Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402268.roa
File: AS402268.roa (raw, json)
Hash identifier: 2331BG5J/6FU1QiavI4il9hl4HxmJMO5ZM/+pOyFu94=
Subject key identifier: D4:03:C7:27:11:3E:B6:33:3D:A7:2C:F7:EA:FA:A1:7C:DE:94:C8:17
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 14EE6AD49CE38DD667731340CBB7D8A0CC37B622
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402268.roa
Signing time: Tue 07 Apr 2026 06:03:09 +0000
ROA not before: Tue 07 Apr 2026 05:58:09 +0000
ROA not after: Tue 06 Apr 2027 06:03:09 +0000
asID: 402268
IP address blocks: 82.40.48.0/24 maxlen: 24
178.83.56.0/24 maxlen: 24
178.83.80.0/24 maxlen: 24
178.83.86.0/24 maxlen: 24
178.83.96.0/24 maxlen: 24
178.83.108.0/24 maxlen: 24
178.83.116.0/24 maxlen: 24
178.83.119.0/24 maxlen: 24
178.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ee:6a:d4:9c:e3:8d:d6:67:73:13:40:cb:b7:d8:a0:cc:37:b6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 7 05:58:09 2026 GMT
Not After : Apr 6 06:03:09 2027 GMT
Subject: CN=D403C727113EB6333DA72CF7EAFAA17CDE94C817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:45:e7:2a:0d:52:29:d7:83:8f:ba:f8:73:
76:7c:68:05:b2:5d:fc:b4:97:6a:36:64:d3:32:30:
a9:52:e5:7a:60:25:39:05:ed:9d:6c:0d:80:17:e2:
1b:b3:28:69:46:b5:2a:3d:f7:09:d4:07:4c:ac:ed:
eb:4f:15:98:cd:c2:8c:15:c7:2a:2c:26:33:44:7b:
96:0e:de:0f:f9:6b:59:df:da:1e:98:44:52:de:f9:
ee:43:2b:fc:fc:1d:fd:d9:17:dd:ca:04:f7:b9:9d:
fa:05:40:83:a3:b0:6d:8d:cc:d7:98:1c:e2:71:9c:
20:2b:53:cf:ea:bb:3a:5e:b5:18:e8:04:1f:65:9e:
89:ef:3c:7b:19:0c:17:0d:b4:3a:20:c5:ea:94:ad:
e7:be:e8:72:47:a7:20:89:dd:a6:57:25:d0:a1:da:
12:76:e0:99:00:93:8f:dc:2b:d1:6b:4b:17:e2:4d:
6d:c3:eb:57:79:dc:73:5d:42:c7:cb:55:6e:bf:4b:
1f:4c:a7:23:90:52:17:3e:7d:84:6d:2e:84:93:72:
a0:43:43:25:e7:4b:5d:17:2c:78:5f:3f:39:7d:a2:
dc:c6:5c:b3:94:46:69:49:7b:83:2e:b9:71:9f:87:
93:4a:6a:08:67:12:0a:c5:b7:2e:02:4b:22:b0:a5:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:03:C7:27:11:3E:B6:33:3D:A7:2C:F7:EA:FA:A1:7C:DE:94:C8:17
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402268.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.48.0/24
178.83.56.0/24
178.83.80.0/24
178.83.86.0/24
178.83.96.0/24
178.83.108.0/24
178.83.116.0/24
178.83.119.0/24
178.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
92:38:c7:58:1e:a4:43:b4:03:70:a3:3e:ab:46:3d:f9:63:9d:
08:23:1c:f8:29:06:40:60:77:55:cf:95:dd:bb:9e:1a:d5:ff:
90:83:d0:c3:6e:1f:19:8b:79:c7:8e:f8:9d:e3:10:22:4d:0f:
1a:3b:78:98:d9:9a:84:08:87:de:46:83:12:28:68:62:af:6e:
b8:4f:20:9a:a8:93:bc:bf:b9:ce:b4:ed:47:8a:6b:83:c4:69:
2d:89:f6:da:08:4d:e9:1f:24:a2:63:2a:74:68:14:b4:98:6b:
56:6b:7e:3c:03:05:dd:9f:f9:e9:d2:94:db:65:f6:17:22:fc:
50:94:7d:5e:ce:5d:fb:ef:71:c9:72:70:8c:70:c3:c9:38:58:
2a:dd:cc:15:de:34:5b:71:04:c1:78:59:ba:cf:9b:dd:63:ac:
3e:94:de:0c:29:a1:17:20:9b:64:4c:ef:c6:8a:5d:9d:1c:57:
62:a4:d0:20:89:82:72:35:c6:c2:17:b5:59:36:5a:9f:d5:f5:
d5:f3:af:a0:11:d3:e2:7e:31:9e:2b:95:b8:91:4b:01:3d:85:
69:51:84:62:e2:b4:e3:f8:a0:3c:d6:27:db:cd:17:90:fc:6e:
2e:47:4d:70:cb:62:9c:17:30:41:d7:08:23:59:94:c1:3d:28:
a6:9c:3d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:09 2026 by rpki-client