Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
File: AS402276.roa (raw, json)
Hash identifier: qDnETeDj+0k8lBaRNvoI9IktY0zS3l1LQUZv+boUX+Q=
Subject key identifier: 8D:EF:57:7F:17:C9:FC:DC:DA:C2:D8:BA:C8:18:2F:AA:FC:9D:25:0E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 738FA0896FCBCBFEF87CEE99AB939B04F64E7D1C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
Signing time: Sat 11 Apr 2026 09:26:20 +0000
ROA not before: Sat 11 Apr 2026 09:21:20 +0000
ROA not after: Sat 10 Apr 2027 09:26:20 +0000
asID: 402276
IP address blocks: 82.39.164.0/24 maxlen: 24
178.83.26.0/24 maxlen: 24
178.83.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8f:a0:89:6f:cb:cb:fe:f8:7c:ee:99:ab:93:9b:04:f6:4e:7d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 11 09:21:20 2026 GMT
Not After : Apr 10 09:26:20 2027 GMT
Subject: CN=8DEF577F17C9FCDCDAC2D8BAC8182FAAFC9D250E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:8e:ca:35:93:a9:39:03:9d:75:eb:72:f9:
56:1c:9f:76:53:c5:95:cf:f7:fc:bb:d0:2e:b2:89:
32:3c:24:6d:d1:ed:cb:16:b3:3b:24:64:d1:8f:95:
26:52:13:f4:7f:9e:04:fb:da:51:32:24:59:2f:66:
0c:bd:96:6f:54:5b:b3:a9:0d:d2:51:6e:1e:a1:39:
9a:c9:10:97:4c:3e:4b:30:6d:69:29:58:14:43:15:
cb:40:a9:36:d5:75:6c:5a:e7:0d:50:82:2f:37:30:
06:32:52:f5:03:a8:71:d0:89:c4:82:ac:5f:67:8a:
e8:1c:fc:c7:bf:65:88:07:bb:68:17:b4:09:4e:95:
47:6e:c1:84:f6:e8:6e:66:c1:d1:f5:a4:17:a2:c6:
1d:2b:c7:50:53:4e:bc:16:fa:4a:50:3a:11:b0:d4:
2c:19:7b:6f:f0:0d:1e:4d:4a:00:b6:b6:f9:ab:7e:
52:2d:8f:53:09:b8:3c:61:7a:8a:0b:3b:52:23:67:
d1:79:64:b3:3f:7c:38:17:4b:2c:30:a7:54:4c:13:
d8:5c:89:3a:61:5e:6f:3b:05:a1:ff:e0:ed:d6:5e:
2b:40:f2:56:34:9d:24:d9:fa:87:af:14:bb:22:e8:
7c:b4:ca:ca:54:8d:95:da:7c:1c:f3:13:86:ec:6e:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EF:57:7F:17:C9:FC:DC:DA:C2:D8:BA:C8:18:2F:AA:FC:9D:25:0E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.164.0/24
178.83.26.0/24
178.83.63.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8d:3c:35:d0:68:e6:cf:7a:a7:04:e2:d7:1f:5f:1d:73:d2:
1a:d2:a3:7b:0e:1d:66:ae:9b:57:ed:e1:a1:6c:73:9b:ba:1c:
1f:54:9c:66:11:c3:d2:85:d5:18:db:7a:c9:96:c2:2a:65:ab:
8e:8a:e0:bf:23:72:14:3c:d9:65:4b:44:c8:f9:d2:96:d7:74:
72:c5:ed:1b:00:ab:72:99:f0:7c:96:e2:8d:b7:12:36:65:9e:
17:1a:19:75:3f:65:11:21:98:72:1f:01:31:32:99:cc:15:1e:
66:4f:f2:a8:24:a4:b0:ad:e7:19:ca:29:dc:f3:99:fc:b3:5a:
ad:8d:8c:e9:ab:62:cd:a0:06:17:e4:54:f1:4d:b3:a8:fc:cb:
ba:fa:ee:6a:7b:e6:e3:db:06:69:3e:81:8d:bb:7b:09:f4:ba:
c1:ba:7b:2c:d3:1c:3a:0c:0a:9b:58:ec:8c:09:64:19:d8:b0:
2c:fc:fa:2b:2a:f1:41:02:99:85:7d:77:09:87:43:31:b0:58:
6f:90:bf:86:e0:9c:9d:d3:ee:43:e5:c8:2a:5d:e4:60:75:40:
e5:d4:1c:32:ad:cb:2f:8e:11:2d:e5:f9:6b:70:b4:b0:3f:14:
4f:94:9f:84:b9:22:4b:d3:0c:a7:5f:03:8b:21:1d:09:af:97:
45:8c:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:12 2026 by rpki-client