Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401818.roa
File: AS401818.roa (raw, json)
Hash identifier: EgT3G2hSJ3HJYR50Nm3jQXHRJLjRFgZixBmvUHfUdu8=
Subject key identifier: C9:E5:95:2F:F8:14:2C:00:E4:85:25:CB:0C:D7:7B:AF:B1:75:C8:C7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 12BFF4497F73DB72A3DBF46AE1A266A66281D25A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401818.roa
Signing time: Tue 15 Sep 2026 21:09:11 +0000
ROA not before: Tue 15 Sep 2026 21:04:11 +0000
ROA not after: Tue 14 Sep 2027 21:09:11 +0000
asID: 401818
IP address blocks: 2a0f:85c1:da0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:bf:f4:49:7f:73:db:72:a3:db:f4:6a:e1:a2:66:a6:62:81:d2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 15 21:04:11 2026 GMT
Not After : Sep 14 21:09:11 2027 GMT
Subject: CN=C9E5952FF8142C00E48525CB0CD77BAFB175C8C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e0:11:92:21:9d:3a:2f:97:97:7f:2c:26:3a:
94:6e:63:93:bd:2b:63:23:f9:43:f9:de:9d:ef:5e:
dd:35:73:de:bf:01:d9:77:10:5f:0d:78:7b:aa:a0:
13:0b:f0:76:aa:34:1c:97:e5:d5:42:8b:1e:2d:50:
1c:fc:9a:ed:2c:33:22:6b:24:0b:a2:7c:a0:8e:40:
fe:9a:91:ac:4b:72:a5:bd:74:3f:6d:89:98:32:93:
f4:81:b3:c8:93:fd:6a:fd:23:13:e3:ea:c6:99:43:
7c:cf:3f:2e:b1:a1:58:f8:7f:7d:7e:a3:1f:d2:e8:
32:c9:6e:fa:03:6d:e3:4b:28:52:92:bb:e1:3c:2d:
c1:28:5c:16:a7:d6:7c:91:e0:d0:db:4e:d5:31:37:
d9:bc:84:72:dd:3e:f3:ca:47:b6:a4:9c:53:30:de:
59:ab:99:a8:d0:ac:66:aa:cd:6e:8e:d4:00:bc:28:
58:5d:50:4d:d7:26:c5:3f:74:cb:a7:e0:a9:93:2b:
cd:2d:2a:5b:cb:0a:94:b4:2a:71:f2:a2:d9:de:a9:
24:e4:d8:8c:07:88:5b:b8:e4:a4:c6:2e:f5:9b:41:
70:3e:5e:14:d6:6c:a3:04:58:33:9f:ce:81:6b:44:
45:99:a0:40:9e:80:5e:0f:1b:33:38:8c:b9:94:a2:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E5:95:2F:F8:14:2C:00:E4:85:25:CB:0C:D7:7B:AF:B1:75:C8:C7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:da0::/44
Signature Algorithm: sha256WithRSAEncryption
8e:52:c0:2c:4c:90:ce:6d:72:9e:92:15:cd:d3:5d:40:e3:e2:
d1:15:30:ed:6a:57:10:81:64:56:f3:16:9e:0c:2c:b9:39:8e:
94:c4:98:e4:70:dc:d8:17:14:ab:a3:c7:50:af:9b:ad:9b:6e:
df:77:48:79:20:36:9c:9e:76:48:ae:04:6b:88:41:15:c7:99:
fc:f0:54:62:70:bd:44:c7:3f:99:62:dc:c5:9f:45:e7:38:48:
24:58:57:0f:c6:9b:2e:4c:e6:6f:cf:9d:fd:ec:1d:49:d9:7b:
68:6f:12:e0:c9:69:8c:6c:01:ca:1f:fc:3d:d3:6c:bd:fd:71:
4b:01:96:5f:1c:45:71:43:95:5c:6d:12:07:2e:31:c1:23:bc:
1f:e1:fd:f2:fd:76:31:88:17:00:2a:17:59:e6:0c:04:70:de:
76:16:47:ad:d0:90:ed:13:ba:da:2c:82:b2:bb:9d:04:65:fd:
c6:c1:d3:ff:3a:92:fe:12:fc:be:4b:c9:5d:b0:a5:d0:b8:bd:
5a:3b:44:15:13:b2:19:c1:65:3c:ef:4e:1c:dd:28:2e:23:8d:
33:b2:47:27:e5:d6:0d:bd:18:f8:87:c7:bd:c8:23:4b:0d:e8:
f6:02:d8:77:04:6b:64:5d:9a:6e:fb:e0:47:9b:56:b1:92:77:
96:26:24:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUEr/0SX9z23Kj2/Rq4aJmpmKB0lowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA5MTUyMTA0MTFaFw0yNzA5MTQyMTA5MTFaMDMxMTAvBgNV
BAMTKEM5RTU5NTJGRjgxNDJDMDBFNDg1MjVDQjBDRDc3QkFGQjE3NUM4QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn4BGSIZ06L5eXfywmOpRuY5O9
K2Mj+UP53p3vXt01c96/Adl3EF8NeHuqoBML8HaqNByX5dVCix4tUBz8mu0sMyJr
JAuifKCOQP6akaxLcqW9dD9tiZgyk/SBs8iT/Wr9IxPj6saZQ3zPPy6xoVj4f31+
ox/S6DLJbvoDbeNLKFKSu+E8LcEoXBan1nyR4NDbTtUxN9m8hHLdPvPKR7aknFMw
3lmrmajQrGaqzW6O1AC8KFhdUE3XJsU/dMun4KmTK80tKlvLCpS0KnHyotneqSTk
2IwHiFu45KTGLvWbQXA+XhTWbKMEWDOfzoFrREWZoECegF4PGzM4jLmUoua7AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUyeWVL/gULADkhSXLDNd7r7F1yMcwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTNDAxODE4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+F
wQ2gMA0GCSqGSIb3DQEBCwUAA4IBAQCOUsAsTJDObXKekhXN011A4+LRFTDtalcQ
gWRW8xaeDCy5OY6UxJjkcNzYFxSro8dQr5utm27fd0h5IDacnnZIrgRriEEVx5n8
8FRicL1Exz+ZYtzFn0XnOEgkWFcPxpsuTOZvz5397B1J2XtobxLgyWmMbAHKH/w9
02y9/XFLAZZfHEVxQ5VcbRIHLjHBI7wf4f3y/XYxiBcAKhdZ5gwEcN52Fket0JDt
E7raLIKyu50EZf3GwdP/OpL+Evy+S8ldsKXQuL1aO0QVE7IZwWU8704c3SguI40z
skcn5dYNvRj4h8e9yCNLDej2Ath3BGtkXZpu++BHm1axkneWJiRP
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:52:32 2026 by rpki-client