Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400556.roa
File: AS400556.roa (raw, json)
Hash identifier: o2pL5PGMXzQF/8LKDsi8pfC6VKSyyMNNPJgC8BsT0M4=
Subject key identifier: 79:65:8A:EA:83:42:06:C5:FF:51:AF:CB:9A:94:15:08:8F:6B:31:94
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0503FBCA1618CC437DD08EEE095934CC3616D15E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400556.roa
Signing time: Sat 31 Oct 2026 12:49:39 +0000
ROA not before: Sat 31 Oct 2026 12:44:39 +0000
ROA not after: Sat 30 Oct 2027 12:49:39 +0000
asID: 400556
IP address blocks: 82.22.19.0/24 maxlen: 24
82.22.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:03:fb:ca:16:18:cc:43:7d:d0:8e:ee:09:59:34:cc:36:16:d1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 31 12:44:39 2026 GMT
Not After : Oct 30 12:49:39 2027 GMT
Subject: CN=79658AEA834206C5FF51AFCB9A9415088F6B3194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:04:24:f3:ec:4a:af:b0:0c:91:24:66:eb:
77:47:68:94:08:b0:6a:ce:b6:3e:df:c5:7d:cc:16:
04:a4:27:46:36:b5:b8:58:e1:41:9b:23:77:86:4e:
ed:96:cc:02:c6:3b:85:68:b5:71:22:a6:64:6f:7f:
ef:27:68:2b:29:63:cd:f9:61:53:ce:2a:7a:9e:a9:
87:6f:1a:0b:d6:6a:5e:9d:ce:3d:25:9e:2a:ca:aa:
1c:ed:2d:cb:ae:93:cb:36:6a:f3:0d:0b:1f:9d:f1:
e1:64:88:d3:08:22:32:6b:86:0e:f3:14:74:c9:6e:
92:ba:85:93:41:f6:a5:5b:a4:7f:ad:45:b5:9f:cd:
08:80:8f:f1:6b:48:02:c7:aa:35:b8:6c:33:ad:15:
a8:45:9c:97:0d:15:b1:cd:60:7b:c0:3a:b1:ab:d9:
7b:cb:82:b1:6c:ac:4f:c1:7b:56:a2:1a:03:64:38:
ff:76:b8:d5:8d:79:61:9e:ba:94:99:79:0b:ec:99:
76:ef:de:b9:bb:af:ec:0b:a9:dc:b8:a4:45:ca:d2:
a0:d4:10:46:3a:47:fa:e2:ee:22:59:05:e0:a8:57:
d2:ee:02:1f:a9:b4:2b:0e:e8:b8:5b:48:4b:b1:30:
87:c0:e0:67:46:04:bc:76:ba:6a:b2:1b:5b:bf:a0:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:8A:EA:83:42:06:C5:FF:51:AF:CB:9A:94:15:08:8F:6B:31:94
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.19.0/24
82.22.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:06:db:ba:e4:69:e5:02:81:f4:73:06:8d:06:f4:c3:a8:29:
fe:42:2e:86:95:7d:83:1a:23:57:6c:93:76:fd:39:de:21:b9:
e2:e1:12:8a:fe:26:4e:86:d3:85:45:4e:d8:d4:e9:80:63:5e:
53:fa:c5:f7:62:f5:54:2b:8b:0d:2d:00:b6:2e:53:86:63:f5:
60:3c:15:29:99:46:a2:8e:91:5a:b1:77:62:8c:1d:74:f7:d3:
4c:35:43:bc:2b:42:24:b1:f6:3e:0c:14:21:a3:e8:f0:33:19:
1a:d1:d5:f9:f6:4a:6b:a1:a8:3a:b3:71:d3:5f:9b:cd:fd:31:
84:67:29:77:78:d8:dc:fb:46:8a:37:da:56:f7:7e:4b:e5:9f:
50:c3:60:3b:79:25:ef:aa:ba:60:93:b1:fc:9e:f6:cf:dd:f2:
58:19:b3:bd:3f:0c:93:5f:d8:dc:a4:dc:41:c6:9c:9d:fd:38:
3f:88:ee:0d:1c:29:e9:98:53:66:12:87:d1:17:d1:0a:c1:2c:
25:10:e5:fc:c5:b9:fb:bb:88:f8:90:bc:ff:0b:67:85:e0:40:
ae:52:ff:be:4b:0f:45:15:0c:27:28:55:7d:31:6e:41:f9:7a:
7d:1c:1e:59:a3:00:9e:37:1a:58:c8:fe:08:1c:7d:78:6b:87:
e7:80:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:24:54 2026 by rpki-client