Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: BPajKIVdxiVcsia1owRNIs+QT6DKvZB1W0fXkH1V0go=
Subject key identifier: 07:98:C7:C2:22:2C:1E:29:CF:8E:EE:52:9F:04:D9:F8:61:4C:E5:8F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5C6F20F5355638E8BA178A4EF545DF1BE5CC5CB6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396982.roa
Signing time: Mon 19 Oct 2026 11:39:55 +0000
ROA not before: Mon 19 Oct 2026 11:34:55 +0000
ROA not after: Mon 18 Oct 2027 11:39:55 +0000
asID: 396982
IP address blocks: 82.39.118.0/24 maxlen: 24
2a13:9500:13c::/48 maxlen: 48
2a13:9500:152::/48 maxlen: 48
2a13:9500:1f5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6f:20:f5:35:56:38:e8:ba:17:8a:4e:f5:45:df:1b:e5:cc:5c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 19 11:34:55 2026 GMT
Not After : Oct 18 11:39:55 2027 GMT
Subject: CN=0798C7C2222C1E29CF8EEE529F04D9F8614CE58F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:ba:9e:59:ae:07:c2:0c:e9:e4:38:42:ef:
b0:ef:0c:3d:7e:36:5e:69:f4:27:68:b8:cf:be:3b:
5f:4f:aa:47:09:1e:84:b5:cf:20:bd:62:21:35:cf:
10:3e:7c:c6:fa:96:ca:85:60:2a:8e:74:e9:87:5a:
c4:56:a8:51:d4:a3:e2:78:ce:7d:38:22:71:a2:f4:
26:7e:bb:35:42:cb:46:70:1c:6f:7d:75:27:e3:7d:
34:13:36:d4:60:1a:3e:89:a0:fa:d4:56:cc:24:00:
96:51:4a:fe:01:0f:e3:07:d2:37:c6:14:71:66:1c:
60:ed:a6:c3:31:be:9e:3b:85:98:0f:a0:68:3e:1c:
6d:86:2b:15:c0:f8:4d:48:87:ed:e1:c9:98:5d:a9:
cb:af:32:e6:2e:73:eb:af:07:77:ff:a2:1d:ea:a6:
9a:88:96:15:3b:7e:73:c9:8a:3e:b1:b3:d0:53:da:
ec:a0:d0:ce:a6:c4:f2:cf:e3:af:e5:0c:d5:56:5e:
e0:f7:f8:68:b0:da:1b:fa:27:f6:58:d0:fc:32:4a:
17:54:7d:4c:9b:5f:9b:94:c7:44:3c:60:62:df:29:
e7:5b:a7:98:6e:e4:c9:5d:31:4c:d5:18:f3:bf:98:
b4:14:1c:76:53:b3:af:04:49:7b:e4:58:cf:00:4c:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:C7:C2:22:2C:1E:29:CF:8E:EE:52:9F:04:D9:F8:61:4C:E5:8F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.118.0/24
IPv6:
2a13:9500:13c::/48
2a13:9500:152::/48
2a13:9500:1f5::/48
Signature Algorithm: sha256WithRSAEncryption
8e:21:62:f0:d0:8b:d4:33:ee:bd:ca:48:2d:75:b5:3e:9f:ff:
f0:58:86:93:07:37:34:72:f7:e8:31:2d:75:35:d0:ec:e8:40:
bf:0b:87:c6:a7:cb:72:d3:4f:80:79:87:35:b0:35:c0:c4:5a:
a5:cb:f6:60:77:d9:7a:35:3d:f7:c7:29:73:f5:20:31:fb:75:
3d:19:37:fe:2f:45:e4:23:3f:43:be:45:ef:85:19:2e:6c:50:
1f:f0:c7:1b:84:7e:7a:0c:aa:d9:7e:30:dc:78:2e:0f:52:37:
6d:e6:04:db:16:91:bb:51:17:9e:5c:da:cc:1c:42:31:a7:9a:
e7:22:60:0f:8d:7b:bc:54:40:31:a0:2e:c4:90:7a:a8:36:9f:
e9:13:25:c7:df:45:e8:7e:8b:00:21:6e:ef:76:a8:2b:11:b8:
b4:b7:5d:55:d3:9b:4c:6d:05:1c:c1:3d:bf:af:d9:86:08:f4:
b7:2a:ac:b6:3b:31:aa:52:3a:2e:d0:4b:40:88:d6:7a:02:fe:
33:a4:4e:91:77:c1:b5:80:ff:08:41:42:21:b1:3b:c4:72:ae:
95:57:e6:1c:a5:61:1b:9a:9a:16:cf:f0:dd:f8:72:af:31:9e:
80:29:50:07:3a:ed:22:6a:29:a1:4f:83:34:9d:38:c2:b7:60:
6c:42:10:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 15:45:08 2026 by rpki-client