Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398256.roa
File: AS398256.roa (raw, json)
Hash identifier: 57JTPzdFduCXOoiefqPkLMbM50yJe+wSu6ewYrYK/1c=
Subject key identifier: A1:85:5B:17:CD:29:AB:7E:5C:F4:DD:3D:DA:9F:80:D0:82:8B:3B:9C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7633E52D6B540647168D4B5FF9CD2CA35F3F5474
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398256.roa
Signing time: Thu 10 Sep 2026 18:13:08 +0000
ROA not before: Thu 10 Sep 2026 18:08:08 +0000
ROA not after: Thu 09 Sep 2027 18:13:08 +0000
asID: 398256
IP address blocks: 82.27.71.0/24 maxlen: 24
82.27.78.0/24 maxlen: 24
2a13:9500:10b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:33:e5:2d:6b:54:06:47:16:8d:4b:5f:f9:cd:2c:a3:5f:3f:54:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 18:08:08 2026 GMT
Not After : Sep 9 18:13:08 2027 GMT
Subject: CN=A1855B17CD29AB7E5CF4DD3DDA9F80D0828B3B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:34:7b:b4:68:78:da:39:b6:a6:49:82:39:
ac:8b:d9:88:06:99:1f:9e:78:18:c1:56:d4:5c:70:
38:7a:34:4e:b9:b0:0c:40:66:ff:c3:fd:0c:00:23:
cc:b4:2f:0a:d0:57:53:5e:47:9e:65:52:89:e3:b2:
1f:02:16:04:a9:6f:67:10:23:36:bc:d9:22:17:af:
4d:bc:da:57:ed:ef:6b:d8:54:8e:fb:39:11:8a:14:
3a:ed:8b:ae:7e:86:01:db:a1:70:3f:c0:fb:ed:5d:
03:b2:77:da:ff:9f:c8:27:5c:45:7d:28:89:4d:f9:
da:f1:75:1a:de:b9:de:90:9c:68:18:3a:44:08:35:
51:7f:f3:22:b5:ea:68:84:11:07:46:99:d7:f9:75:
9c:53:89:be:4d:4c:8b:47:14:f7:91:19:7f:d4:be:
04:4e:91:9c:5b:61:b2:02:eb:1d:f8:79:2c:73:a6:
e1:97:76:0f:4d:ac:c9:55:85:72:cb:2b:2a:ce:77:
34:2a:b2:12:62:01:2c:62:ec:42:16:77:43:f7:17:
44:e8:07:be:d3:38:bb:21:92:d4:c5:6a:3a:a2:61:
37:bc:08:d0:7e:c0:70:53:14:51:01:8b:ea:4d:73:
f4:65:51:ee:d2:cf:46:6f:eb:b3:55:1e:2f:13:80:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:5B:17:CD:29:AB:7E:5C:F4:DD:3D:DA:9F:80:D0:82:8B:3B:9C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.71.0/24
82.27.78.0/24
IPv6:
2a13:9500:10b::/48
Signature Algorithm: sha256WithRSAEncryption
24:f7:c0:9a:9b:fe:f3:b1:2f:a2:7d:03:f1:b7:c5:b6:7e:bb:
34:7f:14:15:a1:10:4b:01:e7:32:f3:60:4f:e4:c5:be:f6:95:
fd:6f:05:46:ec:3f:28:83:24:5d:d6:81:6b:26:c1:0f:ad:92:
69:70:06:48:e7:b4:e2:74:af:83:f3:f5:54:eb:4b:72:67:87:
02:0f:fd:d7:7a:8b:77:d7:13:1c:db:64:57:4d:30:26:7b:e4:
85:3a:4d:63:08:de:12:74:92:d3:30:57:41:14:4d:8e:7a:26:
a2:f0:db:c3:6b:a3:c2:ab:c6:1e:d6:8e:76:c8:92:68:02:e4:
c2:e5:27:44:97:9e:5e:b6:dc:9d:4b:fd:49:6d:84:48:66:75:
bc:0d:58:84:dd:b5:ac:8d:8a:c7:39:da:0c:ca:5e:b2:17:0b:
e1:60:35:a8:64:e0:ed:c3:c5:d8:63:92:ed:33:97:20:c8:3d:
94:5b:78:c7:a8:a6:4b:93:8b:85:7a:c8:58:a4:fe:8f:fb:2f:
34:ba:3b:af:f2:bc:db:d0:2b:f6:a8:87:ce:de:93:30:44:08:
7d:34:51:d5:32:20:55:bd:af:33:ad:bf:87:b9:4f:08:d3:19:
77:53:d3:1b:a9:37:51:f8:36:c3:be:f5:91:9c:8b:a4:a2:2f:
52:20:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:50:42 2026 by rpki-client