Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7459.roa
File: AS7459.roa (raw, json)
Hash identifier: 7LeGm60+jZ/B6bNPUFvpWlLI4WMHbmE0ZhpYtZBMgoU=
Subject key identifier: 7B:87:B7:B6:FA:65:88:A5:F0:27:BB:F4:19:D6:58:16:43:7A:C1:2B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3BA184661BAA20840FF9FB32DBADC928F1B6EF01
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7459.roa
Signing time: Fri 04 Sep 2026 09:08:20 +0000
ROA not before: Fri 04 Sep 2026 09:03:20 +0000
ROA not after: Fri 03 Sep 2027 09:08:20 +0000
asID: 7459
IP address blocks: 178.83.41.0/24 maxlen: 24
178.83.54.0/24 maxlen: 24
178.83.60.0/24 maxlen: 24
178.83.73.0/24 maxlen: 24
178.83.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a1:84:66:1b:aa:20:84:0f:f9:fb:32:db:ad:c9:28:f1:b6:ef:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 4 09:03:20 2026 GMT
Not After : Sep 3 09:08:20 2027 GMT
Subject: CN=7B87B7B6FA6588A5F027BBF419D65816437AC12B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:60:cd:5e:4c:66:ed:2f:d5:06:87:01:6f:
9a:08:b3:f5:31:95:2c:25:e9:1d:0d:9a:52:ad:40:
61:17:23:23:b6:95:f1:d5:d6:84:a0:9a:02:69:9a:
2d:e8:dc:ee:ed:97:cc:e9:17:a8:2c:99:9d:69:0b:
ec:0a:f4:e6:68:7a:bb:25:92:9b:7a:5a:e2:00:c1:
4c:bc:6f:33:a7:45:79:f4:17:8f:96:db:c7:29:a4:
65:69:b8:9b:ad:16:5f:16:e4:34:11:87:51:ec:c7:
a6:20:96:fb:ab:38:d4:39:55:48:38:92:96:34:be:
e4:43:fe:2d:e9:25:e0:a2:63:a9:0c:25:55:0d:0d:
ee:f9:1a:4f:7a:93:2f:64:b1:57:e3:cb:a8:79:13:
92:bb:f9:5f:e6:5d:49:d1:11:9e:eb:e4:ec:bc:68:
f6:c1:19:34:fb:c6:13:b0:b5:2d:a4:d7:35:00:d9:
ff:a6:2f:2a:14:24:f1:1d:45:65:5c:1b:b0:08:dd:
3a:e6:42:9a:82:ed:b2:be:d9:56:0f:18:d3:11:72:
51:ab:bc:d3:d6:2b:b1:df:9e:61:97:be:9c:8f:f8:
2d:26:47:6e:21:5d:15:8c:e9:d7:da:9e:d5:b3:eb:
67:bc:23:de:37:ee:5a:25:4f:3c:0e:11:f4:c2:c0:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:B7:B6:FA:65:88:A5:F0:27:BB:F4:19:D6:58:16:43:7A:C1:2B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.41.0/24
178.83.54.0/24
178.83.60.0/24
178.83.73.0/24
178.83.84.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1c:1f:39:88:f2:a4:c9:c5:ac:ec:8f:f5:1b:23:3f:2a:d6:
c7:7c:73:74:ae:ba:45:d1:c7:ec:74:fd:e7:c4:55:a0:0e:98:
57:ca:7d:f9:9e:4d:af:a9:24:7c:a4:dd:81:c1:7c:8a:a9:d2:
35:7f:c8:da:c5:13:f5:59:34:97:f1:04:c9:d4:6c:61:66:09:
e1:45:a8:a6:59:d0:78:77:7d:cf:23:6f:5a:11:af:72:40:56:
7c:07:ce:01:0b:f1:20:a9:af:5c:da:dc:73:dc:a1:eb:fa:4b:
e1:bf:83:72:d1:e6:a8:72:df:63:ab:f7:3c:a8:a7:b5:3b:85:
4c:28:95:cc:aa:c6:de:40:cc:55:01:2e:11:74:97:75:85:c6:
c7:d1:61:bc:24:54:19:35:7d:ab:3b:1c:7a:9b:04:b3:8a:b6:
6c:a3:b6:11:fe:55:6c:7e:07:f3:9c:cf:6d:08:39:36:62:af:
20:6a:4e:d2:be:cf:68:e5:1f:42:c5:1b:37:5c:7e:03:a4:fc:
b0:ff:78:4d:8b:43:41:02:ae:78:e7:83:21:8b:b8:7c:7f:77:
71:0d:ce:4f:e5:05:90:c2:1d:87:86:58:73:c0:a0:dd:14:8d:
9e:7a:c9:ae:c8:f5:74:3a:c2:db:cf:ad:14:cb:48:7a:40:ef:
c2:63:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:47 2026 by rpki-client