Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: riA7QlA+8Ph+VK6ukKX9z8Ijdk/8MUw1MiiZwcftDN0=
Subject key identifier: 56:AF:66:F8:BD:C1:39:1E:27:3D:8D:2E:4C:93:AF:1B:11:52:F3:06
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 437DD8B660F30F58D7DB5C2F6D0F5C409D2DBD09
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397423.roa
Signing time: Tue 10 Nov 2026 19:58:41 +0000
ROA not before: Tue 10 Nov 2026 19:53:41 +0000
ROA not after: Tue 09 Nov 2027 19:58:41 +0000
asID: 397423
IP address blocks: 82.22.204.0/24 maxlen: 24
82.23.188.0/24 maxlen: 24
82.24.82.0/24 maxlen: 24
82.24.200.0/24 maxlen: 24
82.25.23.0/24 maxlen: 24
82.25.28.0/24 maxlen: 24
82.25.29.0/24 maxlen: 24
82.26.200.0/24 maxlen: 24
82.41.60.0/22 maxlen: 24
82.41.76.0/22 maxlen: 24
82.41.84.0/22 maxlen: 24
82.41.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:7d:d8:b6:60:f3:0f:58:d7:db:5c:2f:6d:0f:5c:40:9d:2d:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 10 19:53:41 2026 GMT
Not After : Nov 9 19:58:41 2027 GMT
Subject: CN=56AF66F8BDC1391E273D8D2E4C93AF1B1152F306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:3c:9e:f7:c2:2f:4b:e5:0c:df:13:f3:f2:
6b:31:9b:bb:f3:80:a2:aa:68:d7:2a:0c:9f:f3:08:
68:a6:33:64:b0:b3:67:9f:19:a7:02:9a:3e:e3:70:
4d:34:98:11:b4:24:6e:01:c1:df:72:27:61:49:ba:
e0:84:8c:54:1a:50:ca:90:61:c9:7f:b1:4f:b5:68:
b1:77:99:b5:07:a7:11:31:6b:cf:e9:7e:38:c8:02:
d7:30:93:5c:c7:eb:2c:bb:70:eb:05:60:8d:44:35:
97:43:8b:01:eb:fa:e5:0e:40:f4:6f:4d:7d:e4:58:
b0:c5:22:e7:a0:02:ed:61:a1:f7:98:53:99:b5:d8:
fc:3e:30:cd:da:83:d6:85:39:46:e0:14:43:08:2c:
40:97:4a:4c:81:1b:c0:c5:4e:75:de:e9:38:16:1d:
67:91:f1:c1:02:77:72:e9:5e:90:42:2b:9e:64:f1:
1c:78:11:47:f5:67:29:d6:e0:9e:28:82:3a:86:ca:
a7:d8:a3:71:f0:a6:31:2a:90:eb:6e:2b:e8:97:9c:
b8:39:5d:43:9e:c0:1e:05:da:b8:97:ba:d2:5f:af:
71:a8:f8:ea:07:4d:5c:eb:0a:03:04:e0:43:c9:e5:
d5:a3:aa:fc:33:f1:1d:1b:ac:f3:f3:29:4f:ab:73:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:66:F8:BD:C1:39:1E:27:3D:8D:2E:4C:93:AF:1B:11:52:F3:06
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.204.0/24
82.23.188.0/24
82.24.82.0/24
82.24.200.0/24
82.25.23.0/24
82.25.28.0/23
82.26.200.0/24
82.41.60.0/22
82.41.76.0/22
82.41.84.0/22
82.41.92.0/22
