Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: oTL97FFeBl/+6wguYgwevN+MetVZgETrA7N+zXxvkaY=
Subject key identifier: D6:1F:33:C2:E9:66:64:41:FD:F4:01:85:58:31:21:7C:13:BA:97:85
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 572075DBA11D593645F7201CE3CE8D756DA70F55
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
Signing time: Fri 08 May 2026 11:56:44 +0000
ROA not before: Fri 08 May 2026 11:51:44 +0000
ROA not after: Fri 07 May 2027 11:56:44 +0000
asID: 396356
IP address blocks: 82.21.96.0/22 maxlen: 22
82.21.242.0/24 maxlen: 24
82.24.68.0/22 maxlen: 22
82.24.144.0/24 maxlen: 24
82.26.243.0/24 maxlen: 24
82.27.100.0/24 maxlen: 24
82.27.243.0/24 maxlen: 24
82.39.64.0/23 maxlen: 23
82.39.81.0/24 maxlen: 24
82.47.244.0/22 maxlen: 22
84.75.140.0/22 maxlen: 22
84.75.168.0/22 maxlen: 22
84.75.176.0/22 maxlen: 22
84.75.184.0/22 maxlen: 22
84.75.188.0/22 maxlen: 22
2a13:9500:1c::/48 maxlen: 48
2a13:9500:1d::/48 maxlen: 48
2a13:9500:1e::/48 maxlen: 48
2a13:9500:1f::/48 maxlen: 48
2a13:9500:33::/48 maxlen: 48
2a13:9500:5b::/48 maxlen: 48
2a13:9500:5c::/48 maxlen: 48
2a13:9500:5d::/48 maxlen: 48
2a13:9500:5e::/48 maxlen: 48
2a13:9500:5f::/48 maxlen: 48
2a13:9500:82::/48 maxlen: 48
2a13:9500:83::/48 maxlen: 48
2a13:9500:84::/48 maxlen: 48
2a13:9500:85::/48 maxlen: 48
2a13:9500:86::/48 maxlen: 48
2a13:9500:87::/48 maxlen: 48
2a13:9500:88::/48 maxlen: 48
2a13:9500:89::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:20:75:db:a1:1d:59:36:45:f7:20:1c:e3:ce:8d:75:6d:a7:0f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 11:51:44 2026 GMT
Not After : May 7 11:56:44 2027 GMT
Subject: CN=D61F33C2E9666441FDF401855831217C13BA9785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:f0:8c:33:de:af:d0:e2:cf:1e:93:18:c2:
17:3b:94:9c:24:58:8d:85:4c:eb:b4:30:b7:29:84:
d9:a5:4e:de:86:59:f3:33:ad:c3:79:15:84:ac:e3:
34:67:8a:16:14:0e:60:7c:6f:48:9b:3b:f2:d2:39:
d4:60:e5:95:51:8a:99:43:f7:f4:96:e1:69:9f:b0:
5d:ec:1a:b8:c7:91:89:39:b0:70:d8:29:1c:fd:2b:
29:e4:05:6a:b7:4d:f6:5f:77:8b:c1:3f:23:a4:2a:
fd:6b:4b:91:38:b9:fe:78:e7:cd:5d:09:67:ea:ed:
b6:cb:a2:16:39:6b:7d:20:b7:a9:a6:a2:8b:b9:75:
02:3d:ed:71:4c:65:5f:fe:ac:73:47:17:46:da:ed:
f5:d1:4f:d8:57:de:cc:e3:63:f4:81:28:ff:c2:13:
86:42:31:1b:56:26:07:29:48:f7:cc:7b:90:c3:c1:
67:a3:9d:dc:a2:52:22:d9:6d:e8:03:08:1f:cf:52:
91:26:a6:ae:3e:fd:3b:a5:61:63:ed:55:e6:0b:f2:
c5:0c:64:95:4f:f7:6b:bc:c8:2b:e2:3a:89:2b:ff:
f4:85:69:9a:4d:1d:bb:d4:74:6b:a8:dc:87:b0:2d:
92:e1:1a:58:ac:ca:d1:fc:c7:2b:7e:96:de:29:bb:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1F:33:C2:E9:66:64:41:FD:F4:01:85:58:31:21:7C:13:BA:97:85
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.96.0/22
82.21.242.0/24
82.24.68.0/22
82.24.144.0/24
82.26.243.0/24
82.27.100.0/24
82.27.243.0/24
82.39.64.0/23
82.39.81.0/24
82.47.244.0/22
84.75.140.0/22
84.75.168.0/22
84.75.176.0/22
84.75.184.0/21
IPv6:
2a13:9500:1c::/46
2a13:9500:33::/48
2a13:9500:5b::-2a13:9500:5f:ffff:ffff:ffff:ffff:ffff
2a13:9500:82::-2a13:9500:89:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:4f:91:31:76:6c:e2:eb:a1:a0:dc:4f:20:54:0b:94:b5:dd:
db:c1:99:ac:e9:e3:33:aa:fe:e5:74:88:29:41:2f:32:52:8d:
a0:69:3b:73:5d:16:32:f5:23:97:fb:29:e8:5e:44:0e:5c:71:
d7:20:05:1b:71:4c:8e:b1:83:58:51:65:73:dc:df:73:d7:62:
8f:3b:00:58:34:78:91:82:dc:81:d3:67:ba:be:94:3b:32:10:
45:89:80:20:b5:ca:b8:46:be:cb:2f:67:5f:92:c5:b7:93:cb:
b7:6c:f7:89:e2:58:8c:f9:0f:7a:16:bd:4f:71:f4:d7:41:29:
fd:33:af:e4:a1:21:8d:b1:c9:61:54:39:71:f2:b1:d2:84:bb:
05:eb:3b:19:1e:8e:1e:b1:9b:8a:80:a8:a9:19:00:b7:3b:ce:
0d:25:b6:db:d9:a7:0f:09:ce:64:55:9a:a6:ec:27:55:ec:39:
85:35:bf:36:52:01:53:f5:6e:99:d4:3b:df:6d:b0:46:91:9f:
61:6e:b9:70:dd:13:76:15:1d:60:fc:34:e8:40:23:2e:42:ec:
e0:5a:fa:70:99:f8:bb:86:e1:2b:cc:ce:b9:b6:18:b1:83:a2:
78:2d:17:16:f0:bc:7f:c1:50:86:39:1c:fb:d0:e8:db:5a:15:
a3:3f:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:16:18 2026 by rpki-client