Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: SbUyByk3AdLffsnCVaJQxdFZNl2DcfKDRPFn+TNMiaY=
Subject key identifier: 2B:2C:59:83:C3:67:0E:31:8D:82:B3:8C:5D:C6:E8:17:4B:55:99:6D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 229018F674CBD9901C4675BD793DFA11615A0126
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
Signing time: Wed 08 Oct 2025 10:47:21 +0000
ROA not before: Wed 08 Oct 2025 10:42:21 +0000
ROA not after: Wed 07 Oct 2026 10:47:21 +0000
asID: 396356
IP address blocks: 82.21.96.0/22 maxlen: 22
82.21.242.0/24 maxlen: 24
82.24.68.0/22 maxlen: 22
82.26.243.0/24 maxlen: 24
82.27.100.0/24 maxlen: 24
82.27.243.0/24 maxlen: 24
2a13:9500:1c::/48 maxlen: 48
2a13:9500:1d::/48 maxlen: 48
2a13:9500:1e::/48 maxlen: 48
2a13:9500:1f::/48 maxlen: 48
2a13:9500:33::/48 maxlen: 48
2a13:9500:82::/48 maxlen: 48
2a13:9500:83::/48 maxlen: 48
2a13:9500:84::/48 maxlen: 48
2a13:9500:85::/48 maxlen: 48
2a13:9500:86::/48 maxlen: 48
2a13:9500:87::/48 maxlen: 48
2a13:9500:88::/48 maxlen: 48
2a13:9500:89::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:90:18:f6:74:cb:d9:90:1c:46:75:bd:79:3d:fa:11:61:5a:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 8 10:42:21 2025 GMT
Not After : Oct 7 10:47:21 2026 GMT
Subject: CN=2B2C5983C3670E318D82B38C5DC6E8174B55996D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:dd:fc:b1:cf:13:cf:9f:df:f1:df:f0:4a:
0f:13:ab:a0:61:9a:08:fa:88:d9:e5:b2:34:6c:34:
4c:f5:ab:35:d3:cc:11:ed:e6:7f:1c:f9:46:43:37:
7b:de:3f:9b:0e:7b:30:4e:48:73:58:42:7e:77:1a:
c6:e9:10:cc:26:c8:33:dd:11:75:b3:ad:db:20:05:
3c:5d:72:5e:3b:35:46:0f:ed:79:f3:99:f5:fa:ff:
3e:11:75:cb:a6:e4:28:d8:fc:2f:0a:4c:fd:3b:33:
5a:88:e9:16:34:a6:99:24:bd:5d:5e:da:db:37:a9:
32:c1:28:7a:7a:00:3f:31:4a:15:15:31:c8:f1:2e:
c3:26:ec:d4:68:ec:c8:69:e7:90:33:a6:33:2a:80:
1f:5b:da:8b:7d:d7:f5:64:6d:80:fb:b2:cc:63:a8:
f7:b2:4f:de:96:96:1e:c2:46:b4:23:fb:fa:fb:ab:
7e:5a:7f:43:30:d0:4d:c7:12:34:e1:ab:55:81:5d:
cc:37:31:99:54:39:0e:e6:2b:b5:62:01:0d:3e:0f:
0f:82:8a:2e:49:a5:7f:db:b0:ee:a7:cb:ea:4a:8d:
ea:d2:e3:0a:7e:6c:c4:dd:3f:74:af:5e:5b:aa:ee:
e6:85:77:41:0a:21:b0:e4:cd:54:c7:e6:68:12:ad:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2C:59:83:C3:67:0E:31:8D:82:B3:8C:5D:C6:E8:17:4B:55:99:6D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.96.0/22
82.21.242.0/24
82.24.68.0/22
82.26.243.0/24
82.27.100.0/24
82.27.243.0/24
IPv6:
2a13:9500:1c::/46
2a13:9500:33::/48
2a13:9500:82::-2a13:9500:89:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:ef:23:c3:07:6e:8f:a0:33:9a:e3:ab:7f:c4:88:df:9a:bc:
70:83:94:6f:d3:70:6c:98:2e:b5:e5:ae:1b:38:0a:81:37:02:
26:05:dd:2d:8c:16:b8:a0:01:f1:87:37:eb:8f:9c:93:ed:66:
1a:26:93:e5:96:3a:a5:35:9d:21:e4:ba:fc:cb:79:73:49:1e:
8e:1c:b2:54:af:03:b4:41:27:76:f9:7b:b7:df:68:72:07:54:
10:a4:ef:44:52:a8:2b:02:e8:eb:01:f5:71:54:9e:3e:17:b7:
fe:54:bd:15:09:74:59:18:29:e8:cc:4c:76:06:44:41:9c:3e:
e2:b8:59:af:30:86:c7:1d:8d:82:4e:8d:07:e5:dc:b0:08:15:
b7:42:53:ac:a9:a8:10:21:35:e1:f4:3b:4f:79:20:52:d9:24:
f0:44:88:9c:0f:e9:8f:7a:d7:0c:67:6c:50:8a:10:00:1f:6e:
70:c1:54:21:bb:b1:cf:c9:b9:5d:cb:ac:1d:c4:28:b3:b5:11:
94:8b:c8:7c:1b:be:42:d3:47:ce:6e:82:57:87:6e:16:47:53:
6a:e1:71:63:26:8d:8f:18:96:da:c5:5c:94:ca:3a:a6:7b:2f:
73:a7:25:61:b0:7c:8b:83:4e:c7:c5:6c:a2:7f:ab:38:76:3c:
3b:fd:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:42:34 2025 by rpki-client