Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: NA7shdB2iBbeO5F3CnYTw7JoBX5X91tWTuBdWB3XkXc=
Subject key identifier: CD:38:6F:7E:60:28:0C:15:A0:F7:D1:B3:6B:C6:D4:1D:8F:29:0A:E4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 32B9D353DE59640450B51FD25CAED04EE21C7760
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
Signing time: Mon 14 Sep 2026 07:48:08 +0000
ROA not before: Mon 14 Sep 2026 07:43:08 +0000
ROA not after: Mon 13 Sep 2027 07:48:08 +0000
asID: 402265
IP address blocks: 82.22.124.0/24 maxlen: 24
82.24.105.0/24 maxlen: 24
82.26.205.0/24 maxlen: 24
82.38.19.0/24 maxlen: 24
82.41.135.0/24 maxlen: 24
82.47.36.0/24 maxlen: 24
82.47.160.0/24 maxlen: 24
84.75.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b9:d3:53:de:59:64:04:50:b5:1f:d2:5c:ae:d0:4e:e2:1c:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 07:43:08 2026 GMT
Not After : Sep 13 07:48:08 2027 GMT
Subject: CN=CD386F7E60280C15A0F7D1B36BC6D41D8F290AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:9b:85:88:64:b3:62:12:92:d5:90:af:98:
01:b7:1d:66:94:d2:06:aa:c9:f5:2f:f1:d7:a8:4b:
71:d4:d3:ec:59:41:c9:fa:e0:a2:5a:22:6a:e4:ee:
6f:d1:af:0d:35:50:d4:d3:ed:55:a0:54:89:06:64:
11:e9:46:c8:3d:cc:18:f1:20:81:19:fa:d7:71:b0:
75:bf:6b:10:b8:6a:c8:a9:45:a7:51:dd:f5:c4:6c:
61:97:9b:d6:99:d7:e1:f8:cd:b9:56:88:04:f4:5e:
93:f0:89:b5:be:c2:36:d8:06:b8:fd:ef:10:e4:0b:
cf:30:d2:c9:d8:ec:3d:27:d6:d4:93:92:cb:5b:c2:
bf:cc:d6:8c:e3:7a:81:e3:18:97:5a:ad:b3:52:21:
22:3e:96:10:0c:0f:35:1d:05:3e:6f:9a:f3:82:2e:
b4:c7:1c:60:2d:8a:9c:5d:e4:b0:76:74:77:c4:c4:
02:7e:ae:ec:53:3e:56:80:9c:d6:49:dd:85:ab:d2:
b8:eb:92:16:1a:28:ef:93:14:34:71:c7:4d:ee:3f:
4e:25:da:80:f8:4b:0d:57:1b:c2:fa:ee:61:1a:21:
2a:e5:4a:67:9f:06:5d:0b:2e:90:cf:cd:3d:c8:92:
2e:90:67:5d:f4:81:e8:07:e2:9d:c6:d1:1a:5e:e8:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:38:6F:7E:60:28:0C:15:A0:F7:D1:B3:6B:C6:D4:1D:8F:29:0A:E4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.124.0/24
82.24.105.0/24
82.26.205.0/24
82.38.19.0/24
82.41.135.0/24
82.47.36.0/24
82.47.160.0/24
84.75.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:29:a3:8c:b0:7d:94:4f:3e:10:52:8c:2d:54:9a:cc:50:42:
99:0e:22:f6:3b:11:77:11:7f:24:1c:52:ac:40:c1:b3:20:45:
91:41:93:2a:66:6f:9f:c5:b2:19:2b:28:3e:5e:1e:ac:c8:bb:
d9:3e:28:89:68:4e:62:31:31:a8:b6:b3:03:02:96:db:11:f2:
4e:1f:c7:7e:c1:c4:2b:46:84:13:9b:56:bf:79:a5:37:bb:17:
25:1b:cb:9a:3b:89:58:e0:d1:32:0a:86:3c:12:85:d1:cd:2d:
d1:8e:f8:d4:b2:a9:d7:ad:73:ba:6c:3d:d5:5c:8d:bc:00:19:
2f:ed:f8:e9:29:75:71:0f:2f:c4:c5:38:c1:ab:69:2b:95:4c:
ef:96:78:be:f5:f6:40:9f:a7:38:3d:7a:8c:a5:f4:e3:a8:27:
5a:ff:8a:fe:f1:e6:4f:f3:b0:f6:e5:91:b1:69:b1:83:23:f2:
b0:17:d9:8d:1f:11:e9:75:36:21:55:1c:0c:be:62:60:b8:bd:
b8:00:f2:36:07:3f:22:80:23:cb:eb:d2:c7:17:bb:42:ca:ee:
41:73:f9:bc:ff:b5:f6:83:46:9a:9a:21:71:1d:74:42:8a:35:
c9:bf:f4:a7:26:b9:80:bb:a2:32:45:82:48:3a:ba:f3:43:27:
ee:c0:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:35:42 2026 by rpki-client