Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
File: AS402857.roa (raw, json)
Hash identifier: wgrKSNmZWI8FnPjidSr12UvmwWerxA7t0Ae3Kl/2zPk=
Subject key identifier: 57:C1:C2:8F:55:B5:C9:97:0E:4C:63:4F:27:B8:6D:DC:3E:BB:FF:03
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 64D6E98B026BED49FE439CC0A3249720F7D82FF3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
Signing time: Sat 12 Sep 2026 02:21:24 +0000
ROA not before: Sat 12 Sep 2026 02:16:24 +0000
ROA not after: Sat 11 Sep 2027 02:21:24 +0000
asID: 402857
IP address blocks: 82.25.47.0/24 maxlen: 24
82.27.41.0/24 maxlen: 24
82.47.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d6:e9:8b:02:6b:ed:49:fe:43:9c:c0:a3:24:97:20:f7:d8:2f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 12 02:16:24 2026 GMT
Not After : Sep 11 02:21:24 2027 GMT
Subject: CN=57C1C28F55B5C9970E4C634F27B86DDC3EBBFF03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:26:82:30:6c:c8:1d:92:00:5f:a0:ab:d8:
be:b9:2b:1e:a4:ca:d1:90:80:32:bf:4c:6c:38:01:
65:35:e1:c4:c9:41:a1:72:b6:a7:d5:b8:e9:af:1e:
79:33:9b:1f:fa:fe:21:e5:23:08:57:22:ce:e3:16:
2a:3b:7d:1b:f4:75:69:ae:73:36:d4:22:d0:c2:72:
a0:17:ab:69:26:c4:7c:29:01:32:2c:4b:c5:27:dd:
fb:94:6d:6d:11:52:74:d3:50:a0:73:97:88:57:78:
a3:4c:04:c2:0e:61:e3:94:52:7b:ac:f1:76:94:f6:
fe:c8:9a:b2:54:59:20:14:32:29:d3:7a:1c:10:60:
b2:11:4d:1c:0e:c0:93:a5:89:f5:f1:6b:b3:88:fe:
c4:b9:91:d8:f5:66:08:50:33:80:47:8e:f2:5e:dd:
56:ea:b4:8b:fb:45:23:73:8b:09:37:6f:58:77:ae:
08:65:4c:b3:52:d1:57:19:c9:42:77:52:79:5d:0f:
8d:b2:dc:a2:e9:3e:00:0c:76:60:c2:1d:0d:18:fc:
8a:f8:a8:47:b1:2b:ed:8d:aa:82:0e:a5:bd:41:74:
4e:c5:00:56:a0:78:b0:59:a7:8a:35:1e:d6:b8:6c:
4a:7a:33:6f:f3:bd:c9:4a:de:a7:ad:c4:9a:67:4a:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:C2:8F:55:B5:C9:97:0E:4C:63:4F:27:B8:6D:DC:3E:BB:FF:03
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.47.0/24
82.27.41.0/24
82.47.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:15:79:db:91:09:bd:d0:2a:3a:8f:c0:7c:84:d2:14:e3:17:
84:5a:b5:58:cf:90:92:c9:bf:a2:b3:3b:5b:15:bb:2c:30:cb:
e9:bd:ab:96:0c:1c:f1:9e:73:bf:b4:a3:f6:c7:05:d3:88:16:
03:8c:f0:2b:1a:69:3b:8d:73:72:0c:79:67:f0:cb:54:8a:d2:
b6:e6:6d:ff:97:51:4a:57:98:92:be:3c:e5:07:92:f0:a3:17:
1f:42:25:63:e4:3e:18:c8:29:00:dd:c0:25:3e:f9:bd:b1:0b:
da:dd:cd:96:7d:c4:c1:93:8e:55:0a:54:57:b4:d9:00:4a:7f:
56:2c:b7:6b:b1:e3:8c:2e:c4:be:fd:a6:6d:d0:09:1c:ae:33:
52:f3:93:7d:c8:1b:cc:7e:61:48:77:b6:73:4d:de:90:bf:16:
cc:24:4c:16:26:5f:f9:06:a4:99:38:97:e7:0f:dd:1c:14:06:
d2:a1:63:28:67:a1:d9:2b:2b:e6:86:82:05:8e:be:b9:c3:e3:
a9:f2:11:aa:8b:e8:38:d7:78:7b:19:5b:29:71:80:e2:25:b0:
d1:9f:ae:5b:4d:2c:5e:c3:01:e8:47:80:38:f1:5d:18:6f:fe:
d6:74:d9:f5:88:8f:34:43:93:07:19:83:7d:45:bf:d2:94:06:
64:c8:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:19 2026 by rpki-client