Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395470.roa
File: AS395470.roa (raw, json)
Hash identifier: JI0HWLdxFk8n/vTvVkvc+N2olFt1/v7J7OSr+yTWtnM=
Subject key identifier: 0B:FA:B4:CD:D7:AB:14:6B:99:81:F8:F8:50:A2:9D:7D:AD:F5:CA:A5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6A5F8947FC59D80D371EB176E79FDEB12A294865
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395470.roa
Signing time: Tue 21 Apr 2026 09:31:54 +0000
ROA not before: Tue 21 Apr 2026 09:26:54 +0000
ROA not after: Tue 20 Apr 2027 09:31:54 +0000
asID: 395470
IP address blocks: 82.22.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:5f:89:47:fc:59:d8:0d:37:1e:b1:76:e7:9f:de:b1:2a:29:48:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 21 09:26:54 2026 GMT
Not After : Apr 20 09:31:54 2027 GMT
Subject: CN=0BFAB4CDD7AB146B9981F8F850A29D7DADF5CAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:36:9d:21:d4:64:52:62:6a:a5:be:fe:f4:
77:41:f4:e5:ae:20:c5:2c:75:b3:bf:fa:88:96:fb:
89:5b:db:04:f1:61:5e:63:cc:35:16:d6:f1:f3:d3:
73:ae:c7:84:77:77:4a:5b:ba:00:f0:78:5a:75:0d:
71:e6:34:07:07:4e:54:a4:bc:a0:a4:00:1b:fc:b1:
04:8e:f9:ff:81:06:83:b0:c3:0e:95:60:a7:fd:77:
ef:4f:53:a5:88:12:ba:64:74:23:e0:22:c7:98:52:
57:7b:79:c1:24:c3:e9:24:71:7c:64:b3:bf:b0:ce:
28:dc:99:91:ab:3a:4f:ee:61:f0:15:40:e3:2a:d4:
e2:1a:41:6d:a6:65:15:fe:c0:dc:95:9b:bc:44:1b:
9a:64:95:2c:3b:dc:98:31:f6:2a:b6:cd:30:52:8e:
13:ee:ab:ed:9a:c4:2d:85:a7:cb:07:9a:ca:ed:59:
fd:41:e6:66:76:b1:a4:9e:77:d4:81:6a:aa:53:27:
40:58:c3:00:b8:5a:ab:5f:2c:9d:08:1b:e8:12:7a:
92:5a:30:cf:a4:8f:d6:12:ce:21:1c:9c:5b:a3:f5:
0c:87:f3:b1:65:ed:40:08:f4:04:23:95:db:6e:4a:
ed:72:00:c4:3d:20:11:6d:d9:d4:67:a8:0e:92:56:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FA:B4:CD:D7:AB:14:6B:99:81:F8:F8:50:A2:9D:7D:AD:F5:CA:A5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.126.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4e:c0:b9:f0:4f:f3:d8:df:a1:1c:69:12:dd:c3:1a:ca:0b:
56:48:d7:62:f7:5a:46:3f:5c:31:f0:6f:d5:80:f4:b7:74:2a:
a4:76:dd:4d:b1:06:77:04:6b:95:0d:4f:82:70:75:ff:ba:8d:
b6:bf:70:17:8d:50:79:a0:36:08:97:58:ed:a3:e0:c2:45:bf:
a5:3f:3a:1c:85:29:f8:10:48:8e:76:22:ce:26:33:ab:7c:98:
c4:e5:71:ed:db:63:10:49:a1:4b:79:2d:a5:25:c1:f9:0e:7d:
25:f4:9c:4d:5a:c4:48:4e:e3:81:95:77:7d:f1:72:db:47:59:
79:b0:f9:a7:79:35:2f:a6:40:0d:dd:1f:b1:1e:cf:ad:60:61:
5f:e5:30:4a:df:9a:b6:69:00:2a:d7:64:fd:2f:aa:b8:ab:c6:
a3:ce:8c:ef:3e:f4:6d:6d:0b:0a:0d:db:7d:a4:a9:e2:1f:53:
3d:21:16:d9:ef:bc:8a:32:13:6d:16:96:a9:05:cd:5f:70:be:
da:03:8f:17:03:8e:8f:9a:f9:2c:af:9e:47:b2:19:2f:f5:64:
77:be:88:d4:8f:ba:0b:9e:ff:54:65:ca:a5:f9:02:00:22:da:
cd:21:86:7d:4a:af:59:6f:0e:23:cd:2b:03:20:63:d5:40:de:
f9:2a:98:df
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUal+JR/xZ2A03HrF255/esSopSGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MjEwOTI2NTRaFw0yNzA0MjAwOTMxNTRaMDMxMTAvBgNV
BAMTKDBCRkFCNENERDdBQjE0NkI5OTgxRjhGODUwQTI5RDdEQURGNUNBQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FTadIdRkUmJqpb7+9HdB9OWu
IMUsdbO/+oiW+4lb2wTxYV5jzDUW1vHz03Oux4R3d0pbugDweFp1DXHmNAcHTlSk
vKCkABv8sQSO+f+BBoOwww6VYKf9d+9PU6WIErpkdCPgIseYUld7ecEkw+kkcXxk
s7+wzijcmZGrOk/uYfAVQOMq1OIaQW2mZRX+wNyVm7xEG5pklSw73Jgx9iq2zTBS
jhPuq+2axC2Fp8sHmsrtWf1B5mZ2saSed9SBaqpTJ0BYwwC4WqtfLJ0IG+gSepJa
MM+kj9YSziEcnFuj9QyH87Fl7UAI9AQjldtuSu1yAMQ9IBFt2dRnqA6SVqvHAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUC/q0zderFGuZgfj4UKKdfa31yqUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk1NDcwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhZ+
MA0GCSqGSIb3DQEBCwUAA4IBAQBrTsC58E/z2N+hHGkS3cMaygtWSNdi91pGP1wx
8G/VgPS3dCqkdt1NsQZ3BGuVDU+CcHX/uo22v3AXjVB5oDYIl1jto+DCRb+lPzoc
hSn4EEiOdiLOJjOrfJjE5XHt22MQSaFLeS2lJcH5Dn0l9JxNWsRITuOBlXd98XLb
R1l5sPmneTUvpkAN3R+xHs+tYGFf5TBK35q2aQAq12T9L6q4q8ajzozvPvRtbQsK
Ddt9pKniH1M9IRbZ77yKMhNtFpapBc1fcL7aA48XA46Pmvksr55Hshkv9WR3vojU
j7oLnv9UZcql+QIAItrNIYZ9Sq9Zbw4jzSsDIGPVQN75Kpjf
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:52 2026 by rpki-client