Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401783.roa
File: AS401783.roa (raw, json)
Hash identifier: kgqmfXcUi/hrTzrVTGonbGum8y7XZQCkfBVRaHHALtY=
Subject key identifier: D1:0E:09:B7:49:F9:AF:BA:D2:92:BC:7D:A0:D4:70:6E:E5:7F:F6:15
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 650B3D2359108D7175C645D1FDF56FB31F451003
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401783.roa
Signing time: Mon 27 Jul 2026 07:11:38 +0000
ROA not before: Mon 27 Jul 2026 07:06:38 +0000
ROA not after: Mon 26 Jul 2027 07:11:38 +0000
asID: 401783
IP address blocks: 82.47.52.0/24 maxlen: 24
82.47.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0b:3d:23:59:10:8d:71:75:c6:45:d1:fd:f5:6f:b3:1f:45:10:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 27 07:06:38 2026 GMT
Not After : Jul 26 07:11:38 2027 GMT
Subject: CN=D10E09B749F9AFBAD292BC7DA0D4706EE57FF615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:1e:8c:d6:08:fe:c5:36:47:9f:17:07:1e:
8e:a1:77:70:36:02:6e:1a:fc:1f:cd:62:78:6d:84:
25:23:f9:b0:f7:13:d1:2e:11:44:01:fb:dd:6d:ac:
67:7b:58:13:df:9e:0b:e8:23:7f:ed:07:f1:6c:4d:
9e:ce:77:5f:cb:82:3b:5e:4a:a8:3f:c2:9d:97:83:
c9:23:e3:35:13:70:f2:dc:b8:85:36:f5:5d:38:b1:
12:5b:63:1a:58:fa:74:3b:b7:56:c3:8a:ba:39:fe:
10:84:2a:d1:16:c1:c5:4a:48:d6:03:16:46:ad:76:
41:fe:bb:68:00:52:ec:39:57:c7:ab:dc:94:fd:cf:
82:e1:df:63:bc:9f:2b:07:2f:e2:64:7e:18:09:b5:
ff:15:b0:1b:a7:a7:88:49:36:88:1a:cc:00:dd:20:
a5:9a:9c:9c:96:3f:83:2f:10:1e:46:ec:4f:33:0d:
b9:52:c1:bb:a8:a8:44:cb:0d:bb:90:bc:68:c5:cc:
d0:84:90:61:ea:23:7c:da:7c:d1:06:a1:2c:96:00:
94:e9:42:62:51:0b:83:29:74:a1:f1:c0:6e:77:8e:
58:d8:6a:cd:3c:e0:1f:d4:c2:1d:e5:37:65:25:a2:
dd:e7:a6:91:2b:7e:b7:28:e8:e1:42:05:d1:4c:f6:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0E:09:B7:49:F9:AF:BA:D2:92:BC:7D:A0:D4:70:6E:E5:7F:F6:15
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401783.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.52.0/24
82.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
01:80:fe:db:93:7e:cb:f0:1c:ab:40:78:e5:41:3e:d0:1b:64:
f2:0c:4b:b6:5f:48:26:14:94:41:27:ba:d5:fb:60:37:4d:2c:
89:88:8b:e1:36:94:b3:5c:f2:ff:7f:32:1d:ac:b0:e8:ba:16:
c1:43:a7:ba:84:a9:cd:e4:4d:3e:62:89:55:ea:d6:e5:d1:f8:
66:5e:b3:ca:3c:60:33:b8:a5:48:4c:a6:fd:61:d5:4a:eb:b2:
43:5a:4a:c3:03:fe:bc:f3:74:4d:83:d8:96:6f:5f:2c:cb:9f:
fa:cd:1b:92:aa:e0:e0:5b:4c:8c:6a:66:00:4d:6d:89:d6:34:
75:05:89:6e:9c:f7:0f:be:9c:8f:1e:70:f6:34:62:39:62:2e:
5f:dc:2e:37:e1:2f:fb:aa:97:68:eb:90:9c:ce:3d:e9:a8:61:
d5:b3:ab:f5:f1:a8:4c:a6:84:05:08:9e:60:e4:0c:a1:3b:31:
43:81:e4:b5:39:84:07:65:de:e4:db:8b:d1:5c:40:1b:a4:a8:
b5:0b:70:1a:9e:4f:2e:8a:67:07:fe:c2:4b:d8:da:22:02:f1:
54:b1:ad:1e:fa:77:02:19:0a:3e:26:8f:be:cc:86:ef:fe:1c:
dc:7f:4d:2e:cc:07:68:df:68:e0:cf:9d:0f:4f:db:1b:e9:c4:
d2:43:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:13 2026 by rpki-client