Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: /CUBrIXelcOKX7+gNBYouhnA5sKo+XCQtPErCd8AElU=
Subject key identifier: 72:C3:22:8F:C9:6C:6D:29:F0:45:34:65:AE:C4:0A:99:9B:8E:D3:14
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1AFF7EB2C5558742C03A843DCFFB59E45E803733
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS53356.roa
Signing time: Fri 11 Sep 2026 18:16:48 +0000
ROA not before: Fri 11 Sep 2026 18:11:48 +0000
ROA not after: Fri 10 Sep 2027 18:16:48 +0000
asID: 53356
IP address blocks: 82.22.127.0/24 maxlen: 24
84.75.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ff:7e:b2:c5:55:87:42:c0:3a:84:3d:cf:fb:59:e4:5e:80:37:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 11 18:11:48 2026 GMT
Not After : Sep 10 18:16:48 2027 GMT
Subject: CN=72C3228FC96C6D29F0453465AEC40A999B8ED314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:61:99:ca:74:7d:22:61:c5:58:b9:74:bc:
a8:51:52:b6:be:14:5d:af:54:77:f2:b5:44:ae:42:
ee:37:21:32:91:d7:b7:d7:cb:fa:2e:c2:85:74:2c:
50:d3:80:9e:96:b6:9f:16:8d:08:e8:c5:54:24:d2:
40:26:02:8c:53:10:4e:f8:d6:83:aa:03:c5:b3:9e:
f9:65:15:c0:14:35:c7:57:f0:6a:eb:ad:18:22:25:
01:c3:89:a2:3b:27:27:bc:50:c6:4d:d6:4c:41:ca:
97:0a:42:05:ac:a8:db:9e:01:00:5d:f7:de:62:3e:
85:90:1b:0f:d9:9f:34:ba:72:5a:64:86:e1:c4:6a:
2e:3a:d7:b4:21:65:88:78:7b:f1:15:55:c0:f7:01:
40:00:cc:73:81:5a:fb:3b:79:a0:06:e9:8a:61:2c:
8e:29:0a:2b:30:88:86:3e:90:a9:6b:65:d7:e7:66:
f0:40:6a:60:5c:1d:a8:70:86:70:4c:f8:b4:40:dd:
64:cb:9b:32:75:c8:0b:e4:0d:f7:f9:ea:56:a9:e9:
89:46:5c:d9:6e:f4:ec:a2:72:6b:1a:b1:ea:1a:43:
b5:73:ef:3f:25:fa:8c:74:ef:08:13:28:69:28:43:
ce:38:7c:ec:61:98:b3:38:2c:59:bc:0d:f6:c4:1b:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C3:22:8F:C9:6C:6D:29:F0:45:34:65:AE:C4:0A:99:9B:8E:D3:14
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.127.0/24
84.75.67.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:29:54:95:82:f2:cc:e8:53:9a:cb:c5:95:f7:c1:34:1d:ea:
6a:bd:4b:da:a3:3d:b5:4a:70:b4:31:55:76:3e:a2:9b:09:d9:
18:43:26:f9:3d:b3:7f:92:cc:22:11:5c:b9:92:ae:ef:a0:e4:
89:0f:78:27:55:b1:86:4d:44:ff:5f:85:db:f5:ed:32:9d:c3:
fb:a7:92:d9:58:be:b5:cd:4c:68:ce:bc:b7:8a:00:25:9d:0f:
8c:c6:2a:7f:4e:ef:75:9b:e5:6f:1c:eb:4d:12:58:2b:ba:b9:
e1:a4:94:98:6d:86:77:f4:c0:16:77:9c:6d:bb:63:70:50:89:
2f:ae:bb:46:42:fd:77:d2:8b:d7:f9:40:23:92:6b:5c:bb:6e:
85:a9:0e:6f:e8:3f:87:08:ef:54:d9:ae:e6:78:fb:01:ab:8c:
67:12:72:77:31:9c:36:20:0c:f0:4d:09:2c:f1:8b:3c:c9:9f:
db:04:68:39:3a:4e:bd:f0:d4:2d:c6:74:ee:25:e4:33:5b:b0:
ab:17:0b:47:23:e4:e8:8b:10:7d:51:40:1e:20:1b:45:34:b2:
b3:40:24:15:49:2a:a7:82:fb:18:ab:ce:ec:af:c7:59:6b:45:
47:19:02:12:23:36:94:f8:aa:2a:64:78:a0:d0:a8:85:25:61:
99:83:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:18:56 2026 by rpki-client