Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: cenHJOtJY1uDH0GhWWkrDX01CZluoh074bSN5LTETJ4=
Subject key identifier: 4C:87:BA:F2:92:9D:BA:A1:4F:C8:63:45:74:44:1E:95:70:95:5D:DC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 597A1BEF457A086255A2C00A995AD9EE22B8CCAF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399359.roa
Signing time: Mon 14 Sep 2026 12:11:26 +0000
ROA not before: Mon 14 Sep 2026 12:06:26 +0000
ROA not after: Mon 13 Sep 2027 12:11:26 +0000
asID: 399359
IP address blocks: 82.21.196.0/24 maxlen: 24
82.22.126.0/24 maxlen: 24
82.38.122.0/24 maxlen: 24
82.47.127.0/24 maxlen: 24
84.75.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7a:1b:ef:45:7a:08:62:55:a2:c0:0a:99:5a:d9:ee:22:b8:cc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 12:06:26 2026 GMT
Not After : Sep 13 12:11:26 2027 GMT
Subject: CN=4C87BAF2929DBAA14FC8634574441E9570955DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:9b:c7:f9:4a:34:cd:67:0a:59:dd:f4:c1:
28:4d:34:5c:66:00:f4:25:4d:34:60:91:de:1a:89:
c5:74:2d:15:36:67:4b:6b:6f:a7:f4:a7:dd:c9:73:
34:6c:4f:88:4b:b7:41:86:fd:2d:1a:19:eb:ca:11:
32:6e:e1:cd:4d:48:7f:87:ad:17:ca:0e:3c:d8:32:
52:82:1c:e8:94:1b:dc:2d:4e:0e:d9:8e:c0:ce:ca:
2c:b4:98:69:f4:2a:c6:bb:3d:db:e3:a5:f1:d2:fb:
d5:2f:66:be:99:b2:f2:cc:5a:6d:78:9f:be:48:43:
f5:f5:e5:78:55:ad:11:2f:e1:22:f6:91:12:ca:bb:
f1:7a:6d:10:bf:6e:e2:4c:0b:f1:38:97:3b:f1:84:
80:6b:ca:a8:2a:a7:ec:24:3c:4b:5c:53:23:2b:76:
50:84:b2:3a:91:36:7c:eb:ed:5c:7c:74:40:b5:9d:
8d:e6:14:7f:42:65:25:e0:8f:c0:6f:c5:b3:0b:de:
40:27:f7:82:a2:34:97:ea:6b:c8:fc:6b:20:31:f7:
10:c2:ff:33:be:ae:aa:2d:fa:53:2e:5e:4e:0b:de:
c7:4d:25:80:fc:47:7a:02:32:94:17:32:79:63:19:
94:86:d2:8d:81:e3:d2:19:f0:ba:69:03:23:80:25:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:87:BA:F2:92:9D:BA:A1:4F:C8:63:45:74:44:1E:95:70:95:5D:DC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.196.0/24
82.22.126.0/24
82.38.122.0/24
82.47.127.0/24
84.75.2.0/24
Signature Algorithm: sha256WithRSAEncryption
97:49:34:72:e5:4d:8e:ee:bb:c0:60:67:41:5d:46:9c:de:52:
b3:9b:ab:a9:1f:00:ef:37:19:74:23:23:2a:21:12:16:6f:04:
28:4d:bc:ea:05:f1:b4:a3:26:f1:7c:85:1d:b0:44:55:94:17:
5a:84:63:45:25:95:78:b2:50:53:17:6a:67:d2:fb:cd:39:05:
af:86:e0:c6:d4:4a:5b:4d:20:fb:22:53:9f:45:fa:8b:4f:10:
64:08:74:d1:b4:d7:9e:43:71:32:56:90:3a:d5:f2:86:4e:41:
97:6c:52:be:71:18:3e:1d:3f:c1:e8:22:ea:15:67:f4:27:7d:
c0:f4:44:03:fe:48:8f:22:f0:f1:a6:4c:9a:18:9d:bb:9c:91:
f2:eb:b0:9f:4b:59:a5:8a:bd:d2:8e:d9:41:fc:6d:16:76:5f:
06:eb:b4:fe:02:3b:dc:99:33:12:7a:74:52:8a:2c:be:32:32:
aa:f2:4f:18:53:0b:f5:98:b8:ef:80:82:ba:fd:09:c4:ff:f9:
08:be:75:49:67:7f:92:2b:eb:99:33:cc:f4:3d:f5:c9:76:a9:
28:dd:6a:a4:9a:e2:07:72:0f:f1:12:c2:d1:73:38:e2:3b:51:
01:19:45:7d:70:9b:98:30:2d:b4:bf:ac:0e:bd:5e:1c:3d:92:
83:fd:f9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:32 2026 by rpki-client