Signature Algorithm: sha256WithRSAEncryption
02:85:8a:33:ae:56:0b:0f:a5:d4:4e:6d:7d:44:8b:9c:de:94:
a4:51:5b:89:e1:91:71:be:5d:df:8e:2c:c7:03:6d:d1:61:5d:
b5:95:ee:bb:e8:2c:2f:89:60:f2:e6:5f:a2:8d:7e:55:ab:81:
61:6b:2b:b6:ff:ba:d5:57:d5:98:3e:9c:63:ad:15:3d:72:77:
60:ce:e2:cf:f8:a4:8f:09:44:0b:53:47:23:0d:3d:8d:b2:1d:
01:89:a1:2b:5d:28:8c:d5:da:50:76:37:c2:09:9e:50:16:4f:
fd:a4:8e:0b:d6:5b:a8:94:93:1d:37:d2:e2:d6:2c:ae:48:ed:
b7:49:4f:0c:64:eb:fb:b2:e6:7c:e5:fe:7c:55:57:20:cb:6f:
56:7b:25:3c:5a:a5:e4:19:ba:ff:bc:d8:78:cd:14:a4:e4:d9:
d6:90:f7:96:b8:8b:11:a0:c9:f9:3b:58:eb:ec:fd:35:86:9d:
5f:33:a2:bf:7e:54:a3:10:45:4d:aa:06:bc:36:c4:65:2d:0c:
9b:20:a3:01:97:ae:88:76:87:2c:1b:8b:a1:0f:db:26:2f:c6:
db:e9:00:b1:91:a9:95:bf:b0:67:b5:19:cd:e2:05:b1:d1:1e:
27:df:2a:b5:5e:74:cc:09:ef:87:0f:15:f4:ea:8b:63:9e:a5:
ea:3d:72:44
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUQ33YtmDzD1jX21wvbQ9cQJ0tvQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMTAxOTUzNDFaFw0yNzExMDkxOTU4NDFaMDMxMTAvBgNV
BAMTKDU2QUY2NkY4QkRDMTM5MUUyNzNEOEQyRTRDOTNBRjFCMTE1MkYzMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aTye98IvS+UM3xPz8msxm7vz
gKKqaNcqDJ/zCGimM2Sws2efGacCmj7jcE00mBG0JG4Bwd9yJ2FJuuCEjFQaUMqQ
Ycl/sU+1aLF3mbUHpxExa8/pfjjIAtcwk1zH6yy7cOsFYI1ENZdDiwHr+uUOQPRv
TX3kWLDFIuegAu1hofeYU5m12Pw+MM3ag9aFOUbgFEMILECXSkyBG8DFTnXe6TgW
HWeR8cECd3LpXpBCK55k8Rx4EUf1ZynW4J4ogjqGyqfYo3HwpjEqkOtuK+iXnLg5
XUOewB4F2riXutJfr3Go+OoHTVzrCgME4EPJ5dWjqvwz8R0brPPzKU+rc2/jAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUVq9m+L3BOR4nPY0uTJOvGxFS8wYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk3NDIzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAUhbM
AwQAUhe8AwQAUhhSAwQAUhjIAwQAUhkXAwQBUhkcAwQAUhrIAwQCUik8AwQCUilM
AwQCUilUAwQCUilcMA0GCSqGSIb3DQEBCwUAA4IBAQAChYozrlYLD6XUTm19RIuc
3pSkUVuJ4ZFxvl3fjizHA23RYV21le676CwviWDy5l+ijX5Vq4Fhayu2/7rVV9WY
PpxjrRU9cndgzuLP+KSPCUQLU0cjDT2Nsh0BiaErXSiM1dpQdjfCCZ5QFk/9pI4L
1luolJMdN9Li1iyuSO23SU8MZOv7suZ85f58VVcgy29WeyU8WqXkGbr/vNh4zRSk
5NnWkPeWuIsRoMn5O1jr7P01hp1fM6K/flSjEEVNqga8NsRlLQybIKMBl66Idocs
G4uhD9smL8bb6QCxkamVv7BntRnN4gWx0R4n3yq1XnTMCe+HDxX06otjnqXqPXJE
-----END CERTIFICATE-----
Generated at Thu Nov 12 18:57:22 2026 by rpki-client