Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401443.roa
File: AS401443.roa (raw, json)
Hash identifier: fm8puBAanWM8JVVQBfhoI0AM1rZcchNIF55nXM6GU4A=
Subject key identifier: 38:E1:C3:1E:4E:AC:64:22:78:82:F8:77:79:F0:C8:42:CA:7F:C0:82
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6D0A0F3C8941DC7E4C941B9E499D9AB87E93A698
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401443.roa
Signing time: Thu 10 Sep 2026 13:49:34 +0000
ROA not before: Thu 10 Sep 2026 13:44:34 +0000
ROA not after: Thu 09 Sep 2027 13:49:34 +0000
asID: 401443
IP address blocks: 82.27.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0a:0f:3c:89:41:dc:7e:4c:94:1b:9e:49:9d:9a:b8:7e:93:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 13:44:34 2026 GMT
Not After : Sep 9 13:49:34 2027 GMT
Subject: CN=38E1C31E4EAC64227882F87779F0C842CA7FC082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:54:dd:94:4e:3b:1c:0c:5b:3e:00:b0:bc:f5:
38:2b:b1:65:c1:51:3f:0c:18:a7:39:06:ba:bc:fa:
43:1a:0b:76:82:64:b5:b7:e6:db:0a:63:c2:9e:bb:
f4:71:41:a2:08:0e:6a:93:5e:f9:3e:6f:e9:4c:6b:
29:ec:8c:e5:b6:19:21:cb:f5:e8:8c:20:99:14:7a:
e9:7e:d1:40:d1:12:78:43:ab:e5:30:62:a2:8e:cc:
85:c2:af:6c:3e:8c:23:cd:f7:d1:99:1e:7f:2c:62:
18:65:a2:82:8a:c2:12:4b:b5:f4:19:fc:c3:a1:96:
c1:7c:b5:87:be:83:43:23:9a:77:3e:26:5d:8b:5c:
4b:19:36:30:ff:88:e3:da:c1:dc:b2:f6:6d:51:c7:
6d:2d:b1:63:fe:44:6f:36:4f:dd:69:87:68:d9:69:
c3:89:83:bb:7d:89:4d:80:0e:63:e7:ef:0f:07:04:
61:be:91:35:15:48:b2:b1:bb:6c:fa:64:8d:e8:c0:
aa:56:a6:4b:b3:10:d1:28:8d:e1:81:a7:27:b9:4c:
04:e2:a6:4b:95:a0:d4:e0:58:52:84:d2:d1:20:83:
6c:60:a1:b4:e7:01:cd:95:72:46:6f:3d:1c:8b:5c:
05:79:60:23:3f:36:f3:e1:3b:9f:70:ba:0a:6a:54:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:C3:1E:4E:AC:64:22:78:82:F8:77:79:F0:C8:42:CA:7F:C0:82
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401443.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:60:f5:d0:88:68:88:23:40:95:a9:c3:50:ce:ed:d6:80:4d:
16:94:0d:f2:73:54:34:31:b7:0f:e5:5f:e9:d3:64:55:2e:7b:
aa:f1:fa:30:72:ff:e9:4a:cf:d9:f1:4c:83:34:08:ec:16:f2:
c5:3a:7f:4b:73:41:72:a8:70:f1:67:46:97:7b:95:10:1e:86:
98:c9:f4:b0:94:79:e9:31:be:9b:e7:3d:76:eb:60:6c:d0:a2:
3a:e6:cf:bb:58:48:cb:dc:89:6d:ee:0e:c7:6a:0a:c8:86:9d:
14:55:31:52:54:3d:57:8d:23:0c:52:91:24:7d:cc:81:c9:d6:
cb:af:b8:ba:13:72:92:de:0d:59:b6:d2:83:b5:30:74:59:29:
8c:33:84:a1:5f:93:15:d4:6f:57:64:61:49:d2:a4:b0:0e:c2:
fa:59:82:be:90:78:d0:53:d9:53:f9:1f:13:48:9b:d7:a8:5f:
89:c8:3f:cb:78:f1:ac:10:e9:c5:c2:b3:81:b0:52:8d:4d:25:
e8:12:9d:df:88:68:48:1b:90:01:94:e8:fd:2f:79:ff:62:02:
fe:88:2b:a1:f8:57:40:41:23:20:58:79:33:d5:a2:b6:13:21:
13:88:7d:92:9c:3d:f6:da:0d:79:b3:12:00:76:ba:7c:2f:14:
0a:eb:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:04:09 2026 by rpki-client