Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: YA3Ck7E9PFwRYfQOrNLDIbJCT80/Kd1mpvXLboqUIrI=
Subject key identifier: 98:4D:83:42:F5:6F:A6:50:76:D4:45:24:1D:EC:FA:1F:D2:AB:FA:AD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 34F01754118BC3EB51535818DC3B1A0BFBEC6F63
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401362.roa
Signing time: Fri 18 Sep 2026 02:36:54 +0000
ROA not before: Fri 18 Sep 2026 02:31:54 +0000
ROA not after: Fri 17 Sep 2027 02:36:54 +0000
asID: 401362
IP address blocks: 82.21.147.0/24 maxlen: 24
82.21.197.0/24 maxlen: 24
82.24.127.0/24 maxlen: 24
82.26.84.0/24 maxlen: 24
82.38.20.0/24 maxlen: 24
82.38.22.0/24 maxlen: 24
82.38.35.0/24 maxlen: 24
84.75.32.0/24 maxlen: 24
84.75.130.0/24 maxlen: 24
178.83.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f0:17:54:11:8b:c3:eb:51:53:58:18:dc:3b:1a:0b:fb:ec:6f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 18 02:31:54 2026 GMT
Not After : Sep 17 02:36:54 2027 GMT
Subject: CN=984D8342F56FA65076D445241DECFA1FD2ABFAAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:0e:08:48:64:3a:07:b1:f3:5a:ac:f4:88:
c8:01:16:54:b3:bb:23:78:3c:df:18:86:f5:93:36:
97:7a:15:6c:4f:52:c5:7e:89:5b:01:b8:01:81:e7:
98:a1:18:b9:aa:b3:e5:52:f3:f0:43:50:80:58:33:
b1:40:20:00:58:64:9d:cd:d2:68:c2:9f:3d:7a:a8:
71:7c:d7:39:a8:64:64:1e:35:ec:02:5b:6c:d0:c7:
46:d2:81:8a:d1:11:47:ae:8a:fb:9e:a9:5d:8e:78:
e3:c6:60:8e:55:72:dc:28:5d:42:8c:c9:23:88:6e:
6a:8e:d7:a7:36:1f:07:fe:aa:45:2b:ab:7f:47:3f:
d6:3d:11:28:54:85:e8:14:a8:f0:4a:61:8c:7f:28:
4e:11:6a:89:7d:1e:f7:a9:63:f5:0c:86:62:14:5c:
d5:00:6a:38:9f:4a:f2:c8:90:e7:83:65:9c:18:61:
71:09:8e:8c:88:a6:1b:a1:9f:a1:b0:e8:76:69:55:
19:b7:86:69:f4:67:f4:33:3b:60:44:06:54:1d:4a:
09:eb:92:30:9d:53:de:b0:1d:58:3a:3a:8a:9d:8b:
12:51:b1:b2:83:44:dd:8c:68:ab:39:fd:aa:a4:79:
45:f1:01:94:a6:22:e1:b8:a8:af:00:af:42:6a:21:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:83:42:F5:6F:A6:50:76:D4:45:24:1D:EC:FA:1F:D2:AB:FA:AD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.147.0/24
82.21.197.0/24
82.24.127.0/24
82.26.84.0/24
82.38.20.0/24
82.38.22.0/24
82.38.35.0/24
84.75.32.0/24
84.75.130.0/24
178.83.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b4:6e:0f:42:e5:89:a7:b9:42:23:e6:ef:91:a0:56:3f:91:
80:e1:93:0b:4a:7e:a7:d0:8d:fa:0d:05:12:36:22:78:75:39:
1b:16:9e:e7:c4:8c:32:c3:a1:a9:8d:3d:f2:5e:1f:04:a5:d3:
19:71:98:b7:73:a5:ec:89:92:2e:c4:ea:f2:00:ed:34:1a:3a:
c8:15:5c:67:59:46:ae:39:ec:54:b5:c6:1f:d6:6c:a4:a8:e9:
07:3e:b9:07:5b:18:e6:63:7b:2b:f0:5d:76:d6:14:23:0b:f8:
15:85:7e:4d:1f:d4:d1:a2:85:90:47:af:b0:37:e2:83:61:5e:
15:6d:17:07:40:48:4f:96:81:19:57:85:34:14:fe:81:5e:2d:
6b:3f:a5:44:9a:ad:70:6b:1b:eb:cd:38:f6:9f:99:74:57:85:
c9:0a:c5:a4:14:1c:50:83:80:4c:92:d0:11:0c:18:51:af:c1:
a6:e5:1c:25:8b:9b:02:27:33:48:94:34:91:4d:d5:0d:68:9a:
60:29:57:89:f2:a0:3b:75:4c:d5:a0:54:eb:48:36:0e:59:a7:
24:44:68:2c:1f:0b:5e:3a:a5:14:98:03:f7:49:78:b1:ee:e4:
9d:a5:c9:1f:59:75:a4:6c:31:1b:8b:66:43:f1:95:67:33:7e:
93:60:37:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:39 2026 by rpki-client