Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1299.roa
File: AS1299.roa (raw, json)
Hash identifier: UullEmoOWCS8Xfzw8iAsM/V9ATNT0QYjnZ8gDLpxSLM=
Subject key identifier: 23:E0:8F:E2:40:6B:F2:28:50:A9:F0:25:4A:D1:42:42:91:48:D2:F2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 474F5F265522718D5DC0738E16C989928E006D55
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1299.roa
Signing time: Mon 27 Apr 2026 14:10:45 +0000
ROA not before: Mon 27 Apr 2026 14:05:45 +0000
ROA not after: Mon 26 Apr 2027 14:10:45 +0000
asID: 1299
IP address blocks: 82.24.105.0/24 maxlen: 24
82.27.94.0/24 maxlen: 24
82.41.72.0/24 maxlen: 24
82.41.98.0/24 maxlen: 24
82.41.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4f:5f:26:55:22:71:8d:5d:c0:73:8e:16:c9:89:92:8e:00:6d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 27 14:05:45 2026 GMT
Not After : Apr 26 14:10:45 2027 GMT
Subject: CN=23E08FE2406BF22850A9F0254AD142429148D2F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:29:ca:7f:2c:9b:f6:5f:d4:2d:c0:af:cc:
9d:0a:c4:2a:1c:b9:04:25:41:f6:00:dc:f3:74:c1:
eb:17:c5:24:06:7f:b0:63:49:d7:a5:ed:62:df:23:
81:f7:f4:41:a7:e1:96:57:97:63:da:2c:71:71:0e:
dc:94:d2:d1:9c:c7:29:e7:e5:ce:12:69:e3:3d:0e:
4c:e8:98:29:35:06:39:23:0e:6a:16:c6:8b:7a:e2:
52:78:df:d0:fb:ba:53:94:1d:c0:61:fd:5f:35:24:
18:ab:d9:c3:65:a3:69:82:f6:14:f9:b1:54:6b:8c:
cd:f3:e1:4c:10:2c:58:b2:88:8a:e4:87:67:ee:1f:
4d:40:6f:d7:61:4a:17:72:05:35:dd:bd:78:0f:81:
f4:69:2a:e0:a5:c6:2d:04:7c:c9:94:7a:46:4d:0f:
6b:a1:34:a2:ef:80:2c:11:0d:d9:c8:8f:eb:0c:e0:
f0:65:de:a0:be:e3:92:33:12:f4:f8:55:73:a0:2a:
f3:54:77:39:92:89:12:2b:a5:03:46:52:65:53:6c:
2e:63:f7:80:30:91:da:ee:91:ea:4a:ed:0c:3a:ce:
5b:a2:ac:db:6b:ca:86:fc:14:7f:cd:d9:0d:7b:e0:
81:d8:4f:1e:08:50:fc:25:84:76:23:d8:01:d8:86:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:8F:E2:40:6B:F2:28:50:A9:F0:25:4A:D1:42:42:91:48:D2:F2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.105.0/24
82.27.94.0/24
82.41.72.0/24
82.41.98.0/24
82.41.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fa:3a:3d:db:f9:6d:4b:b2:c2:37:0f:b8:7a:ff:09:1f:47:
be:22:bc:fa:e3:4f:0e:8f:33:28:1a:4a:6c:ef:f7:32:cf:78:
6c:76:3c:7b:ab:dc:f2:89:45:e4:84:b4:86:8b:3a:38:87:2b:
51:26:70:05:47:b3:0f:6b:67:f3:e0:e6:8b:f8:93:0c:b3:77:
25:78:f9:ee:ed:f7:05:90:96:d5:e6:78:01:13:53:20:9a:52:
5e:01:28:c8:c2:2d:26:8f:4a:ca:24:07:fa:83:0d:5d:d3:10:
76:0b:8f:e9:2d:be:85:e7:09:b9:6b:2a:b9:5f:29:ee:fb:70:
54:5e:f2:d9:84:1b:f2:65:18:d9:f1:d4:1b:c2:68:35:06:06:
7c:f8:8a:b5:f7:71:0f:74:b3:73:6b:3d:88:c1:9b:c7:0f:6e:
ae:b6:f3:dd:d2:ce:bc:04:be:ac:59:00:6d:96:ee:d3:b6:d2:
9c:7d:72:7a:e3:2d:46:78:19:db:27:d0:ef:ac:9b:f2:8a:38:
9d:39:a1:ac:20:1b:fd:6b:9f:f5:26:9a:29:47:21:e9:a9:16:
e6:62:06:0d:5f:d7:a8:b7:40:33:49:fa:64:54:a6:57:01:a1:
b7:7e:24:d5:36:e1:3f:e2:69:50:d7:78:b3:ab:85:ad:e5:d7:
2c:17:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:51 2026 by rpki-client