Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4229.roa
File: AS4229.roa (raw, json)
Hash identifier: o4McZEU1FOMz3RX9Tw0PYP0K1X8XpAdFi6yIdHwadDA=
Subject key identifier: E7:4F:B8:D3:C2:A0:EB:C7:E7:94:F1:BE:CA:AD:18:4D:DC:32:46:FF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 12CCBE6B1E8CA1DD772E771134F166903A67EF73
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4229.roa
Signing time: Sun 26 Jul 2026 10:53:00 +0000
ROA not before: Sun 26 Jul 2026 10:48:00 +0000
ROA not after: Sun 25 Jul 2027 10:53:00 +0000
asID: 4229
IP address blocks: 82.38.180.0/24 maxlen: 24
84.75.148.0/24 maxlen: 24
84.75.150.0/24 maxlen: 24
84.75.155.0/24 maxlen: 24
84.75.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cc:be:6b:1e:8c:a1:dd:77:2e:77:11:34:f1:66:90:3a:67:ef:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 26 10:48:00 2026 GMT
Not After : Jul 25 10:53:00 2027 GMT
Subject: CN=E74FB8D3C2A0EBC7E794F1BECAAD184DDC3246FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:74:b1:e1:7d:d5:b9:7f:0e:f7:5f:90:08:
c8:3d:70:c5:24:15:d1:93:5c:0f:90:7b:20:78:37:
7d:c3:91:f2:91:5e:31:a0:31:4e:2e:7e:f2:57:73:
c3:d0:37:e9:1d:dd:4f:ee:31:be:af:88:2e:15:ea:
14:e2:2d:0b:01:f4:59:91:a7:d1:b2:fb:3b:f6:62:
da:a1:c5:9e:b2:14:86:c1:8f:08:c2:0f:df:35:7a:
32:64:7e:01:79:81:f9:7a:73:65:4a:26:17:41:a9:
23:bc:f8:6e:16:fb:9e:4a:bb:fe:1e:f3:7f:9e:d9:
bf:f3:5f:81:d3:51:ff:0d:27:19:01:c0:de:0c:13:
10:f8:33:02:79:1e:89:03:a6:be:2a:3f:00:10:c7:
95:18:1e:03:f5:08:e3:5c:65:8e:43:57:fe:78:12:
e2:aa:dc:01:32:28:7d:9e:ba:94:5e:12:39:f3:e0:
1a:a9:12:86:4d:4a:e5:4b:fb:7f:f3:35:5d:44:17:
8f:ab:29:a8:7f:c2:c6:b1:4c:60:b1:83:87:80:ba:
cd:f1:de:e1:56:cf:7b:ce:61:51:0e:1f:68:01:40:
4f:a8:23:9b:37:54:e2:c3:a0:ff:6c:11:ae:06:77:
d4:d6:f3:65:3e:97:07:21:5d:41:c4:24:7b:e4:62:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:B8:D3:C2:A0:EB:C7:E7:94:F1:BE:CA:AD:18:4D:DC:32:46:FF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4229.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.180.0/24
84.75.148.0/24
84.75.150.0/24
84.75.155.0/24
84.75.158.0/24
Signature Algorithm: sha256WithRSAEncryption
84:08:c9:85:0c:36:5c:23:56:51:b1:3e:f4:80:98:0e:75:4c:
8e:78:4d:8c:f5:4b:5d:c4:45:af:08:4e:1b:c6:7d:98:9a:53:
7a:7f:5b:7a:78:0e:db:2c:b8:ab:58:b8:47:23:8c:af:61:13:
3e:ca:b1:37:66:4c:1b:18:6c:46:fc:87:8f:e6:7d:9f:e7:49:
1c:ea:89:0a:d4:95:ad:96:9f:b5:e1:36:10:49:0f:ab:31:a8:
67:05:38:9d:4c:32:5a:da:2e:1a:5f:e1:3f:f8:9b:b1:08:c5:
fc:7c:b7:de:d9:ce:0a:47:9e:e6:fc:ae:52:d7:82:6f:ac:1d:
ff:83:0d:de:a3:dd:74:34:0f:a7:21:6e:76:f0:cb:03:14:0c:
e1:09:34:32:ce:d7:b2:b4:fc:80:14:ff:40:1c:cb:b1:2a:cb:
6c:7c:1b:d8:09:8a:d2:a1:bb:a0:5e:86:e5:1f:21:6a:cb:8b:
49:73:1d:49:d0:c5:4f:58:22:b0:92:b2:52:95:ec:76:d8:8b:
66:e9:e4:a3:22:2b:a5:d0:e9:3a:f5:16:48:64:b9:8c:ac:18:
64:8a:dd:c7:59:3e:c7:0b:c8:77:73:6c:d8:31:da:10:f9:7f:
b9:61:cd:b7:85:24:9c:47:47:f6:d8:14:e4:f2:ce:2f:9d:b0:
53:4b:3e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:53 2026 by rpki-client