Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402644.roa
File: AS402644.roa (raw, json)
Hash identifier: +pj3VOOdVvhGPr1XyhvWd0nXnQwqNSi3v2oN1JJgbLo=
Subject key identifier: 99:CF:CA:31:75:B2:41:61:4B:18:8E:3A:6B:1E:88:29:B3:6E:C9:BA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5E2EF1FD6BBD8517731DEAC845863CDDFDDE512F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402644.roa
Signing time: Fri 24 Jul 2026 10:35:22 +0000
ROA not before: Fri 24 Jul 2026 10:30:22 +0000
ROA not after: Fri 23 Jul 2027 10:35:22 +0000
asID: 402644
IP address blocks: 82.47.115.0/24 maxlen: 24
178.83.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2e:f1:fd:6b:bd:85:17:73:1d:ea:c8:45:86:3c:dd:fd:de:51:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 10:30:22 2026 GMT
Not After : Jul 23 10:35:22 2027 GMT
Subject: CN=99CFCA3175B241614B188E3A6B1E8829B36EC9BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:6f:f8:da:60:a5:33:6e:b3:aa:9f:c1:e1:
8d:fb:a2:ed:0c:91:c9:d2:3d:a1:1f:68:4e:5a:04:
12:7e:dc:53:0a:50:95:dc:1e:47:7a:16:1a:85:6b:
c5:fc:c1:3a:38:73:e0:97:14:67:3f:b2:44:56:3b:
12:a7:96:40:55:92:0e:0c:a5:6c:5b:c9:71:1d:86:
eb:d1:d7:ba:40:f3:81:f0:28:32:9e:f0:c0:c2:38:
c0:9d:f3:66:45:e3:ef:06:1a:35:cc:b0:35:73:98:
37:33:ca:49:ee:8f:80:ca:00:18:c1:31:0e:bb:c1:
a0:dc:4d:48:29:f1:01:2a:78:20:2c:0e:fa:21:89:
1a:08:97:83:e5:12:ec:a9:9a:3f:29:dc:dd:06:62:
98:68:ea:f7:6e:f2:1f:69:e6:ce:77:bf:2f:41:a9:
e6:47:a5:05:2e:a1:61:3f:1c:8d:b4:6c:a5:c5:73:
a5:36:a7:3f:32:82:e6:ac:d7:7e:6f:a0:7c:c9:38:
11:60:2f:c2:4b:d9:18:2d:d4:40:d8:1f:54:67:4c:
77:b4:bb:91:8c:a6:f8:cb:4c:48:62:18:ec:72:44:
a0:9e:09:c9:dd:2e:33:a2:66:c9:f9:c9:b2:f6:88:
c3:d5:3d:10:f1:57:e9:be:32:1f:bc:d1:e7:b9:e8:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CF:CA:31:75:B2:41:61:4B:18:8E:3A:6B:1E:88:29:B3:6E:C9:BA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402644.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.115.0/24
178.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:01:f3:66:ce:90:33:89:08:5b:c9:20:38:db:1e:61:8e:fc:
ca:1e:4b:17:19:c4:2f:0b:16:7e:01:81:e4:19:aa:4e:77:6b:
68:46:c7:ad:85:b3:a8:25:20:b5:03:db:ea:89:02:43:69:cf:
01:0b:a9:81:e0:ea:54:14:a7:92:c8:e7:d2:fb:fe:7c:d6:40:
bf:f5:50:7a:0e:9a:f1:86:18:81:32:ba:5e:21:e1:e1:f0:9c:
b2:f6:44:20:7a:f3:c1:54:32:d8:9a:f6:1a:50:c6:75:9f:f3:
bf:96:dd:14:a1:fb:c1:f6:5f:2f:b3:81:ae:8b:ca:10:30:c7:
08:20:a9:c6:43:c9:58:4d:14:dc:f8:fb:b3:0d:c3:74:e8:d9:
62:80:af:95:48:d1:15:cf:82:4d:ae:cf:ce:8c:ed:16:b9:79:
74:9c:31:a0:6a:70:a4:e8:6c:de:3f:99:10:b5:c8:67:08:a9:
3e:b3:e8:3f:a5:5a:b7:01:ce:bb:fd:b7:60:d7:13:62:7c:eb:
a4:f3:52:3b:f9:33:22:bf:f1:5e:66:4d:b8:ae:a3:55:70:65:
43:19:08:fa:4e:59:79:cc:12:e3:68:f5:61:a6:c1:aa:fd:6d:
b0:47:e5:00:92:cc:3e:09:c9:a8:bc:4e:7c:f8:a1:4d:ba:50:
03:5b:d2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:14 2026 by rpki-client