Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399955.roa
File: AS399955.roa (raw, json)
Hash identifier: 3mbek0sQ1uKoR3byZJMMwtsdSjJ7gCwEh/SxBBEzICM=
Subject key identifier: B1:E6:2D:B9:29:9E:E1:C4:96:38:D9:8D:AA:97:0A:AB:35:89:B7:77
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6D1B4565452EBC2D080A5F4480B98B905E1381D5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399955.roa
Signing time: Sun 08 Nov 2026 00:09:01 +0000
ROA not before: Sun 08 Nov 2026 00:04:01 +0000
ROA not after: Sun 07 Nov 2027 00:09:01 +0000
asID: 399955
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.136.0/22 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.140.0/23 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.10.0/23 maxlen: 24
82.24.36.0/22 maxlen: 24
82.24.44.0/23 maxlen: 24
82.24.50.0/23 maxlen: 24
82.24.102.0/23 maxlen: 24
82.24.184.0/22 maxlen: 24
82.24.204.0/23 maxlen: 24
82.25.0.0/22 maxlen: 24
82.25.18.0/23 maxlen: 24
82.25.128.0/22 maxlen: 24
82.25.206.0/23 maxlen: 24
82.26.102.0/23 maxlen: 24
82.27.24.0/21 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.80.0/21 maxlen: 24
82.27.112.0/22 maxlen: 24
82.27.144.0/20 maxlen: 24
82.27.192.0/22 maxlen: 24
82.29.30.0/23 maxlen: 24
82.29.144.0/22 maxlen: 24
82.38.36.0/23 maxlen: 24
82.39.112.0/23 maxlen: 24
82.41.192.0/23 maxlen: 24
178.83.0.0/22 maxlen: 24
178.83.42.0/23 maxlen: 24
178.83.216.0/22 maxlen: 24
178.83.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1b:45:65:45:2e:bc:2d:08:0a:5f:44:80:b9:8b:90:5e:13:81:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 8 00:04:01 2026 GMT
Not After : Nov 7 00:09:01 2027 GMT
Subject: CN=B1E62DB9299EE1C49638D98DAA970AAB3589B777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:4c:6d:7f:28:bd:4d:f6:74:bf:eb:64:0a:
6a:f3:98:c4:0e:66:6d:c0:3d:dd:10:09:87:18:88:
0c:48:51:7f:55:a5:dd:81:9a:f9:11:21:c3:b2:9b:
74:44:73:af:bb:9e:60:2b:5a:10:99:63:0c:26:1c:
b5:51:2d:bc:11:68:b2:8c:49:c1:4a:95:a4:8d:7f:
91:f7:0b:ab:4b:a8:c3:2e:a7:43:54:eb:84:48:a1:
47:07:05:59:c8:c6:9a:2d:c5:43:e2:9c:2e:61:66:
70:42:ee:54:7c:bb:2a:2c:8a:cb:2c:47:27:42:e7:
64:59:99:a7:63:2b:d4:37:23:b1:0a:ba:3e:1c:d4:
4b:27:1c:46:2f:d2:0c:3d:37:56:13:7b:e5:4a:ed:
0c:06:86:61:33:b7:e9:52:67:09:89:08:1e:d6:be:
e7:41:62:27:8d:59:5c:e6:80:a5:41:22:4b:bd:b0:
6b:8b:db:ac:cb:4a:b4:2f:03:dc:43:20:c1:fd:2b:
30:a4:21:07:36:6e:9b:00:01:20:6a:21:63:e9:f0:
f7:5a:f8:da:13:a6:ef:d9:0c:23:e1:d7:91:18:a7:
11:5f:6b:23:7e:50:32:1b:a4:96:4f:d2:07:a8:cc:
27:69:39:20:5e:db:a6:7f:87:ce:f2:bf:66:3f:65:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E6:2D:B9:29:9E:E1:C4:96:38:D9:8D:AA:97:0A:AB:35:89:B7:77
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS399955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.136.0/22
82.22.148.0-82.22.155.255
82.23.140.0/23
82.23.152.0/21
