:f1:dd:66:2a:9d:78:fe:
af:9d:c0:53:b0:e3:9f:4a:58:cb:0d:29:16:ae:25:
3c:a1:c9:6f:03:d4:d8:89:28:d6:2e:38:ba:b4:56:
28:7b:de:e6:63:b9:48:09:8a:0c:39:9b:7c:cd:4f:
47:03:4b:7a:5f:51:5b:40:ab:30:23:16:47:6e:50:
8e:c1:64:1b:cd:ed:f0:5f:c0:e2:93:b3:0e:a4:b3:
9c:20:b9:8a:bd:d2:b8:b9:02:48:2a:46:f2:27:0a:
95:38:8e:3c:5f:da:23:2b:f6:21:50:7b:16:fa:ef:
76:e0:a2:69:a2:2f:a9:60:db:9f:86:1e:2f:ef:87:
f2:77:25:bf:d5:58:12:55:73:4e:8a:62:7e:c0:69:
35:1a:66:fe:3f:4a:c0:47:a3:08:ed:e6:1c:dc:7c:
2e:b2:cb:4d:a6:24:d0:bb:82:08:aa:76:7a:73:ce:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:42:EE:95:65:32:6A:61:00:B5:5D:CE:3E:FC:79:DD:DC:99:EF:FC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.118.0/24
IPv6:
2a13:9500:13c::/48
Signature Algorithm: sha256WithRSAEncryption
98:fe:36:f6:29:41:bc:5b:fe:8d:fa:c3:ac:ce:a0:0e:f5:27:
b4:89:54:c8:93:31:b1:93:1a:b8:69:fe:18:53:75:03:ae:c7:
15:79:b3:3f:8c:ad:16:6f:db:cc:21:28:ab:c4:38:48:53:db:
f8:c8:c3:bf:d8:9d:dc:78:18:ac:3c:a6:1e:63:a9:cc:ba:cc:
f4:33:6d:0f:fe:81:b3:c8:67:fb:ee:fe:3d:10:14:f7:df:c4:
a8:ce:91:16:ba:21:09:d8:89:d3:8b:44:06:2a:7f:49:7f:4e:
fe:5b:e9:05:07:ea:af:d2:55:86:1c:44:04:fe:ed:ba:4f:71:
1b:27:33:2a:1b:3e:88:b4:8b:c3:62:89:17:f4:aa:ba:ff:2d:
14:36:20:f5:ce:f6:d2:bf:92:a2:f5:e3:83:cb:79:d8:30:fb:
de:b9:57:7f:58:30:5d:41:2d:dd:19:ba:0b:9b:81:13:ef:47:
c4:d4:db:5b:13:57:8c:d7:c7:a9:a8:55:27:4e:f9:62:08:f9:
ea:fb:a0:ed:b8:7b:57:d4:0a:c1:56:fe:b5:cd:1b:9c:a4:d8:
a0:3b:ea:8c:a0:44:92:fc:bf:76:ea:e1:f8:a9:b4:21:cb:79:
17:0c:4d:88:a8:27:55:09:36:91:47:42:bf:25:a2:98:4e:c2:
13:94:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:16 2026 by rpki-client