Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7843.roa
File: AS7843.roa (raw, json)
Hash identifier: cVQH5lB74sAcMjCreGWVwOHExootFXMGX4MQSvI5Avw=
Subject key identifier: 20:CD:16:64:B2:E6:5B:01:AB:3B:11:CA:EE:02:B3:96:B3:38:8D:AA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 146FBC70B4F18A1E6FE9A7DEFC83F07AC2031F49
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7843.roa
Signing time: Fri 28 Aug 2026 00:49:30 +0000
ROA not before: Fri 28 Aug 2026 00:44:30 +0000
ROA not after: Fri 27 Aug 2027 00:49:30 +0000
asID: 7843
IP address blocks: 82.22.136.0/22 maxlen: 24
82.23.140.0/23 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.36.0/22 maxlen: 24
82.27.144.0/20 maxlen: 24
82.29.30.0/23 maxlen: 24
82.29.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:6f:bc:70:b4:f1:8a:1e:6f:e9:a7:de:fc:83:f0:7a:c2:03:1f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 28 00:44:30 2026 GMT
Not After : Aug 27 00:49:30 2027 GMT
Subject: CN=20CD1664B2E65B01AB3B11CAEE02B396B3388DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:e7:8e:36:39:96:95:8f:ff:9d:bc:16:01:
c4:a6:d2:04:f5:23:29:97:8d:dd:e6:a4:b6:95:6e:
05:af:7b:e8:2a:81:04:39:ad:6a:63:fe:cc:81:2e:
7c:cf:38:1c:7f:b5:b4:17:ed:3c:ee:1b:ba:aa:30:
f1:6d:6c:8e:6a:9c:1f:c4:3c:c1:e6:b2:02:d8:a0:
8e:bd:69:7d:30:ed:e1:6d:05:46:7e:b7:48:03:32:
39:84:f4:65:76:55:1c:c1:8f:72:c7:38:06:d1:94:
db:bb:cb:51:73:01:d0:d6:21:72:87:0d:a5:a1:95:
61:0b:cf:9b:01:42:79:96:c1:63:fa:cb:20:47:37:
bb:87:44:76:91:4a:1e:91:82:49:e6:d9:a0:a7:a3:
22:56:2e:55:5c:f4:60:d6:24:cc:24:97:74:b7:20:
6e:c3:46:16:5b:44:3c:3f:5d:21:13:e1:a8:79:26:
9e:f4:8b:ef:62:84:2d:ab:4b:51:ec:00:c2:8f:63:
fc:8a:ed:d2:f0:45:02:d7:81:c2:f3:88:cf:b8:35:
64:ed:92:14:ae:b8:7c:8a:e2:28:3a:50:9e:31:ff:
b8:17:af:15:d3:65:89:a8:19:4c:a7:8b:dd:82:c6:
48:51:f6:cc:07:36:99:39:36:d8:84:86:15:64:94:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CD:16:64:B2:E6:5B:01:AB:3B:11:CA:EE:02:B3:96:B3:38:8D:AA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.136.0/22
82.23.140.0/23
82.23.152.0/21
82.24.36.0/22
82.27.144.0/20
82.29.30.0/23
82.29.144.0/22
Signature Algorithm: sha256WithRSAEncryption
36:58:20:c0:93:b5:96:f0:47:0a:84:91:9e:f2:c7:32:d5:ce:
92:7f:9c:79:d4:e2:6d:9b:11:50:f9:25:fa:24:3d:7b:88:90:
5f:31:08:a1:0a:d5:86:30:9d:24:92:ca:04:58:6f:8f:bb:ad:
9c:63:97:bb:3b:6f:10:49:8b:b4:8a:c5:57:5c:20:03:2c:8c:
29:b0:8e:e8:29:70:54:86:08:60:b5:e6:60:4c:14:48:27:ab:
07:62:79:96:9e:0b:50:f4:db:b1:0f:e8:c3:f1:bd:fd:29:86:
4a:23:ae:ed:e8:75:01:d4:59:a4:16:7f:dd:12:3e:67:be:e9:
a7:62:f4:c7:bf:c1:4d:1f:88:4b:b3:61:03:3a:eb:f6:0c:ca:
ff:35:62:22:b8:24:0b:93:d5:81:ee:21:7c:c7:a8:b2:10:af:
7d:1e:46:39:9c:69:03:e8:49:ab:6a:9e:6e:04:bd:4e:b7:ef:
70:13:fa:3e:a2:ac:38:c6:2e:43:da:5e:65:fc:be:77:1f:d6:
ce:f4:6e:1d:4c:ff:30:50:30:93:a3:c4:c3:04:61:85:00:b8:
e8:50:24:bf:d4:ee:2c:ad:b7:cf:e7:ba:fd:0f:7b:30:9f:0b:
d6:a0:31:55:6c:19:7c:8a:be:52:47:9d:bc:75:89:66:f6:df:
f6:90:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:45:29 2026 by rpki-client