Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: Fv7VeoHS7iEPEyBARUK5OAm9XdGNt+k1DJ0o2WefUI4=
Subject key identifier: A5:CA:19:4E:3C:94:DF:51:A3:A5:44:4E:5B:B8:EF:C3:4C:07:47:4C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 66E30D5BDC9824078B680A41F9F723415F6FAA5C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397423.roa
Signing time: Tue 28 Apr 2026 00:03:52 +0000
ROA not before: Mon 27 Apr 2026 23:58:52 +0000
ROA not after: Tue 27 Apr 2027 00:03:52 +0000
asID: 397423
IP address blocks: 82.22.204.0/24 maxlen: 24
82.24.82.0/24 maxlen: 24
82.24.200.0/24 maxlen: 24
82.25.23.0/24 maxlen: 24
82.25.28.0/24 maxlen: 24
82.25.29.0/24 maxlen: 24
82.25.30.0/24 maxlen: 24
82.26.200.0/24 maxlen: 24
82.41.60.0/22 maxlen: 24
82.41.76.0/22 maxlen: 24
82.41.84.0/22 maxlen: 24
82.41.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e3:0d:5b:dc:98:24:07:8b:68:0a:41:f9:f7:23:41:5f:6f:aa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 27 23:58:52 2026 GMT
Not After : Apr 27 00:03:52 2027 GMT
Subject: CN=A5CA194E3C94DF51A3A5444E5BB8EFC34C07474C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:08:c4:63:ee:cf:a7:41:56:ce:78:40:88:
bb:c3:45:29:51:68:46:28:f2:b5:2b:16:30:88:20:
0c:10:04:f9:2d:12:86:a7:e2:a5:2a:10:50:c4:6b:
4b:47:d5:1d:80:ff:75:4f:35:40:32:99:b9:97:06:
57:05:7f:e6:0f:39:ef:e2:2e:bd:56:4f:a2:ef:08:
64:3d:34:07:7d:d2:30:3a:f5:19:44:fa:72:2f:c2:
db:1e:d6:86:f7:06:c4:e5:25:40:d9:a5:4e:47:cf:
cd:ad:1c:29:82:41:ab:4c:24:0f:99:1b:ce:54:05:
3c:e8:bf:7a:be:02:9b:89:5a:ab:08:1f:06:1d:c3:
3e:8d:cb:7f:e2:45:ca:67:e5:97:b1:5f:59:16:0a:
b2:e7:52:8f:14:61:8c:15:57:b9:17:0d:c2:5c:bc:
a5:51:99:d4:d8:aa:80:fc:ab:fb:8f:23:c9:4f:41:
7d:54:df:80:4c:92:7a:a4:ad:26:17:47:69:95:d8:
59:4a:59:1d:5e:44:60:0a:ee:3d:a7:70:3a:e4:20:
7c:3c:40:6b:6a:5c:cc:fe:67:c2:10:ff:63:2e:f1:
a4:b2:41:ee:1a:f3:6f:78:b6:a0:98:77:1d:0e:c0:
4b:49:21:7e:a3:f4:c0:e2:2b:ce:26:58:53:f3:a3:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:19:4E:3C:94:DF:51:A3:A5:44:4E:5B:B8:EF:C3:4C:07:47:4C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.204.0/24
82.24.82.0/24
82.24.200.0/24
82.25.23.0/24
82.25.28.0-82.25.30.255
82.26.200.0/24
82.41.60.0/22
82.41.76.0/22
82.41.84.0/22
82.41.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:c9:f7:f5:f7:32:7c:56:5f:f4:9e:f5:5f:60:6f:b7:60:cc:
ea:7e:11:77:06:ed:af:ae:bc:23:db:d9:5f:30:1b:70:d9:16:
b1:42:09:1e:ce:0b:3e:b1:a1:69:c8:90:bf:01:93:69:a8:1f:
91:08:83:fc:72:03:eb:64:78:59:56:55:c0:f7:18:9e:84:ee:
dd:4b:de:d3:1b:cc:ef:a3:4c:91:41:3d:e0:54:f2:9f:de:c4:
ea:db:19:b3:23:95:0f:cc:7a:dc:3d:42:15:ae:33:e6:6b:b4:
78:56:8a:d3:01:6b:7a:ec:34:4b:80:e8:b5:e0:16:31:f8:3a:
16:d3:0f:4c:9e:64:51:47:00:55:0e:f7:a8:73:df:b9:62:11:
94:76:09:eb:4e:f7:e3:76:4c:e5:d7:a5:a2:75:f8:12:c9:81:
68:36:c0:21:6b:14:5a:98:ba:be:ec:eb:e4:05:e9:61:cf:a8:
0d:8f:18:39:3a:ff:79:32:52:d5:db:a9:77:91:d6:c0:28:2f:
d3:e2:96:a4:a0:aa:89:f9:f5:76:01:23:37:cf:54:dd:6c:aa:
10:a5:5d:55:b4:91:b0:64:61:1e:93:cc:e7:cc:2e:ac:ac:4a:
9c:c1:65:24:9c:84:e1:45:dc:b6:54:82:99:99:3a:e9:4f:1b:
49:86:75:d6
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUZuMNW9yYJAeLaApB+fcjQV9vqlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MjcyMzU4NTJaFw0yNzA0MjcwMDAzNTJaMDMxMTAvBgNV
BAMTKEE1Q0ExOTRFM0M5NERGNTFBM0E1NDQ0RTVCQjhFRkMzNEMwNzQ3NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06gjEY+7Pp0FWznhAiLvDRSlR
aEYo8rUrFjCIIAwQBPktEoan4qUqEFDEa0tH1R2A/3VPNUAymbmXBlcFf+YPOe/i
Lr1WT6LvCGQ9NAd90jA69RlE+nIvwtse1ob3BsTlJUDZpU5Hz82tHCmCQatMJA+Z
G85UBTzov3q+ApuJWqsIHwYdwz6Ny3/iRcpn5ZexX1kWCrLnUo8UYYwVV7kXDcJc
vKVRmdTYqoD8q/uPI8lPQX1U34BMknqkrSYXR2mV2FlKWR1eRGAK7j2ncDrkIHw8
QGtqXMz+Z8IQ/2Mu8aSyQe4a8294tqCYdx0OwEtJIX6j9MDiK84mWFPzoywBAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUpcoZTjyU31GjpUROW7jvw0wHR0wwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk3NDIzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAUhbM
AwQAUhhSAwQAUhjIAwQAUhkXMAwDBAJSGRwDBABSGR4DBABSGsgDBAJSKTwDBAJS
KUwDBAJSKVQDBAJSKVwwDQYJKoZIhvcNAQELBQADggEBAFzJ9/X3MnxWX/Se9V9g
b7dgzOp+EXcG7a+uvCPb2V8wG3DZFrFCCR7OCz6xoWnIkL8Bk2moH5EIg/xyA+tk
eFlWVcD3GJ6E7t1L3tMbzO+jTJFBPeBU8p/exOrbGbMjlQ/Metw9QhWuM+ZrtHhW
itMBa3rsNEuA6LXgFjH4OhbTD0yeZFFHAFUO96hz37liEZR2CetO9+N2TOXXpaJ1
+BLJgWg2wCFrFFqYur7s6+QF6WHPqA2PGDk6/3kyUtXbqXeR1sAoL9PilqSgqon5
9XYBIzfPVN1sqhClXVW0kbBkYR6TzOfMLqysSpzBZSSchOFF3LZUgpmZOulPG0mG
ddY=
-----END CERTIFICATE-----
Generated at Tue May 12 23:27:13 2026 by rpki-client