Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: jmhlZpxoCRbjsEalV6xQGPaslkskBb7Aa72cqB9uq8Q=
Subject key identifier: 25:0C:69:75:45:EA:25:7C:81:FD:3D:1F:13:2E:66:56:5B:32:98:AA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 382EEF1C4A4E50B989FA00F145D0B7DF72AF5B3B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
Signing time: Sat 19 Sep 2026 00:01:38 +0000
ROA not before: Fri 18 Sep 2026 23:56:38 +0000
ROA not after: Sat 18 Sep 2027 00:01:38 +0000
asID: 401776
IP address blocks: 82.24.203.0/24 maxlen: 24
178.83.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2e:ef:1c:4a:4e:50:b9:89:fa:00:f1:45:d0:b7:df:72:af:5b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 18 23:56:38 2026 GMT
Not After : Sep 18 00:01:38 2027 GMT
Subject: CN=250C697545EA257C81FD3D1F132E66565B3298AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:02:fd:b9:7a:35:13:09:f2:86:82:f6:48:
0f:01:07:b1:a8:f4:39:90:90:74:9b:14:de:c3:9f:
3d:7c:f0:67:9c:61:86:10:ab:23:fd:0e:eb:c1:23:
cd:ef:43:68:d0:f9:de:04:24:6c:7e:f3:73:57:ed:
85:28:d1:2f:60:00:b1:12:b0:08:36:a7:01:5d:58:
0e:c1:b0:f0:78:38:d3:c9:bb:36:51:42:03:1b:9d:
ff:9e:12:34:b1:34:7b:4a:29:c0:9b:cb:81:72:f2:
2a:e4:7f:aa:ca:95:20:bd:22:9d:c9:14:36:bd:a0:
a7:ef:4b:40:5e:6b:e9:ac:63:c2:e9:61:ac:b4:7f:
cd:59:cd:71:34:44:f9:7a:0b:80:b8:a1:3e:23:9a:
03:5f:e8:67:f0:a5:b0:55:eb:44:e1:6c:1c:a4:19:
0b:15:12:5b:a1:e2:af:c5:ee:69:0d:d0:4c:b6:2a:
66:04:20:02:79:68:e4:38:b9:b2:c8:ff:d0:0c:1e:
11:80:33:b0:18:5b:99:26:d2:a1:3a:2a:7f:bd:51:
8b:f8:1c:15:23:2d:4b:76:80:ed:68:fe:bc:f7:e5:
2a:be:99:d8:63:79:e7:4a:f0:fa:f5:5a:96:2d:1b:
cd:80:e0:5d:5b:4a:4d:fe:75:36:85:a6:34:0d:a7:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:69:75:45:EA:25:7C:81:FD:3D:1F:13:2E:66:56:5B:32:98:AA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.203.0/24
178.83.71.0/24
Signature Algorithm: sha256WithRSAEncryption
90:15:94:dd:ed:4f:d7:8d:88:63:35:0d:c9:9e:43:0e:36:c9:
1c:f5:24:83:c5:ff:ce:e8:04:42:89:a1:ec:23:f3:22:b9:48:
47:6b:4e:33:99:fc:3b:8e:a2:92:45:35:50:38:3c:5c:fa:b9:
48:68:1c:35:f4:e8:de:97:dc:6e:b7:fb:de:98:4b:d1:d5:93:
a3:f5:78:96:36:c8:18:fa:cf:20:f3:b2:07:33:af:ef:e4:9c:
2c:ac:de:2b:34:1b:08:a3:6b:3c:ed:51:35:4d:d9:77:b8:17:
4a:7b:f3:c8:d3:80:2d:23:22:09:24:ba:26:cc:83:f6:5d:20:
5a:bc:9c:14:d6:5f:61:5a:24:6b:81:cb:ee:9f:a6:58:bc:e6:
d8:ac:a3:5c:ff:74:79:2a:a8:0b:8b:64:af:09:b5:42:2c:aa:
f2:02:68:01:3b:9f:e9:a8:ef:9b:d0:f2:3b:be:ec:43:a1:56:
94:c3:1c:e5:27:04:96:69:f9:92:f2:0a:b2:4e:b0:3c:16:60:
b9:df:01:76:c6:86:93:97:de:b3:22:0d:87:9b:1a:a8:e3:f7:
38:cd:ba:60:80:65:65:34:b6:bb:77:dd:a1:00:b6:12:5c:55:
c2:6e:0b:07:ab:bf:f8:b1:9e:72:dd:f9:13:e5:ca:66:36:5c:
e8:56:62:bf
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUOC7vHEpOULmJ+gDxRdC333KvWzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTgyMzU2MzhaFw0yNzA5MTgwMDAxMzhaMDMxMTAvBgNV
BAMTKDI1MEM2OTc1NDVFQTI1N0M4MUZEM0QxRjEzMkU2NjU2NUIzMjk4QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3AL9uXo1EwnyhoL2SA8BB7Go
9DmQkHSbFN7Dnz188GecYYYQqyP9DuvBI83vQ2jQ+d4EJGx+83NX7YUo0S9gALES
sAg2pwFdWA7BsPB4ONPJuzZRQgMbnf+eEjSxNHtKKcCby4Fy8irkf6rKlSC9Ip3J
FDa9oKfvS0Bea+msY8LpYay0f81ZzXE0RPl6C4C4oT4jmgNf6GfwpbBV60ThbByk
GQsVEluh4q/F7mkN0Ey2KmYEIAJ5aOQ4ubLI/9AMHhGAM7AYW5km0qE6Kn+9UYv4
HBUjLUt2gO1o/rz35Sq+mdhjeedK8Pr1WpYtG82A4F1bSk3+dTaFpjQNp+UFAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUJQxpdUXqJXyB/T0fEy5mVlsymKowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhjL
AwQAslNHMA0GCSqGSIb3DQEBCwUAA4IBAQCQFZTd7U/XjYhjNQ3JnkMONskc9SSD
xf/O6ARCiaHsI/MiuUhHa04zmfw7jqKSRTVQODxc+rlIaBw19Ojel9xut/vemEvR
1ZOj9XiWNsgY+s8g87IHM6/v5JwsrN4rNBsIo2s87VE1Tdl3uBdKe/PI04AtIyIJ
JLomzIP2XSBavJwU1l9hWiRrgcvun6ZYvObYrKNc/3R5KqgLi2SvCbVCLKryAmgB
O5/pqO+b0PI7vuxDoVaUwxzlJwSWafmS8gqyTrA8FmC53wF2xoaTl96zIg2Hmxqo
4/c4zbpggGVlNLa7d92hALYSXFXCbgsHq7/4sZ5y3fkT5cpmNlzoVmK/
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:19:21 2026 by rpki-client