Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402203.roa
File: AS402203.roa (raw, json)
Hash identifier: gQnBnYSSijMGXgGlfnAevuUPgahUcrybW5JsFBjHw1o=
Subject key identifier: 83:63:FD:10:FC:2D:30:5C:4D:33:35:15:60:C2:90:95:8F:FA:6D:8E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 62C4D2A2A9372D3687FBD2B7697E93DCC2856F06
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402203.roa
Signing time: Mon 13 Apr 2026 13:07:09 +0000
ROA not before: Mon 13 Apr 2026 13:02:09 +0000
ROA not after: Mon 12 Apr 2027 13:07:09 +0000
asID: 402203
IP address blocks: 82.26.131.0/24 maxlen: 24
82.39.155.0/24 maxlen: 24
84.75.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c4:d2:a2:a9:37:2d:36:87:fb:d2:b7:69:7e:93:dc:c2:85:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 13 13:02:09 2026 GMT
Not After : Apr 12 13:07:09 2027 GMT
Subject: CN=8363FD10FC2D305C4D33351560C290958FFA6D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:d8:f2:e9:54:bc:2c:ad:66:56:fc:3b:8e:
60:bb:46:75:f1:21:1a:44:d0:cd:2b:0f:f5:6f:ff:
6a:dc:f8:f5:12:22:4d:2c:64:f4:f4:9c:78:6a:8b:
e1:c6:33:15:f9:ec:c6:95:7f:46:f7:e1:e0:0b:69:
60:25:9e:5a:9c:21:d6:e8:e7:f8:c3:c9:2a:a8:a8:
bd:17:68:d4:e2:ec:62:0b:0d:df:d8:97:83:60:f7:
bb:8b:5a:f7:1c:a9:38:d7:cf:57:8b:a8:b1:e1:c9:
57:1c:5a:54:37:96:8f:5f:2a:aa:51:36:cb:97:e2:
0b:3f:29:72:a0:19:4e:6c:0e:55:b2:98:ee:6a:ef:
07:e6:99:2d:2f:b3:8d:3b:77:c9:26:41:bc:7d:af:
45:b0:11:95:9b:3a:d2:8e:d6:98:a3:1f:28:07:07:
b9:6f:dd:ea:6e:63:c7:16:c1:c9:7e:34:b8:ca:e7:
64:ff:f1:34:aa:16:29:0f:58:d0:ed:a9:43:2a:31:
1c:58:f1:1f:a1:d1:7d:7d:f6:cc:c6:a2:c4:c6:eb:
10:42:92:78:5a:64:09:31:75:9b:ad:9b:7b:b8:70:
5f:4f:c5:3f:be:38:aa:0d:fc:16:ac:ff:1b:e8:43:
7e:3d:cf:a9:bc:2d:9a:38:5e:22:4d:3f:9c:c5:de:
c4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:63:FD:10:FC:2D:30:5C:4D:33:35:15:60:C2:90:95:8F:FA:6D:8E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.131.0/24
82.39.155.0/24
84.75.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cd:9a:61:8e:b4:ba:54:20:64:26:b0:bf:23:b7:57:ad:c8:
3c:49:bc:05:c6:c6:a2:94:7a:8f:a8:74:08:32:b9:3b:a6:b5:
18:58:a4:6c:a9:d1:7b:06:2e:f0:ed:40:69:8c:aa:45:d4:e7:
29:1b:27:10:29:4c:f8:6f:e3:2c:ec:7b:a0:0c:a4:c4:71:8d:
89:d6:e9:05:bb:c3:2e:23:0b:bc:e4:46:ba:cb:30:51:87:10:
4d:a0:95:54:75:1b:7d:5e:02:9b:bb:4b:ec:fe:58:ea:b8:0c:
43:2a:97:37:62:16:5b:67:86:f2:bf:25:25:6e:5c:0b:a3:33:
eb:f1:12:fb:f5:af:94:1d:28:45:fa:8a:88:66:be:5e:bc:19:
ce:f8:f8:38:b7:d8:71:06:ef:4b:65:69:20:c4:ea:33:33:dc:
f7:46:51:fa:12:82:cd:fb:cf:19:be:cb:01:da:c1:72:3b:6a:
53:60:a3:64:90:61:80:5e:8b:b4:0f:e8:e7:f5:56:df:63:46:
95:e0:86:a3:21:84:47:cd:04:64:cd:97:94:8e:9f:e5:8e:fa:
b9:ec:2e:e3:e2:09:8d:4d:44:68:5b:30:13:a4:51:ab:17:eb:
91:a2:6f:d2:07:29:f4:93:77:87:9a:34:03:8f:da:1b:d7:6e:
a8:f3:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:10 2026 by rpki-client