82.24.10.0/23
82.24.36.0/22
82.24.44.0/23
82.24.50.0/23
82.24.102.0/23
82.24.184.0/22
82.24.204.0/23
82.25.0.0/22
82.25.18.0/23
82.25.128.0/22
82.25.206.0/23
82.26.102.0/23
82.27.24.0/21
82.27.48.0/20
82.27.80.0/21
82.27.112.0/22
82.27.144.0/20
82.27.192.0/22
82.29.30.0/23
82.29.144.0/22
82.38.36.0/23
82.39.112.0/23
82.41.192.0/23
178.83.0.0/22
178.83.42.0/23
178.83.216.0/22
178.83.242.0/23
Signature Algorithm: sha256WithRSAEncryption
52:62:91:c6:96:c2:89:f7:ca:44:46:4e:ad:2d:77:5a:77:38:
55:8f:08:ed:ce:65:a5:72:60:63:f0:b4:20:ff:98:bc:48:f8:
ad:6a:b5:ea:60:b8:a8:7f:71:1b:e2:b8:e8:f3:45:b3:42:af:
6c:b8:7a:4f:35:7d:22:66:60:df:f1:35:d8:95:a0:af:f7:15:
54:c2:78:0e:50:da:34:2b:56:f7:c0:22:a7:73:5e:82:a3:f3:
38:92:1f:db:8d:ee:19:e5:c4:ab:f4:c3:94:5a:7b:65:c1:dd:
5e:6c:dd:d2:d0:e9:8c:0b:6b:fc:31:6f:80:88:96:d8:aa:f6:
73:74:89:b3:b2:89:65:86:15:a0:5c:88:60:5e:92:55:66:db:
fd:0d:83:2c:91:1a:ad:ed:27:17:09:de:e8:e6:c0:e6:3e:da:
65:e6:cf:3e:d8:ac:ad:e6:a4:fd:69:c0:b4:12:b8:11:ba:09:
32:5b:0a:12:95:06:71:78:90:f7:85:f3:bf:d8:2a:39:b3:06:
16:d9:47:ba:4a:32:d7:8a:be:c5:bd:ca:0f:37:72:aa:8a:3b:
74:0e:e8:28:bb:3e:53:9e:0c:16:3b:03:3e:48:c3:80:25:4c:
85:e8:f0:80:03:0b:5e:fa:38:8d:3b:10:1e:62:00:68:99:34:
b2:ab:0c:8e
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUbRtFZUUuvC0ICl9EgLmLkF4TgdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMDgwMDA0MDFaFw0yNzExMDcwMDA5MDFaMDMxMTAvBgNV
BAMTKEIxRTYyREI5Mjk5RUUxQzQ5NjM4RDk4REFBOTcwQUFCMzU4OUI3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gkxtfyi9TfZ0v+tkCmrzmMQO
Zm3APd0QCYcYiAxIUX9Vpd2BmvkRIcOym3REc6+7nmArWhCZYwwmHLVRLbwRaLKM
ScFKlaSNf5H3C6tLqMMup0NU64RIoUcHBVnIxpotxUPinC5hZnBC7lR8uyosisss
RydC52RZmadjK9Q3I7EKuj4c1EsnHEYv0gw9N1YTe+VK7QwGhmEzt+lSZwmJCB7W
vudBYieNWVzmgKVBIku9sGuL26zLSrQvA9xDIMH9KzCkIQc2bpsAASBqIWPp8Pda
+NoTpu/ZDCPh15EYpxFfayN+UDIbpJZP0geozCdpOSBe26Z/h87yv2Y/ZTAlAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUseYtuSme4cSWONmNqpcKqzWJt3cwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk5OTU1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBzwQCAAEwgcgD
BAJSFWgDBAJSFogwDAMEAlIWlAMEAlIWmAMEAVIXjAMEA1IXmAMEAVIYCgMEAlIY
JAMEAVIYLAMEAVIYMgMEAVIYZgMEAlIYuAMEAVIYzAMEAlIZAAMEAVIZEgMEAlIZ
gAMEAVIZzgMEAVIaZgMEA1IbGAMEBFIbMAMEA1IbUAMEAlIbcAMEBFIbkAMEAlIb
wAMEAVIdHgMEAlIdkAMEAVImJAMEAVIncAMEAVIpwAMEArJTAAMEAbJTKgMEArJT
2AMEAbJT8jANBgkqhkiG9w0BAQsFAAOCAQEAUmKRxpbCiffKREZOrS13Wnc4VY8I
7c5lpXJgY/C0IP+YvEj4rWq16mC4qH9xG+K46PNFs0KvbLh6TzV9ImZg3/E12JWg
r/cVVMJ4DlDaNCtW98Aip3NegqPzOJIf243uGeXEq/TDlFp7ZcHdXmzd0tDpjAtr
/DFvgIiW2Kr2c3SJs7KJZYYVoFyIYF6SVWbb/Q2DLJEare0nFwne6ObA5j7aZebP
Ptisreak/WnAtBK4EboJMlsKEpUGcXiQ94Xzv9gqObMGFtlHukoy14q+xb3KDzdy
qoo7dA7oKLs+U54MFjsDPkjDgCVMhejwgAMLXvo4jTsQHmIAaJk0sqsMjg==
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:31:52 2026 by rpki-client