Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402187.roa
File: AS402187.roa (raw, json)
Hash identifier: NL2n79JIdoUXKh167O7teJYIOMOsVXT6kysUUCKigsk=
Subject key identifier: E7:70:4A:77:97:D6:43:0D:7D:1C:50:25:69:1E:E9:A5:F0:84:9A:8E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0B7AFCB679EEB52FD0AC5FED60FAADF91942B5B4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402187.roa
Signing time: Wed 15 Apr 2026 03:16:54 +0000
ROA not before: Wed 15 Apr 2026 03:11:54 +0000
ROA not after: Wed 14 Apr 2027 03:16:54 +0000
asID: 402187
IP address blocks: 82.47.47.0/24 maxlen: 24
82.47.211.0/24 maxlen: 24
84.75.32.0/24 maxlen: 24
84.75.33.0/24 maxlen: 24
84.75.195.0/24 maxlen: 24
84.75.211.0/24 maxlen: 24
178.83.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:7a:fc:b6:79:ee:b5:2f:d0:ac:5f:ed:60:fa:ad:f9:19:42:b5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 15 03:11:54 2026 GMT
Not After : Apr 14 03:16:54 2027 GMT
Subject: CN=E7704A7797D6430D7D1C5025691EE9A5F0849A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:59:ef:98:cf:b0:35:f9:5f:66:64:22:f3:
c2:6f:c5:43:5e:d2:96:39:01:79:8c:f0:d8:d2:88:
03:9e:b6:63:23:cd:8f:6a:fd:ae:2a:f6:99:c5:a8:
6b:03:64:72:89:2c:cd:32:b9:66:d5:0e:42:ec:42:
64:2e:c6:66:c2:bb:7a:68:c9:46:aa:08:9f:e0:c7:
d9:c9:6e:07:a4:d3:99:78:bd:ab:a3:b6:a6:b7:e8:
ab:8f:2a:65:96:80:d2:bf:0f:70:b6:79:71:32:68:
cd:f8:40:10:b4:fd:c3:ec:6b:bf:24:7b:1d:56:83:
9e:cb:fb:e6:b4:06:34:cb:59:c4:95:0b:db:bd:0f:
a5:ca:a1:31:99:d9:29:5f:0e:48:88:78:38:fd:00:
99:1c:fb:b8:43:ad:b3:f4:45:da:4f:0f:40:c4:1e:
1a:fa:e4:08:42:9e:fb:7b:90:de:c6:c2:90:2c:61:
87:c8:eb:6d:d4:82:64:c9:82:19:8c:0e:79:7f:c5:
56:68:fc:48:7b:5d:4b:d3:de:84:44:74:dc:d1:e3:
92:4a:17:5b:eb:68:41:95:6a:bd:c8:92:b7:79:16:
55:cc:47:79:57:d1:ec:81:50:18:5b:37:c6:e6:d2:
97:5c:f4:a1:c8:60:5f:2b:ca:a1:9a:d3:3b:e2:63:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:4A:77:97:D6:43:0D:7D:1C:50:25:69:1E:E9:A5:F0:84:9A:8E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402187.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.47.0/24
82.47.211.0/24
84.75.32.0/23
84.75.195.0/24
84.75.211.0/24
178.83.14.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:60:10:3e:db:46:81:30:a6:b5:c0:0a:e3:8a:0b:0d:e2:9c:
df:0e:df:2c:8f:07:96:76:3a:81:cc:da:12:ff:45:54:80:6f:
3a:4c:7c:67:a8:11:f2:39:68:0b:d3:9f:c3:59:9e:9a:53:74:
be:82:9f:c5:df:5b:7d:ee:66:3c:cd:83:f0:37:de:0c:dd:3a:
9a:c8:40:e8:a2:53:19:da:1a:b6:87:55:a6:df:c9:2b:ff:83:
26:5d:29:f9:49:06:32:35:cc:a0:7b:7b:f0:9b:3a:cc:ec:ce:
42:93:5b:93:6b:8e:b8:4e:41:12:6a:ea:1b:23:2e:25:5a:06:
15:92:89:d7:7d:4b:ff:4a:ea:52:cc:f7:1c:d2:80:c7:62:51:
35:fc:1c:7e:bf:b4:dc:4d:30:ba:d0:0c:8f:35:85:d8:da:e5:
ed:95:8c:c7:57:97:71:96:28:66:26:00:6e:68:cc:4e:a2:f5:
e0:d9:ff:c9:03:d1:20:b7:9d:d8:32:86:cc:ab:9c:fd:54:1e:
cc:d0:e6:22:69:eb:f5:d2:24:4c:29:f0:73:80:c8:83:08:f5:
19:4f:d8:16:42:9a:4c:fd:88:f2:ca:0b:03:d2:31:a2:b0:93:
26:1e:34:c4:fc:14:7d:49:73:1c:27:b1:1a:06:04:45:29:7b:
d4:3b:58:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:12 2026 by rpki-client