Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401881.roa
File: AS401881.roa (raw, json)
Hash identifier: p0kUi/42Zr+LfsxgO/WOU/t/ejipxx3AnPWEUnwq00M=
Subject key identifier: CE:6D:6B:FD:1D:2D:E3:6C:8C:F5:06:23:80:63:B2:92:06:5B:A3:99
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0701CD2CB871094225FF80C452D8B91C117BC443
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401881.roa
Signing time: Fri 27 Mar 2026 10:26:46 +0000
ROA not before: Fri 27 Mar 2026 10:21:46 +0000
ROA not after: Fri 26 Mar 2027 10:26:46 +0000
asID: 401881
IP address blocks: 82.26.205.0/24 maxlen: 24
178.83.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:01:cd:2c:b8:71:09:42:25:ff:80:c4:52:d8:b9:1c:11:7b:c4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 27 10:21:46 2026 GMT
Not After : Mar 26 10:26:46 2027 GMT
Subject: CN=CE6D6BFD1D2DE36C8CF506238063B292065BA399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:00:c8:4d:8c:84:db:b5:2d:a5:ea:4e:cd:
a8:00:2d:85:cb:3e:cd:26:d9:c8:cf:fb:5b:57:b5:
b2:2c:7a:7e:86:af:9b:1d:41:b5:5b:89:c6:aa:5f:
6c:20:51:b6:5c:ba:62:6d:26:1f:d9:78:88:aa:68:
27:09:02:69:fe:39:9e:f0:3e:cf:f9:cc:3d:e1:16:
0a:cd:f3:38:77:cb:0e:47:2c:1f:98:8f:a8:cc:94:
0f:4a:0b:38:a8:67:a7:5f:83:0b:0f:3c:9c:4e:b6:
7f:d1:4f:f2:d0:f3:7d:f6:05:5e:3f:19:41:81:36:
ac:2a:8f:96:a4:fe:88:f4:f6:64:83:8c:c6:1e:d4:
78:68:c9:7a:f6:a6:80:1e:aa:bb:f5:93:7c:5b:96:
e7:94:4d:db:d9:3a:72:7f:19:67:64:02:cf:be:93:
1b:2a:9c:fc:32:2d:b0:21:d8:b9:21:cf:85:7f:01:
0d:61:67:ca:7b:31:14:47:8f:be:46:c8:a6:d6:64:
1e:1a:d8:44:e3:1d:88:21:a0:46:40:e6:33:84:33:
3a:e1:07:b6:f1:82:2a:ca:a6:42:f0:ea:bf:94:d5:
03:23:e5:08:10:fa:54:93:b2:06:15:a4:2f:7a:fa:
a1:9a:dc:db:26:db:90:d0:ea:08:6f:85:39:42:7b:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6D:6B:FD:1D:2D:E3:6C:8C:F5:06:23:80:63:B2:92:06:5B:A3:99
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.205.0/24
178.83.6.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ba:cb:fa:a9:ff:12:f8:ca:4c:93:a0:1b:fa:a8:e6:98:22:
94:23:ba:4b:04:38:7a:e9:47:6a:8a:69:da:0a:bd:67:d0:ab:
0b:1f:9a:fc:87:5a:17:84:08:0e:20:a7:7d:96:23:f6:8a:ea:
a1:96:d8:95:b6:c3:bf:28:4e:15:ea:aa:b0:30:cf:27:35:7b:
a0:7d:2e:73:13:da:74:dc:29:24:8d:95:5a:a8:b2:98:c3:c7:
eb:ff:26:1d:d0:77:8b:3f:0a:53:aa:1c:78:45:1b:ed:0a:8e:
79:83:61:34:e4:cc:b6:80:96:23:07:a9:9d:b5:bd:97:04:98:
80:e9:c1:93:2e:2e:35:66:82:03:57:db:7e:cc:c3:71:ed:fb:
8a:d9:c0:73:dc:c6:bf:85:94:9f:e2:c0:45:2f:21:2e:88:be:
1c:64:0e:4f:48:90:f5:3c:0d:94:db:61:cb:b0:89:1e:0d:f0:
b5:54:1e:21:66:39:d4:68:25:f2:85:e9:69:ca:a2:87:46:6a:
57:f3:81:46:81:fa:70:cb:28:9f:a0:fa:51:be:43:98:c2:7f:
c9:15:33:cb:ec:49:01:22:09:d2:4d:27:bb:ce:8d:a4:5f:5f:
8d:b8:86:46:3f:b4:d7:66:d7:e1:4d:d0:ca:92:48:8f:a1:92:
46:98:a3:42
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUBwHNLLhxCUIl/4DEUti5HBF7xEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMjcxMDIxNDZaFw0yNzAzMjYxMDI2NDZaMDMxMTAvBgNV
BAMTKENFNkQ2QkZEMUQyREUzNkM4Q0Y1MDYyMzgwNjNCMjkyMDY1QkEzOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dgDITYyE27UtpepOzagALYXL
Ps0m2cjP+1tXtbIsen6Gr5sdQbVbicaqX2wgUbZcumJtJh/ZeIiqaCcJAmn+OZ7w
Ps/5zD3hFgrN8zh3yw5HLB+Yj6jMlA9KCzioZ6dfgwsPPJxOtn/RT/LQ8332BV4/
GUGBNqwqj5ak/oj09mSDjMYe1HhoyXr2poAeqrv1k3xblueUTdvZOnJ/GWdkAs++
kxsqnPwyLbAh2Lkhz4V/AQ1hZ8p7MRRHj75GyKbWZB4a2ETjHYghoEZA5jOEMzrh
B7bxgirKpkLw6r+U1QMj5QgQ+lSTsgYVpC96+qGa3Nsm25DQ6ghvhTlCezElAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUzm1r/R0t42yM9QYjgGOykgZbo5kwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAxODgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhrN
AwQAslMGMA0GCSqGSIb3DQEBCwUAA4IBAQAIusv6qf8S+MpMk6Ab+qjmmCKUI7pL
BDh66UdqimnaCr1n0KsLH5r8h1oXhAgOIKd9liP2iuqhltiVtsO/KE4V6qqwMM8n
NXugfS5zE9p03CkkjZVaqLKYw8fr/yYd0HeLPwpTqhx4RRvtCo55g2E05My2gJYj
B6mdtb2XBJiA6cGTLi41ZoIDV9t+zMNx7fuK2cBz3Ma/hZSf4sBFLyEuiL4cZA5P
SJD1PA2U22HLsIkeDfC1VB4hZjnUaCXyhelpyqKHRmpX84FGgfpwyyifoPpRvkOY
wn/JFTPL7EkBIgnSTSe7zo2kX1+NuIZGP7TXZtfhTdDKkkiPoZJGmKNC
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:02 2026 by rpki-client