Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400618.roa
File: AS400618.roa (raw, json)
Hash identifier: sUcXE8NobRXbqxMfsdBPVAAQqrfxuOiesqZ/gwLxSxE=
Subject key identifier: E0:C0:B9:86:CA:5B:78:F7:39:69:8C:76:F6:56:1E:D8:FA:6F:85:A1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 176F9A35A07C8ADEEF2DA9335BD99FA76B1D5010
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400618.roa
Signing time: Fri 11 Sep 2026 08:14:48 +0000
ROA not before: Fri 11 Sep 2026 08:09:48 +0000
ROA not after: Fri 10 Sep 2027 08:14:48 +0000
asID: 400618
IP address blocks: 82.38.42.0/23 maxlen: 24
82.40.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6f:9a:35:a0:7c:8a:de:ef:2d:a9:33:5b:d9:9f:a7:6b:1d:50:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 11 08:09:48 2026 GMT
Not After : Sep 10 08:14:48 2027 GMT
Subject: CN=E0C0B986CA5B78F739698C76F6561ED8FA6F85A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:56:30:7c:12:f4:7a:3f:88:a2:68:15:31:
42:cd:a8:e3:11:fb:56:ba:1c:2c:5f:49:76:17:55:
27:37:c6:4b:58:01:26:ca:4a:c6:15:cb:95:06:f9:
0d:97:cb:08:ec:3c:ff:39:f8:7e:26:41:c8:5b:98:
fe:4e:07:38:4d:48:e8:32:d8:76:4c:57:31:90:5e:
ff:3c:63:77:af:8b:27:45:9f:7d:68:46:bb:93:54:
91:aa:9f:a7:d6:13:91:cb:7d:06:64:71:76:91:83:
c5:4c:64:b9:69:04:22:3f:74:d1:bb:0e:82:df:bd:
b1:93:ab:0f:d7:11:93:81:51:98:ac:75:79:e9:57:
28:6b:b8:1e:2f:49:b8:76:af:f1:2a:7d:55:c8:ba:
4d:f4:64:fc:a8:62:45:54:14:dc:ea:2a:0b:41:c2:
1d:37:b2:48:be:fd:f8:fd:7d:aa:ea:bb:05:72:ff:
b7:cf:49:ab:58:3f:05:e4:c3:d4:d8:2f:dc:aa:3c:
7b:31:b6:1f:62:c0:fa:84:03:cd:80:24:cf:cf:e4:
a3:15:30:98:22:45:ec:3b:f0:22:53:96:df:ee:14:
63:8a:b0:ba:b6:a0:33:01:c3:cf:fb:0f:51:0a:df:
8b:02:5f:fe:c1:db:ed:fa:64:f7:49:21:5e:62:a1:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C0:B9:86:CA:5B:78:F7:39:69:8C:76:F6:56:1E:D8:FA:6F:85:A1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.42.0/23
82.40.32.0/22
Signature Algorithm: sha256WithRSAEncryption
77:69:7e:f7:c6:dd:71:eb:fe:54:e4:95:03:50:b2:50:43:7c:
2c:e4:20:59:2d:1f:d0:87:91:f6:0e:7a:13:df:0e:eb:db:10:
9a:d7:35:ce:aa:2c:b9:f3:41:3a:88:e5:11:50:1c:5d:ac:92:
16:e0:fa:23:9a:0e:7b:86:c7:cd:4b:17:9c:11:fb:2a:db:62:
7a:db:d1:34:fa:bf:5d:46:ba:5b:c2:df:93:97:86:f2:43:2c:
b2:0a:d5:31:05:68:89:aa:30:c9:74:5a:28:bb:5c:a4:f5:d6:
27:ef:f0:14:d9:3b:8c:07:72:c5:9c:cc:db:b2:82:78:30:c4:
27:e0:ab:bc:28:4a:16:46:42:af:f4:46:88:27:1f:66:b8:06:
79:e6:0e:87:e7:cb:a1:7b:8a:72:35:c3:56:1d:35:51:55:51:
51:c7:b9:9d:b3:cb:92:fb:39:c1:6e:d1:e9:5b:94:01:0d:8c:
1a:22:9b:85:5d:ac:64:9f:4c:8a:46:95:f2:c1:1f:19:bd:c0:
b9:3b:31:68:b0:68:66:82:66:5f:b8:e3:ff:1b:da:6c:9a:cc:
42:13:01:18:f3:38:23:8c:92:f5:2e:53:c6:3a:3b:d7:f2:50:
51:51:44:63:9d:e6:f0:c7:52:e8:93:34:3a:9f:5b:e6:8f:9a:
c7:32:b9:23
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUF2+aNaB8it7vLakzW9mfp2sdUBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTEwODA5NDhaFw0yNzA5MTAwODE0NDhaMDMxMTAvBgNV
BAMTKEUwQzBCOTg2Q0E1Qjc4RjczOTY5OEM3NkY2NTYxRUQ4RkE2Rjg1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhVYwfBL0ej+IomgVMULNqOMR
+1a6HCxfSXYXVSc3xktYASbKSsYVy5UG+Q2XywjsPP85+H4mQchbmP5OBzhNSOgy
2HZMVzGQXv88Y3eviydFn31oRruTVJGqn6fWE5HLfQZkcXaRg8VMZLlpBCI/dNG7
DoLfvbGTqw/XEZOBUZisdXnpVyhruB4vSbh2r/EqfVXIuk30ZPyoYkVUFNzqKgtB
wh03ski+/fj9farquwVy/7fPSatYPwXkw9TYL9yqPHsxth9iwPqEA82AJM/P5KMV
MJgiRew78CJTlt/uFGOKsLq2oDMBw8/7D1EK34sCX/7B2+36ZPdJIV5iobB5AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU4MC5hspbePc5aYx29lYe2PpvhaEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAwNjE4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUiYq
AwQCUiggMA0GCSqGSIb3DQEBCwUAA4IBAQB3aX73xt1x6/5U5JUDULJQQ3ws5CBZ
LR/Qh5H2DnoT3w7r2xCa1zXOqiy580E6iOURUBxdrJIW4Pojmg57hsfNSxecEfsq
22J629E0+r9dRrpbwt+Tl4byQyyyCtUxBWiJqjDJdFoou1yk9dYn7/AU2TuMB3LF
nMzbsoJ4MMQn4Ku8KEoWRkKv9EaIJx9muAZ55g6H58uhe4pyNcNWHTVRVVFRx7md
s8uS+znBbtHpW5QBDYwaIpuFXaxkn0yKRpXywR8ZvcC5OzFosGhmgmZfuOP/G9ps
msxCEwEY8zgjjJL1LlPGOjvX8lBRUURjnebwx1LokzQ6n1vmj5rHMrkj
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:12:30 2026 by rpki-client