Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402289.roa
File: AS402289.roa (raw, json)
Hash identifier: AklNiCBu9qZ+vYY5u7V7YWHlT9Rcm3UFs4pR7jniv6k=
Subject key identifier: 26:C2:32:EB:5F:E3:3C:EF:B3:44:2B:09:0C:C9:29:3F:98:06:E1:03
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 78CFE87E5907732804193E8F49CA3765CE922B45
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402289.roa
Signing time: Thu 16 Apr 2026 03:18:10 +0000
ROA not before: Thu 16 Apr 2026 03:13:10 +0000
ROA not after: Thu 15 Apr 2027 03:18:10 +0000
asID: 402289
IP address blocks: 82.47.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cf:e8:7e:59:07:73:28:04:19:3e:8f:49:ca:37:65:ce:92:2b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 16 03:13:10 2026 GMT
Not After : Apr 15 03:18:10 2027 GMT
Subject: CN=26C232EB5FE33CEFB3442B090CC9293F9806E103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:5b:03:2f:04:b2:bb:18:ac:d3:0f:fd:fa:
42:bd:46:ee:00:0b:fb:24:0a:d2:e6:1c:4e:fe:d3:
22:57:fd:d8:8b:ab:70:9e:14:5b:24:1a:9c:e5:c8:
a8:31:51:cd:95:23:65:47:7b:b4:fc:f2:a0:7e:2f:
16:dc:c4:7e:89:36:89:07:8e:0c:d6:1a:9b:5f:37:
d1:70:db:c4:02:4e:61:05:13:43:c9:25:b0:6e:d3:
fc:12:eb:db:74:fd:d7:88:5f:86:42:fb:d2:9e:b9:
4a:44:1f:a4:b3:56:41:42:50:96:51:0f:3b:d7:74:
21:f1:d3:4b:d4:1b:27:e6:6e:c8:ea:05:61:25:9c:
32:0d:6b:4c:92:01:1b:03:79:7a:b8:af:d2:c0:bf:
69:34:fa:0b:46:8d:9d:f9:2b:42:3a:9d:85:eb:1e:
72:db:b6:b7:87:bf:13:dd:94:94:7d:85:63:3c:5b:
8c:85:07:ea:19:45:f1:4e:84:9c:58:c3:38:03:05:
db:fc:2d:1b:3f:12:b0:ad:45:3d:b7:34:20:b3:68:
11:e3:29:9c:df:7b:2c:b8:2e:18:c6:48:b4:4c:5b:
aa:87:ba:cb:f6:b7:6c:70:aa:4b:f8:5b:ab:2e:61:
ad:3e:28:0f:a6:be:89:19:39:cb:2e:bf:d9:6f:f8:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:32:EB:5F:E3:3C:EF:B3:44:2B:09:0C:C9:29:3F:98:06:E1:03
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402289.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:39:6f:c1:42:29:50:0a:19:4b:b5:7d:ac:b4:bc:ed:3b:90:
69:f8:e9:bf:a5:4c:4f:b6:38:55:3e:bb:20:ec:b3:33:91:68:
29:6d:a9:a3:a9:0e:34:68:61:6a:c2:f6:f2:63:e5:87:0c:01:
11:ba:5f:c3:1b:55:39:d2:b7:d4:07:4e:4b:31:4d:ce:a9:9a:
35:de:77:30:c7:2f:6a:d6:e1:7c:5c:5b:9a:1c:0f:7f:33:7e:
56:8b:31:7e:42:85:fc:77:ff:3d:6a:d9:a3:80:dd:06:1a:5d:
52:2a:75:ae:51:db:38:3c:70:db:dd:89:8f:78:53:32:4c:a2:
07:09:7e:e7:68:13:1f:1d:d6:56:8d:09:82:d8:4d:a0:b9:73:
c3:08:84:29:45:e2:56:13:c3:de:cb:bd:d6:e1:ac:3a:f9:e7:
f5:fb:1c:c2:f5:cf:e1:96:16:4d:80:45:c4:6e:d3:99:46:10:
72:47:6e:7e:8e:74:b7:56:b7:28:47:5c:8f:ff:e7:21:00:ad:
df:ec:b6:20:c1:26:f0:d3:33:eb:b8:e9:5b:b4:81:54:08:1c:
7b:5c:37:d2:b6:a5:42:cf:f3:d3:af:f5:7d:1f:ef:4a:7b:5c:
15:f5:f4:7e:3c:f8:fe:72:74:e1:c5:e5:e7:46:ad:17:86:04:
68:ee:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:08 2026 by rpki-client