Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402866.roa
File: AS402866.roa (raw, json)
Hash identifier: KRbMi1Enr6wto5vtOKp0TYsy15oC4uL/odn41FqKC+o=
Subject key identifier: 45:25:E7:14:20:50:1C:B5:84:63:87:CF:C9:C1:E2:EF:7C:28:7E:64
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2FADD360B00417DA74FACCBAA6FEE0512526A3C5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402866.roa
Signing time: Thu 10 Sep 2026 03:40:43 +0000
ROA not before: Thu 10 Sep 2026 03:35:43 +0000
ROA not after: Thu 09 Sep 2027 03:40:43 +0000
asID: 402866
IP address blocks: 82.25.53.0/24 maxlen: 24
82.25.142.0/24 maxlen: 24
82.26.71.0/24 maxlen: 24
82.26.132.0/24 maxlen: 24
82.26.197.0/24 maxlen: 24
82.27.69.0/24 maxlen: 24
84.75.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ad:d3:60:b0:04:17:da:74:fa:cc:ba:a6:fe:e0:51:25:26:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 03:35:43 2026 GMT
Not After : Sep 9 03:40:43 2027 GMT
Subject: CN=4525E71420501CB5846387CFC9C1E2EF7C287E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:a6:e5:cc:01:e7:fc:80:69:90:66:40:d7:
79:06:83:cb:59:7c:b9:20:ea:d6:de:0d:60:6f:05:
a4:fe:35:3a:50:62:9a:6c:6f:ca:50:92:6e:28:79:
55:da:9c:95:d8:38:0c:9a:84:fc:bb:97:08:2b:40:
c1:80:c5:13:5d:1b:52:f6:51:37:02:1f:68:d8:bc:
f3:36:15:24:6b:c7:d3:7b:b1:93:32:65:e2:97:e3:
bd:5e:f6:f5:18:af:e5:d6:54:c2:f2:c2:3f:bf:c3:
b9:31:0d:3d:b0:bf:31:1e:9f:7c:b5:7c:51:5f:b3:
bf:0c:32:94:b6:b0:e7:35:7d:f7:d1:7f:2e:41:f4:
36:db:67:98:f2:f0:a8:47:5d:74:63:ec:c5:34:5e:
eb:67:67:4d:f2:a1:2f:5f:89:41:18:8e:16:4b:39:
a1:8a:6d:dc:04:a6:4a:fe:61:93:79:ed:bf:a6:27:
8b:6d:0e:1c:44:e7:d4:b9:aa:15:d9:ee:ba:fd:f6:
f4:75:9c:7c:86:e7:07:d7:30:e3:7b:df:2f:85:c5:
80:17:1a:f1:6e:49:25:12:b3:cf:c1:7e:b1:94:2b:
56:04:61:dc:f6:13:1a:fa:68:99:59:7b:25:3b:52:
dc:7e:d4:8e:26:da:c7:e7:2c:99:af:ee:0d:dc:26:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:25:E7:14:20:50:1C:B5:84:63:87:CF:C9:C1:E2:EF:7C:28:7E:64
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.53.0/24
82.25.142.0/24
82.26.71.0/24
82.26.132.0/24
82.26.197.0/24
82.27.69.0/24
84.75.70.0/24
Signature Algorithm: sha256WithRSAEncryption
40:bb:a2:ba:b8:b5:cc:91:30:e6:c7:31:9a:2e:dc:51:77:4b:
4b:b0:33:49:c1:05:d6:f4:48:55:a0:ef:52:c2:c1:7f:11:40:
dc:a0:da:56:b7:d9:d9:97:d7:a2:8d:61:a4:d7:e2:a7:71:bd:
7b:17:01:14:05:78:18:59:8f:00:a1:c3:16:65:bc:84:3e:a2:
fa:10:8c:cb:96:d3:8b:a4:cf:1d:18:aa:e2:e5:6c:ea:85:a0:
77:20:94:6d:14:3d:5d:70:8c:0e:f7:72:e7:d0:c9:19:3b:b7:
0c:50:9a:23:45:94:83:df:29:e3:79:04:88:25:85:92:c4:50:
ff:4a:2c:c8:6a:bf:7c:24:8c:d1:ff:49:2e:a6:ef:ac:23:92:
ed:e4:ec:d6:36:4d:8d:0a:29:60:ff:dd:43:63:9c:1e:69:4f:
a8:9d:de:6f:70:32:ce:36:e0:d8:fe:a7:b1:d9:a7:08:03:9f:
24:99:00:9f:97:74:e4:e3:1c:0a:70:66:36:cf:6a:9e:f4:57:
8c:5c:3c:82:35:0f:6a:1e:b3:9f:05:9e:e4:98:4f:c4:56:43:
73:b1:76:fe:8e:e2:4a:3d:31:10:f0:d2:1c:21:d1:a9:a1:e9:
18:36:2d:b2:74:07:50:d7:5e:b1:b7:6a:af:a9:2a:ac:a0:2c:
fe:47:52:03
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUL63TYLAEF9p0+sy6pv7gUSUmo8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTAwMzM1NDNaFw0yNzA5MDkwMzQwNDNaMDMxMTAvBgNV
BAMTKDQ1MjVFNzE0MjA1MDFDQjU4NDYzODdDRkM5QzFFMkVGN0MyODdFNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGHKblzAHn/IBpkGZA13kGg8tZ
fLkg6tbeDWBvBaT+NTpQYppsb8pQkm4oeVXanJXYOAyahPy7lwgrQMGAxRNdG1L2
UTcCH2jYvPM2FSRrx9N7sZMyZeKX471e9vUYr+XWVMLywj+/w7kxDT2wvzEen3y1
fFFfs78MMpS2sOc1fffRfy5B9DbbZ5jy8KhHXXRj7MU0XutnZ03yoS9fiUEYjhZL
OaGKbdwEpkr+YZN57b+mJ4ttDhxE59S5qhXZ7rr99vR1nHyG5wfXMON73y+FxYAX
GvFuSSUSs8/BfrGUK1YEYdz2Exr6aJlZeyU7Utx+1I4m2sfnLJmv7g3cJq9lAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQURSXnFCBQHLWEY4fPycHi73wofmQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAyODY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAUhk1
AwQAUhmOAwQAUhpHAwQAUhqEAwQAUhrFAwQAUhtFAwQAVEtGMA0GCSqGSIb3DQEB
CwUAA4IBAQBAu6K6uLXMkTDmxzGaLtxRd0tLsDNJwQXW9EhVoO9SwsF/EUDcoNpW
t9nZl9eijWGk1+Kncb17FwEUBXgYWY8AocMWZbyEPqL6EIzLltOLpM8dGKri5Wzq
haB3IJRtFD1dcIwO93Ln0MkZO7cMUJojRZSD3ynjeQSIJYWSxFD/SizIar98JIzR
/0kupu+sI5Lt5OzWNk2NCilg/91DY5weaU+ond5vcDLONuDY/qex2acIA58kmQCf
l3Tk4xwKcGY2z2qe9FeMXDyCNQ9qHrOfBZ7kmE/EVkNzsXb+juJKPTEQ8NIcIdGp
oekYNi2ydAdQ116xt2qvqSqsoCz+R1ID
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:16 2026 by rpki-client