Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399955.roa
File: AS399955.roa (raw, json)
Hash identifier: lDJUTaDoxoH9UccdsUaUJEs+BmohbLnSIE/RDWVBIXk=
Subject key identifier: E1:17:53:EE:B8:8A:BA:C8:5B:7E:C6:91:FA:E6:74:33:81:BA:E2:72
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6931334C4B29A1F853A358BB65B55A43F9325254
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399955.roa
Signing time: Tue 08 Sep 2026 00:07:36 +0000
ROA not before: Tue 08 Sep 2026 00:02:36 +0000
ROA not after: Tue 07 Sep 2027 00:07:36 +0000
asID: 399955
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.128.0/21 maxlen: 24
82.22.136.0/22 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.140.0/23 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.10.0/23 maxlen: 24
82.24.36.0/22 maxlen: 24
82.24.44.0/23 maxlen: 24
82.24.50.0/23 maxlen: 24
82.24.102.0/23 maxlen: 24
82.24.184.0/22 maxlen: 24
82.24.204.0/23 maxlen: 24
82.25.0.0/22 maxlen: 24
82.25.18.0/23 maxlen: 24
82.25.128.0/22 maxlen: 24
82.25.206.0/23 maxlen: 24
82.26.102.0/23 maxlen: 24
82.27.24.0/21 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.80.0/21 maxlen: 24
82.27.112.0/22 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.144.0/20 maxlen: 24
82.27.168.0/21 maxlen: 24
82.27.192.0/22 maxlen: 24
82.29.30.0/23 maxlen: 24
82.29.144.0/22 maxlen: 24
82.38.36.0/23 maxlen: 24
82.39.112.0/23 maxlen: 24
82.41.192.0/23 maxlen: 24
178.83.0.0/22 maxlen: 24
178.83.42.0/23 maxlen: 24
178.83.216.0/22 maxlen: 24
178.83.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:31:33:4c:4b:29:a1:f8:53:a3:58:bb:65:b5:5a:43:f9:32:52:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 00:02:36 2026 GMT
Not After : Sep 7 00:07:36 2027 GMT
Subject: CN=E11753EEB88ABAC85B7EC691FAE6743381BAE272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:20:d4:bd:92:39:2b:97:e0:22:23:56:35:
cb:1c:a9:91:55:65:9b:2b:9e:92:6b:c5:83:65:ad:
15:dd:76:05:04:6c:a5:12:d1:81:b3:4c:c3:6b:01:
e4:95:0a:ea:aa:7e:93:32:1b:7c:19:87:d6:57:e7:
74:90:bc:23:60:ae:2f:ce:5e:3f:ec:14:30:4b:c0:
71:05:cc:9f:8b:b2:8c:0e:4f:62:5a:fd:6e:4b:7e:
31:5d:48:65:e9:73:ad:ad:15:ac:17:77:f9:cc:db:
0d:47:2c:5e:2b:f6:25:16:07:f8:39:0a:60:c9:24:
81:93:3c:24:b2:32:5a:fa:52:d1:3e:93:29:96:4e:
87:18:fe:d2:28:a3:bb:5a:35:99:03:9a:ed:63:7c:
77:7f:38:82:3c:a4:5b:49:67:cb:13:8d:94:40:aa:
90:e3:46:d8:48:8a:bd:86:57:d7:e9:9f:d4:28:e4:
29:47:2f:0e:a6:92:5e:57:86:a8:b0:b7:c8:17:76:
ba:03:4a:c2:f9:aa:e9:27:29:26:1a:88:08:9d:98:
66:cf:e2:ac:2e:2f:51:59:f1:a4:10:02:f7:19:2a:
c4:b4:ee:f8:82:aa:7a:e2:0d:9f:8b:dd:7e:11:24:
b0:66:af:a3:53:4e:35:08:87:6c:6d:0d:c9:20:0b:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:17:53:EE:B8:8A:BA:C8:5B:7E:C6:91:FA:E6:74:33:81:BA:E2:72
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.128.0-82.22.139.255
82.22.148.0-82.22.155.255
82.23.140.0/23
82.23.152.0/21
82.24.10.0/23
82.24.36.0/22
82.24.44.0/23
82.24.50.0/23
82.24.102.0/23
82.24.184.0/22
82.24.204.0/23
82.25.0.0/22
82.25.18.0/23
82.25.128.0/22
82.25.206.0/23
82.26.102.0/23
82.27.24.0/21
82.27.48.0/20
82.27.80.0/21
82.27.112.0/22
82.27.136.0-82.27.159.255
82.27.168.0/21
82.27.192.0/22
82.29.30.0/23
82.29.144.0/22
82.38.36.0/23
82.39.112.0/23
82.41.192.0/23
178.83.0.0/22
178.83.42.0/23
178.83.216.0/22
178.83.242.0/23
Signature Algorithm: sha256WithRSAEncryption
47:6d:43:47:1a:5a:63:00:c4:f4:f1:72:14:8e:c2:b7:93:26:
bc:79:61:e0:80:bd:5f:3d:5f:a2:09:0a:56:41:06:13:8b:9d:
89:c8:34:6c:d7:96:8a:07:d0:bd:21:3a:89:71:74:31:b2:ea:
57:2f:56:37:2a:68:19:57:ef:1f:bb:36:4f:ba:9b:51:a0:64:
c2:27:2a:67:c4:04:4c:3d:12:2c:9d:9d:a6:ed:9c:e7:ff:7e:
ab:fd:00:94:10:61:57:2e:7f:e0:67:50:da:42:e0:dc:88:02:
c9:8a:a7:32:60:84:92:bd:2f:6e:83:e2:62:18:fc:43:d7:a6:
e2:ea:99:7b:de:62:8a:bb:96:ba:6d:e0:08:7c:41:07:01:36:
9f:e9:bd:d7:d7:44:a1:f2:20:ce:b8:06:c5:62:f9:45:39:20:
43:9a:6e:e2:19:40:2a:e8:ce:16:c7:f4:9e:ca:e2:9c:17:9a:
29:6a:23:2d:78:6d:6f:ed:dc:af:e6:a8:b7:92:f1:63:dd:ed:
ca:6f:a5:94:23:f2:66:0e:34:8b:19:ec:6d:69:8c:f7:45:1a:
0c:6e:3a:20:c8:99:58:2e:c5:41:8d:42:7d:18:6d:9d:3d:1b:
35:54:d5:9a:5d:3e:d9:33:63:6b:cb:3c:4a:1b:dc:c7:d6:95:
ba:dd:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:42:12 2026 by rpki-client