Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8368.roa
File: AS8368.roa (raw, json)
Hash identifier: 2Llj7ZBV+WQeT1ca5RA0whcfiM1EgmAmX0enA6NNP7o=
Subject key identifier: F5:6A:4F:18:3D:D1:DC:40:EB:28:BE:8E:08:EC:8E:D9:E0:72:5F:6B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 09DE00426F4E7BC76B4481BFD268F37245F6A746
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8368.roa
Signing time: Fri 27 Mar 2026 11:59:05 +0000
ROA not before: Fri 27 Mar 2026 11:54:05 +0000
ROA not after: Fri 26 Mar 2027 11:59:05 +0000
asID: 8368
IP address blocks: 82.21.234.0/24 maxlen: 24
82.22.233.0/24 maxlen: 24
82.23.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:de:00:42:6f:4e:7b:c7:6b:44:81:bf:d2:68:f3:72:45:f6:a7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 27 11:54:05 2026 GMT
Not After : Mar 26 11:59:05 2027 GMT
Subject: CN=F56A4F183DD1DC40EB28BE8E08EC8ED9E0725F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:d9:ba:fd:e2:f6:f6:d4:e1:8f:8a:bf:5e:
5c:e1:69:7e:fe:3d:05:77:3a:73:12:ef:a7:a3:e9:
17:1d:f8:ae:ee:44:7f:fd:f0:92:25:4c:1e:0b:05:
86:17:17:c1:21:bf:b6:a7:71:0f:23:0f:4a:f4:69:
f1:ed:6a:7a:b6:fe:80:c8:de:7e:0c:89:5c:24:92:
78:72:c4:bf:1a:18:f3:2b:0d:a1:cc:fa:7c:9f:11:
47:53:ad:e4:34:8d:52:62:59:76:82:c7:d6:41:95:
c7:85:88:4f:93:7a:13:7e:c8:da:2b:d9:0c:e4:25:
87:8b:1d:01:7f:d3:43:fd:d4:8b:18:a9:8a:15:ab:
4b:50:12:82:95:ac:95:8e:47:d9:7d:5b:ad:0e:38:
29:b7:d4:bb:6f:56:e9:6e:b4:d1:71:04:4a:06:b2:
3d:09:1f:ba:ac:26:35:08:72:bc:74:e0:7b:fd:a2:
9f:ac:84:21:d1:a3:1d:dc:56:28:fc:02:c2:56:8c:
d8:6b:4e:58:40:60:43:f1:98:ca:ad:56:be:f9:89:
d6:68:9f:dd:2c:a2:d1:0b:67:81:27:a5:37:82:46:
1e:1e:20:26:66:97:fa:a4:9a:b0:54:35:f1:e3:84:
30:68:29:76:da:da:19:d3:1d:28:83:a0:5b:a7:e7:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:4F:18:3D:D1:DC:40:EB:28:BE:8E:08:EC:8E:D9:E0:72:5F:6B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8368.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.234.0/24
82.22.233.0/24
82.23.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3a:98:0f:ed:d7:f6:fb:97:a4:78:df:c6:58:f0:d3:f8:68:
0e:b9:21:ce:7a:69:5f:50:ec:a0:ff:3c:ea:f9:95:04:8c:bc:
ed:f4:ba:f1:04:d7:7d:4c:e9:c3:3a:eb:fd:c1:15:3d:f2:46:
32:58:a6:7e:98:51:02:73:59:26:0f:2a:15:54:2f:c8:e4:45:
f0:3a:65:1c:de:22:fe:08:0b:6e:31:2e:37:0c:92:2c:9f:5e:
9e:41:1d:89:1c:28:7a:fe:98:94:22:3b:48:95:c8:ee:ef:df:
b2:18:70:73:36:d3:f2:32:23:d4:65:23:e9:25:ad:9e:c3:2e:
e8:59:18:26:ee:86:d1:2e:1e:67:00:97:47:c4:33:14:46:8f:
23:5e:7c:9e:aa:b6:0b:f1:a9:ce:e3:00:16:b4:f1:4d:9e:37:
2d:ec:d3:e0:56:30:23:cf:68:33:f4:9a:ae:6e:f8:d3:4f:dc:
f2:be:13:a2:6a:9c:f6:aa:24:d5:5e:67:2b:f2:de:b4:31:2e:
93:76:71:0e:5a:11:91:bd:08:80:17:86:87:bf:ab:77:bb:0f:
9a:28:6d:ff:eb:ab:7a:91:12:45:0d:8a:d8:68:db:f5:03:95:
30:c2:6c:c9:3f:a5:64:a8:71:4d:5a:cb:d3:76:01:3f:ab:a2:
71:75:0c:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:47:08 2026 by rpki-client