Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397630.roa
File: AS397630.roa (raw, json)
Hash identifier: 6Z+FXb30XvKnQTp08FfF94Ooh8bE/2EIFCrqSLKLkeE=
Subject key identifier: 04:67:0D:FC:C2:8F:65:42:C1:E7:D9:CF:C6:58:AC:E1:97:4A:82:42
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 05B9C1B41A6D911A7FEFCD2B0F14ABB88B4F2001
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397630.roa
Signing time: Tue 19 Aug 2025 17:12:57 +0000
ROA not before: Tue 19 Aug 2025 17:07:57 +0000
ROA not after: Tue 18 Aug 2026 17:12:57 +0000
asID: 397630
IP address blocks: 82.21.153.0/24 maxlen: 24
82.24.76.0/24 maxlen: 24
82.26.194.0/24 maxlen: 24
82.29.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b9:c1:b4:1a:6d:91:1a:7f:ef:cd:2b:0f:14:ab:b8:8b:4f:20:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 19 17:07:57 2025 GMT
Not After : Aug 18 17:12:57 2026 GMT
Subject: CN=04670DFCC28F6542C1E7D9CFC658ACE1974A8242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:ed:d1:e1:e0:6d:ac:6f:de:79:b1:0d:39:
ff:d3:17:c1:b5:ec:aa:bd:f9:43:dd:e1:03:98:8f:
01:cc:cf:d5:d6:df:4e:22:d9:94:bd:cb:0f:77:91:
2d:36:3d:f9:a4:d4:23:73:bb:9e:88:57:2a:d1:eb:
0a:f0:09:96:5b:c4:f9:22:ca:ae:46:7f:c3:36:b6:
3a:1c:92:b2:f3:96:1d:c4:37:cb:6d:62:2b:6d:86:
6e:ef:c9:9a:da:b2:f7:5f:10:20:1b:ab:f2:90:61:
56:0d:f1:ce:d9:83:ae:2e:00:48:9d:ac:7a:7e:17:
3d:db:6b:c8:ca:1b:1f:52:b6:d8:e5:94:14:d0:e6:
7b:5f:44:3a:32:c6:95:0b:18:cd:0c:2d:b5:0a:5d:
15:a9:fa:a3:eb:92:5d:29:cd:74:05:28:27:97:0b:
d1:5c:f8:0d:e6:32:8c:fe:5d:34:02:b2:95:80:02:
28:f4:66:13:b1:a7:78:0b:49:3f:05:3c:2f:8a:21:
5e:6d:c8:bc:b7:ca:27:2e:b2:0d:e1:9f:32:49:88:
d9:f4:47:32:d7:51:ce:49:aa:36:c3:14:5a:6b:6b:
06:37:93:6d:f7:d5:86:48:66:25:17:e1:00:37:30:
4a:8e:ed:fc:e0:7b:3a:06:23:42:e3:b7:52:90:be:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:67:0D:FC:C2:8F:65:42:C1:E7:D9:CF:C6:58:AC:E1:97:4A:82:42
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.153.0/24
82.24.76.0/24
82.26.194.0/24
82.29.126.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5a:6e:7b:86:6a:2c:88:6a:d1:35:6d:e3:4b:5f:25:c6:4b:
7b:89:bd:8b:6c:fc:de:92:c8:32:c4:89:b0:80:19:1f:44:e3:
7f:43:00:2a:cb:1e:6f:7e:97:08:b7:7d:5f:87:0b:02:07:36:
38:c3:06:d4:6b:c6:6e:52:4c:da:86:eb:33:8d:8e:b8:c9:70:
84:51:41:92:5f:a8:5f:17:e2:58:0c:65:ad:2e:c0:73:2d:53:
1b:6d:a7:b6:b1:a7:da:4c:4f:45:19:e2:b2:70:54:77:fe:6c:
15:6e:64:28:b0:87:e5:aa:61:99:d6:ec:14:fc:2d:cc:a9:63:
f9:71:ec:5e:a0:e9:08:d4:b7:00:d7:a1:09:ca:e9:fd:fa:72:
dc:fd:41:d6:6b:60:86:26:e7:57:fd:95:01:ef:d1:9b:54:b3:
c0:95:a4:99:3d:05:1b:f8:b0:de:1d:59:bd:ac:f6:d7:bc:cf:
f6:d8:7f:cc:b4:a2:d9:19:3f:85:e5:46:ff:f2:8d:21:61:89:
95:f4:01:19:0d:f3:21:58:1a:fc:56:be:08:c3:6b:a6:be:bf:
0a:c3:c8:80:a7:da:72:4f:5e:ad:1a:d5:f7:84:56:ca:9b:05:
46:86:c5:d8:2a:7f:e4:99:d2:a3:69:fa:a7:8a:3a:d6:d8:78:
85:c3:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:52 2025 by rpki-client