Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401804.roa
File: AS401804.roa (raw, json)
Hash identifier: 76/YoaYA1FReuV0xE+ynF1/dan+UQO5F040llW2jAZU=
Subject key identifier: 25:56:4C:8F:DB:86:A4:4E:9B:4D:52:52:A2:2A:1B:DD:13:97:2E:61
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6EF21CB94674E019C98441CF2711CFEE282CDB2C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401804.roa
Signing time: Sun 01 Mar 2026 09:45:03 +0000
ROA not before: Sun 01 Mar 2026 09:40:03 +0000
ROA not after: Sun 28 Feb 2027 09:45:03 +0000
asID: 401804
IP address blocks: 82.39.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f2:1c:b9:46:74:e0:19:c9:84:41:cf:27:11:cf:ee:28:2c:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 1 09:40:03 2026 GMT
Not After : Feb 28 09:45:03 2027 GMT
Subject: CN=25564C8FDB86A44E9B4D5252A22A1BDD13972E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:3b:da:77:87:f8:ed:59:72:31:ec:23:a1:
0b:0f:69:af:ec:45:37:e4:f7:88:36:f0:68:a2:ce:
27:2f:95:c8:91:7a:da:03:b5:05:51:2f:27:dd:ef:
43:09:5c:b9:81:e2:1e:b4:27:0f:e3:e8:79:69:92:
10:dd:5f:79:2f:31:d9:27:cd:eb:9d:59:43:1f:03:
8f:ba:d7:44:2c:c6:05:d4:76:73:98:9a:61:4c:76:
99:95:2a:d2:09:84:de:94:56:7f:34:0c:36:c3:3d:
e3:1b:ac:76:c4:86:31:25:3e:65:b9:10:65:be:0e:
98:18:5f:e9:7a:cf:93:16:92:cb:2f:43:1e:ad:1a:
d9:01:37:e2:58:96:2b:94:5b:53:32:d8:83:a0:78:
d5:16:4b:7d:b4:1e:31:da:4d:1a:55:e9:34:c2:5d:
43:1d:f9:8b:e0:b5:52:1a:9e:84:05:e7:30:12:39:
5b:7e:15:e6:c4:71:fe:1e:8a:b0:7a:f7:bf:f3:c0:
54:9c:34:4f:9a:ee:c7:92:81:d2:4a:53:50:bd:ec:
38:28:8b:4b:5a:81:d6:c7:c3:3c:c0:d8:8c:92:67:
8b:9b:08:b0:fd:21:fb:ea:13:c4:6c:a3:db:dd:db:
64:02:1e:d9:a9:7b:cd:0d:88:6b:f8:41:a4:94:53:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:4C:8F:DB:86:A4:4E:9B:4D:52:52:A2:2A:1B:DD:13:97:2E:61
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401804.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f0:b0:08:6b:e2:ff:f6:4c:78:cc:30:9a:c5:14:7c:e0:c8:
4b:db:54:c8:f9:32:19:73:a6:30:e1:d2:f4:ee:a7:23:77:d5:
2b:83:83:a0:95:26:55:89:1f:a0:67:d4:b5:d0:58:e2:2e:89:
db:e5:d5:60:d1:6d:18:77:03:41:ab:4c:21:cd:65:63:a7:01:
26:5e:ce:ba:fd:77:1f:b0:b0:3b:c6:a3:60:a9:dc:45:05:fd:
ee:4d:25:84:8f:b5:90:64:b8:0b:cd:e7:ac:b0:05:c1:f2:ed:
49:d3:17:00:a9:96:27:8c:fd:ed:47:b3:71:59:a8:ec:6c:61:
5e:1f:06:1f:fd:36:49:dd:59:98:77:69:31:07:bb:4b:25:f4:
d2:eb:dd:8d:7f:08:1c:34:7d:c1:2c:9d:81:9d:99:2c:2c:e7:
ec:0c:10:aa:bb:1d:73:48:62:0d:cb:f5:f6:f8:5a:c3:a0:25:
6d:63:63:20:ae:e8:f4:85:05:a8:f5:49:92:f2:a5:df:44:d8:
ee:66:e1:50:00:f9:be:2c:c2:3f:c0:da:26:b3:07:ef:43:1e:
e0:d8:a5:7d:c8:aa:f7:07:f1:e3:30:94:7f:b5:80:f2:7d:0c:
68:f0:06:04:82:a3:e5:48:21:7e:16:53:ca:a1:8f:bc:85:3e:
71:fd:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:42 2026 by rpki-client