Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1405.roa
File: AS1405.roa (raw, json)
Hash identifier: ogO+UjZ6Jwl4jqYz6WOxI6KlbgzTppml2QDaepqd6IA=
Subject key identifier: 2E:30:7F:84:1E:74:C0:99:90:B3:CA:18:EE:C9:37:AA:CF:48:47:EB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6D7A2E2F033F64B2F1741EBB3C807898D4F2B668
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1405.roa
Signing time: Tue 05 May 2026 05:37:41 +0000
ROA not before: Tue 05 May 2026 05:32:41 +0000
ROA not after: Tue 04 May 2027 05:37:41 +0000
asID: 1405
IP address blocks: 82.39.160.0/24 maxlen: 24
82.39.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7a:2e:2f:03:3f:64:b2:f1:74:1e:bb:3c:80:78:98:d4:f2:b6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 5 05:32:41 2026 GMT
Not After : May 4 05:37:41 2027 GMT
Subject: CN=2E307F841E74C09990B3CA18EEC937AACF4847EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:99:64:33:9f:36:f7:f6:30:9a:0e:26:9f:
60:ae:21:40:b4:ab:82:55:87:dd:0d:1f:82:8a:14:
58:e8:e6:db:21:d8:d3:c4:0d:87:3d:09:e1:c8:a9:
71:55:81:a2:16:23:0b:f1:1e:53:85:ba:e8:55:38:
84:cf:be:ae:a3:00:69:15:5e:83:10:70:1e:2d:c1:
87:5b:d1:21:45:5a:ef:1d:71:00:98:4f:1c:82:ba:
e5:1c:4a:7b:93:bd:ca:76:85:b6:c8:fd:6a:cc:73:
35:a3:43:bb:b4:7f:ad:42:11:6e:c6:e0:1a:ad:c3:
e6:63:b3:34:24:c5:bf:ec:95:2c:f6:bc:c1:1b:f7:
f5:21:03:ce:93:4c:98:e3:a3:70:ea:b2:2d:7b:b4:
f8:06:c4:a3:9d:f0:36:d3:3b:8b:cc:cd:a6:ce:ce:
d2:0e:3e:dd:b8:ac:e3:b4:84:3e:7f:b5:0c:8a:0e:
28:5d:d1:28:2e:c9:3b:97:4f:9b:3b:3b:cb:8f:cc:
6d:5e:d0:40:fd:0f:e8:a0:1f:c0:0a:da:66:ef:03:
b4:20:ea:d5:ad:e0:2e:a0:c2:67:f0:45:13:8e:7e:
ae:d1:5d:12:70:ed:95:7a:d5:9e:cd:38:96:7f:4f:
bf:d8:e6:0f:01:9c:5e:54:8c:4c:0c:97:6b:94:55:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:7F:84:1E:74:C0:99:90:B3:CA:18:EE:C9:37:AA:CF:48:47:EB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS1405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.160.0/24
82.39.185.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0f:79:32:25:34:83:f9:3f:56:7b:4d:67:32:09:18:7b:60:
29:17:6e:4d:56:91:50:8f:d7:8d:80:c2:58:41:f8:63:d5:b7:
22:a5:8b:34:f6:ae:fe:99:51:35:c4:d8:d6:3e:73:e3:95:a7:
ff:c9:3d:4c:50:24:a9:f7:05:b4:96:6f:99:88:58:82:d3:30:
dc:c7:fb:e6:c2:69:9a:8d:7f:a6:05:8b:7e:77:6a:59:7f:bd:
ca:5f:09:e0:33:ba:03:31:4d:54:7c:b7:38:bc:bc:e6:ee:6f:
4b:9d:6c:19:6e:28:eb:a7:3c:1c:a9:43:51:ce:89:64:f6:14:
1d:65:43:f5:7c:e3:f3:b2:d1:41:82:c7:d2:ce:bc:0a:8a:d1:
4d:ee:4d:ce:bf:0c:81:4d:40:4b:7e:47:28:cb:ac:6d:81:43:
ed:5c:f8:d3:5b:b4:34:38:67:fe:d6:e5:56:0b:c0:c3:db:29:
ec:57:54:7b:4e:27:0a:44:c6:f6:39:1c:37:88:9c:c4:88:f9:
69:f4:9c:97:17:ff:9b:33:12:92:aa:8f:13:f9:cb:a2:53:1d:
9b:c5:a8:00:32:fd:a0:b1:67:9d:ff:18:7f:79:a4:7c:db:36:
6f:2e:16:c5:a5:ac:13:f7:b6:b9:8f:4f:e3:8c:af:d8:fc:97:
bb:23:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:19 2026 by rpki-client