Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402628.roa
File: AS402628.roa (raw, json)
Hash identifier: CP0MlQDyUdQh4BXaT4cB6aRh/pKpMIIA1Z+YbN331ZA=
Subject key identifier: 68:BA:A5:32:A9:55:15:52:56:30:63:EB:8C:24:38:15:EE:ED:A4:B4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6E27CC238F68022CD3B16285AE7BC783CB551B35
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402628.roa
Signing time: Wed 09 Sep 2026 14:53:22 +0000
ROA not before: Wed 09 Sep 2026 14:48:22 +0000
ROA not after: Wed 08 Sep 2027 14:53:22 +0000
asID: 402628
IP address blocks: 82.47.26.0/24 maxlen: 24
82.47.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:27:cc:23:8f:68:02:2c:d3:b1:62:85:ae:7b:c7:83:cb:55:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 9 14:48:22 2026 GMT
Not After : Sep 8 14:53:22 2027 GMT
Subject: CN=68BAA532A9551552563063EB8C243815EEEDA4B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:f9:84:c3:4a:5d:51:1f:e5:7d:9d:13:31:
fd:bf:60:54:f1:a1:f9:60:28:18:a3:e5:d6:11:8b:
63:d8:11:27:c0:34:59:28:2b:31:3c:ec:86:99:b5:
55:89:35:8f:db:50:0e:57:d8:7b:41:b5:e2:4c:0c:
9a:ff:83:83:85:7e:1c:12:47:39:cc:bd:96:51:f2:
f9:97:dc:1e:b2:0e:dc:59:4b:9a:4e:08:db:b6:13:
ec:0b:2b:bc:1d:8f:59:94:1f:75:65:7e:40:bc:3b:
e1:0d:3a:9e:28:ca:8d:5c:37:9b:00:02:47:77:2e:
6c:78:d2:ee:ca:d0:50:2c:97:c1:f9:d6:0d:c8:52:
ea:09:92:af:33:43:dc:03:4b:55:0f:de:63:af:d8:
45:1e:f9:3c:1f:f4:d6:41:14:16:e7:6c:f9:51:b6:
f0:d5:d8:c8:58:a6:5d:a2:d7:d0:9d:de:63:7a:8e:
a1:f3:92:73:bf:44:0f:48:26:19:3f:0a:85:1b:67:
60:70:c9:7d:d5:a0:84:10:35:ad:3b:36:63:a3:d8:
08:8b:b8:7e:01:13:27:35:83:4c:9c:a6:ab:b7:83:
12:5e:26:3c:57:b4:82:68:b1:4c:80:8d:25:c5:c9:
51:48:b1:a3:99:10:df:70:47:5d:fa:c8:bb:12:4d:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BA:A5:32:A9:55:15:52:56:30:63:EB:8C:24:38:15:EE:ED:A4:B4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402628.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.26.0/24
82.47.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:77:6a:5e:9a:8a:17:10:12:29:ce:76:a2:50:57:b1:ab:6c:
29:73:9d:33:53:ba:bb:68:82:67:37:86:d6:b0:3a:7f:5a:ea:
1b:86:02:68:b0:bc:4d:6a:ba:d1:6a:c9:9c:ed:06:7a:48:b1:
bf:93:a0:cb:74:a2:c8:3f:0f:2d:4a:4a:fd:8d:e1:d8:27:53:
02:27:a3:32:45:54:bb:d5:56:5f:54:7c:e4:bb:32:2c:b1:0c:
6c:33:7c:64:53:51:bb:15:2c:d9:e1:c3:78:6a:28:6f:ed:a5:
7e:10:1c:f0:67:42:25:9e:4d:75:32:75:83:44:fc:30:da:c3:
ac:83:24:f4:bf:c2:e6:5c:da:7b:53:79:24:76:ab:e9:f1:3e:
22:9b:5f:b7:65:82:02:11:48:12:ca:4a:a7:b3:6b:6c:b7:65:
eb:0e:34:0e:76:36:20:23:8e:ff:fd:e9:cf:65:4a:2e:8f:d7:
35:08:38:29:8c:6b:e4:f7:a0:4b:27:80:33:73:8e:c0:7b:bd:
28:91:02:1d:0e:b5:8d:4e:3c:4d:93:80:16:1d:24:5a:62:61:
41:da:fc:96:b0:5d:6c:b3:cf:12:d1:d9:89:d2:cd:fb:6a:90:
3c:6e:e3:37:e3:04:bf:15:47:71:79:01:42:09:1a:7d:f0:aa:
4b:ee:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:09 2026 by rpki-client