Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402203.roa
File: AS402203.roa (raw, json)
Hash identifier: P2ee2axKt6czEEyXB/tWt+mY7e8Sl5XgNxOrWS+VRsE=
Subject key identifier: 81:7F:88:07:FC:7C:57:93:81:BC:B8:14:CA:7C:BB:6D:A4:3D:EE:A5
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4D1E478613A1AA37DD8D007BE202914D7FB53F45
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402203.roa
Signing time: Thu 19 Mar 2026 12:12:57 +0000
ROA not before: Thu 19 Mar 2026 12:07:57 +0000
ROA not after: Thu 18 Mar 2027 12:12:57 +0000
asID: 402203
IP address blocks: 82.139.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 01:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1e:47:86:13:a1:aa:37:dd:8d:00:7b:e2:02:91:4d:7f:b5:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Mar 19 12:07:57 2026 GMT
Not After : Mar 18 12:12:57 2027 GMT
Subject: CN=817F8807FC7C579381BCB814CA7CBB6DA43DEEA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:77:22:dc:5f:da:56:2e:af:ed:89:85:36:
dd:02:8f:57:ed:7e:18:dd:ea:b6:02:89:cb:41:6d:
4e:a3:a7:e6:af:c6:ec:2c:8e:f0:6b:a2:f4:ee:ed:
ad:94:76:e1:5a:9b:de:bb:6e:c5:f9:a0:cf:be:07:
a2:23:19:8d:ae:f2:3f:9e:77:bc:14:2f:ed:5f:6a:
0f:f1:09:1c:d7:de:7c:75:d2:b7:6c:0b:8b:fa:d1:
fa:9a:2c:17:ae:85:42:7d:a9:9c:1b:4e:fb:e5:ae:
11:c6:bb:61:fa:7b:00:8d:09:8d:2b:dd:f9:b7:13:
f5:31:ee:f3:03:d8:d7:01:f9:65:cf:c2:95:cc:74:
45:57:5e:63:be:db:65:c5:e1:80:d3:f5:f7:2e:a9:
8e:a2:36:c6:25:d3:39:df:26:1c:9b:84:53:e0:58:
cb:f5:1c:bf:18:4c:59:4f:6a:63:20:5d:c0:93:2d:
0a:e9:b5:65:69:5a:51:75:b6:66:de:c0:6e:6c:68:
68:08:ff:c9:0b:cf:4b:e6:a3:b6:5f:e5:b1:fe:fd:
ce:f7:29:00:d1:62:60:c4:c6:e8:81:01:31:2b:f8:
3d:91:c0:39:b5:b6:d2:d7:59:fa:38:46:bb:df:1f:
95:d5:39:76:8b:7f:fb:67:a0:fb:79:35:f9:85:53:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7F:88:07:FC:7C:57:93:81:BC:B8:14:CA:7C:BB:6D:A4:3D:EE:A5
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.221.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d7:a4:22:ea:c7:9b:00:f0:df:9e:ee:fc:87:31:77:66:6a:
1b:45:8c:3f:a0:45:25:8d:10:f1:e6:40:e3:c2:71:18:fe:96:
9f:2a:8d:88:67:3c:0b:40:48:a2:54:1c:63:74:1a:ca:03:c3:
4a:1f:65:0e:2f:a8:8b:09:97:87:1e:19:a2:c2:42:d8:d4:74:
07:56:ce:ad:45:23:3e:ac:7b:15:0f:d1:77:ff:0c:06:2c:64:
13:63:82:08:05:58:00:75:c8:c8:3a:cb:37:3d:c5:1f:75:8f:
ae:38:84:83:fe:a9:21:2c:15:13:bc:2a:62:63:40:01:0c:0b:
ed:2a:b4:f2:b5:d7:38:d1:ca:6f:f6:1d:65:97:d7:79:6f:21:
ef:ad:6b:66:ac:16:1f:8d:68:91:ca:86:2d:88:64:f8:c9:a8:
56:93:41:e2:aa:a6:28:b5:74:9a:88:37:7a:22:1a:1c:ea:85:
da:e8:2f:c4:de:0e:a0:61:de:b9:90:78:bc:7d:79:12:eb:65:
0c:12:df:33:a5:39:5e:b2:6d:a3:ad:ad:08:12:f3:bd:c3:bb:
0f:19:93:71:b2:13:a8:dc:b8:78:d2:f0:2c:98:1d:11:89:11:
2a:2f:19:a3:23:ee:46:b0:c2:bb:08:b4:7f:78:67:7d:75:62:
41:3d:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:36 2026 by rpki-client