Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400308.roa
File: AS400308.roa (raw, json)
Hash identifier: /s/JyRHpkrQRo46QkDQ+DkDQXjbC8ZoDwN4F6DIEeqs=
Subject key identifier: 63:06:F8:16:88:36:18:36:7D:31:59:BE:3F:98:41:85:26:8E:F4:08
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5FA9BD960A95E3DAE924CD9577863B9B649883EF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400308.roa
Signing time: Mon 06 Apr 2026 10:09:47 +0000
ROA not before: Mon 06 Apr 2026 10:04:47 +0000
ROA not after: Mon 05 Apr 2027 10:09:47 +0000
asID: 400308
IP address blocks: 84.75.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a9:bd:96:0a:95:e3:da:e9:24:cd:95:77:86:3b:9b:64:98:83:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 6 10:04:47 2026 GMT
Not After : Apr 5 10:09:47 2027 GMT
Subject: CN=6306F816883618367D3159BE3F984185268EF408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:7e:55:14:ae:f9:64:c1:68:09:ad:51:dd:
8a:da:be:94:27:50:11:2a:9a:2d:6a:1a:44:fb:02:
14:2f:76:38:d9:75:f5:e9:3c:4b:5e:fb:0b:ad:77:
4a:33:6f:2b:c6:19:55:4e:bc:46:6c:b1:33:7c:d3:
d2:62:a0:af:e5:55:1a:45:89:17:8e:d9:68:b9:89:
b1:65:52:e0:d6:f9:96:eb:9b:e3:d6:57:17:5c:68:
e4:fc:5c:4b:97:4e:e2:5a:1e:81:d5:a0:4c:14:44:
17:45:6a:da:b9:31:c2:32:a6:f1:d8:16:ef:d7:1a:
da:28:ea:75:7f:7c:18:27:43:1c:f9:03:0a:a4:9b:
d4:52:cb:d7:3d:ba:fe:d8:cd:69:dc:af:41:d9:80:
fe:d6:9e:16:5b:ac:ee:f4:07:ee:94:93:1f:52:e1:
16:e5:0a:da:40:0e:aa:ef:fd:be:4c:a8:f1:5a:22:
51:01:a7:09:69:2c:75:a7:54:d2:41:d3:77:0f:47:
fa:e5:c0:93:44:80:dc:da:7e:27:90:30:ae:13:f8:
f6:45:ff:fb:6d:39:48:dc:a7:9e:bb:7a:b4:f1:28:
1b:64:75:13:ad:0d:13:ea:46:7c:38:91:93:12:6d:
ef:96:fc:fb:e0:d4:68:1d:b5:3d:39:63:ea:54:87:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:F8:16:88:36:18:36:7D:31:59:BE:3F:98:41:85:26:8E:F4:08
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400308.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b5:5f:cf:6f:b3:17:c8:c8:2c:93:9c:0d:61:fc:e8:7e:e4:
bb:75:69:fb:42:f9:e0:3c:e4:e0:69:ea:86:1d:89:1d:0e:59:
ef:cc:b9:58:c4:cc:48:18:7d:b1:ea:34:0e:fa:6c:e6:53:b3:
20:be:c7:94:46:df:a7:84:e4:26:8f:5a:eb:05:e8:9e:16:64:
4c:38:ac:2e:b2:6b:4e:e1:ad:4a:dd:2e:5e:b4:38:77:3a:c2:
f6:ef:39:88:9e:17:88:2d:fc:35:8b:08:fb:03:f4:1a:f2:d0:
92:93:e8:b3:98:32:49:6e:2b:b7:d7:40:7f:74:6a:05:b5:47:
0e:35:c7:2f:a8:ac:45:df:0b:c3:5e:2e:de:4f:03:d5:fb:3e:
1c:17:14:51:98:19:58:63:b8:c0:b4:73:b9:8e:a1:84:57:ca:
4b:04:77:e0:3e:f7:9a:4c:f8:c6:22:91:da:30:ba:37:23:df:
eb:c2:38:c8:74:98:15:26:76:6c:8b:87:c4:b8:2b:74:f1:5b:
04:29:93:d1:2b:08:bc:c7:50:c4:b3:c7:44:74:d3:ce:e4:e9:
c6:ef:8f:e1:a6:f5:8a:2c:f2:df:a3:a3:79:c7:45:5b:3d:80:
39:e0:5b:94:41:6b:a3:f7:d8:e7:89:2d:ca:fb:8a:03:ac:01:
73:6c:3f:99
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUX6m9lgqV49rpJM2Vd4Y7m2SYg+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MDYxMDA0NDdaFw0yNzA0MDUxMDA5NDdaMDMxMTAvBgNV
BAMTKDYzMDZGODE2ODgzNjE4MzY3RDMxNTlCRTNGOTg0MTg1MjY4RUY0MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr/H5VFK75ZMFoCa1R3YravpQn
UBEqmi1qGkT7AhQvdjjZdfXpPEte+wutd0ozbyvGGVVOvEZssTN809JioK/lVRpF
iReO2Wi5ibFlUuDW+Zbrm+PWVxdcaOT8XEuXTuJaHoHVoEwURBdFatq5McIypvHY
Fu/XGtoo6nV/fBgnQxz5Awqkm9RSy9c9uv7YzWncr0HZgP7WnhZbrO70B+6Ukx9S
4RblCtpADqrv/b5MqPFaIlEBpwlpLHWnVNJB03cPR/rlwJNEgNzafieQMK4T+PZF
//ttOUjcp567erTxKBtkdROtDRPqRnw4kZMSbe+W/Pvg1GgdtT05Y+pUh2tXAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUYwb4Fog2GDZ9MVm+P5hBhSaO9AgwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAwMzA4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVEub
MA0GCSqGSIb3DQEBCwUAA4IBAQCNtV/Pb7MXyMgsk5wNYfzofuS7dWn7QvngPOTg
aeqGHYkdDlnvzLlYxMxIGH2x6jQO+mzmU7MgvseURt+nhOQmj1rrBeieFmRMOKwu
smtO4a1K3S5etDh3OsL27zmInheILfw1iwj7A/Qa8tCSk+izmDJJbiu310B/dGoF
tUcONccvqKxF3wvDXi7eTwPV+z4cFxRRmBlYY7jAtHO5jqGEV8pLBHfgPveaTPjG
IpHaMLo3I9/rwjjIdJgVJnZsi4fEuCt08VsEKZPRKwi8x1DEs8dEdNPO5OnG74/h
pvWKLPLfo6N5x0VbPYA54FuUQWuj99jniS3K+4oDrAFzbD+Z
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:11 2026 by rpki-client