Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400897.roa
File: AS400897.roa (raw, json)
Hash identifier: ZMcfzUXnUAe8wzzfJZFIMYOn1BXoNqLoccHeNSiy6XM=
Subject key identifier: AF:81:48:21:C2:51:A9:C1:B8:72:76:F8:B6:AA:4E:90:D5:0D:D9:D3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5C33103806F08F51EBF1102CDB2198D8A9EBB4A4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400897.roa
Signing time: Thu 23 Jul 2026 15:57:33 +0000
ROA not before: Thu 23 Jul 2026 15:52:33 +0000
ROA not after: Thu 22 Jul 2027 15:57:33 +0000
asID: 400897
IP address blocks: 82.26.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:33:10:38:06:f0:8f:51:eb:f1:10:2c:db:21:98:d8:a9:eb:b4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 23 15:52:33 2026 GMT
Not After : Jul 22 15:57:33 2027 GMT
Subject: CN=AF814821C251A9C1B87276F8B6AA4E90D50DD9D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:67:1f:4a:93:e9:08:a3:9e:14:85:7f:35:
9c:2b:65:17:22:56:ec:3b:f1:5b:73:c5:fe:16:82:
b8:86:e9:06:c9:8d:93:28:fe:b4:a7:16:84:bb:4d:
8f:29:ad:5b:26:eb:f4:81:7c:73:1f:84:60:f8:4a:
96:9a:aa:07:4a:e4:64:ed:0c:45:85:32:31:db:5a:
3d:04:b8:36:87:ff:5d:04:7e:23:89:4a:4d:9d:63:
c2:57:cf:71:4e:dc:3c:dc:76:08:da:fa:1e:6b:01:
fa:69:87:fe:96:7e:64:2e:87:e6:b0:90:92:5c:8d:
c1:a7:98:17:f4:c9:89:f0:0e:a2:9a:9d:da:b2:55:
4b:4a:3e:77:ea:1b:08:6a:f4:a3:0c:ff:92:8d:da:
ac:d9:a2:40:5c:6a:a4:60:96:fa:d3:f0:47:44:9a:
11:b5:31:14:77:d8:f2:1e:73:1f:1d:29:35:87:93:
7e:b1:ee:bc:3f:b3:13:3d:6f:5d:9d:33:91:2f:73:
67:68:25:2c:4f:c1:19:f8:a1:fe:99:55:27:17:70:
ca:8b:3c:c7:fc:d6:9d:dc:44:4e:1c:9b:d5:bd:b8:
da:3c:aa:b9:1b:82:e0:8d:fa:75:39:d8:ed:09:a9:
49:d8:58:64:28:8d:93:29:30:e1:59:45:63:af:3d:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:48:21:C2:51:A9:C1:B8:72:76:F8:B6:AA:4E:90:D5:0D:D9:D3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:1b:b2:67:71:51:21:96:ef:68:d9:22:ef:61:9d:82:b9:4f:
03:15:8b:48:6f:9e:db:12:8b:6e:24:3a:52:89:fb:dc:84:b8:
80:c4:37:61:d7:bc:93:87:5e:5c:60:6e:16:37:55:b6:0f:5a:
1e:0c:ae:0c:6b:88:31:4a:7c:76:e2:43:29:37:47:7b:85:f5:
83:ac:36:68:25:cd:18:e6:96:9c:4a:39:3a:30:85:7b:9e:39:
02:5a:f5:c4:2c:67:82:b1:84:2e:11:98:3d:62:61:f9:e9:32:
e4:8c:0f:26:88:19:4c:92:d2:81:fa:02:0b:9c:b8:f1:5c:81:
bc:da:d6:02:68:c0:74:0a:36:9d:7e:fa:2d:e7:d7:4e:26:58:
b0:73:35:3e:be:64:0f:73:c9:67:65:c0:ff:e2:ce:d9:fb:fe:
4d:65:8c:de:fc:4b:06:8b:cd:1c:2d:51:aa:6f:36:0d:d4:e7:
1a:ee:60:12:a3:ff:59:c8:db:a0:ea:ef:ba:f7:8f:07:d1:38:
07:87:15:f3:42:6c:19:d3:dc:9a:58:1d:4a:a8:72:87:92:c3:
2c:c3:e5:1e:03:65:6e:da:26:c7:12:83:2c:d9:c2:0b:56:82:
e0:2e:cc:78:b3:93:2c:5a:c9:f3:8d:00:9a:ab:3f:ea:18:3f:
8a:b6:2f:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXDMQOAbwj1Hr8RAs2yGY2KnrtKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MjMxNTUyMzNaFw0yNzA3MjIxNTU3MzNaMDMxMTAvBgNV
BAMTKEFGODE0ODIxQzI1MUE5QzFCODcyNzZGOEI2QUE0RTkwRDUwREQ5RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWv2cfSpPpCKOeFIV/NZwrZRci
Vuw78Vtzxf4WgriG6QbJjZMo/rSnFoS7TY8prVsm6/SBfHMfhGD4SpaaqgdK5GTt
DEWFMjHbWj0EuDaH/10EfiOJSk2dY8JXz3FO3Dzcdgja+h5rAfpph/6WfmQuh+aw
kJJcjcGnmBf0yYnwDqKandqyVUtKPnfqGwhq9KMM/5KN2qzZokBcaqRglvrT8EdE
mhG1MRR32PIecx8dKTWHk36x7rw/sxM9b12dM5Evc2doJSxPwRn4of6ZVScXcMqL
PMf81p3cRE4cm9W9uNo8qrkbguCN+nU52O0JqUnYWGQojZMpMOFZRWOvPaQhAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUr4FIIcJRqcG4cnb4tqpOkNUN2dMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAwODk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhpC
MA0GCSqGSIb3DQEBCwUAA4IBAQCgG7JncVEhlu9o2SLvYZ2CuU8DFYtIb57bEotu
JDpSifvchLiAxDdh17yTh15cYG4WN1W2D1oeDK4Ma4gxSnx24kMpN0d7hfWDrDZo
Jc0Y5pacSjk6MIV7njkCWvXELGeCsYQuEZg9YmH56TLkjA8miBlMktKB+gILnLjx
XIG82tYCaMB0Cjadfvot59dOJliwczU+vmQPc8lnZcD/4s7Z+/5NZYze/EsGi80c
LVGqbzYN1Oca7mASo/9ZyNug6u+6948H0TgHhxXzQmwZ09yaWB1KqHKHksMsw+Ue
A2Vu2ibHEoMs2cILVoLgLsx4s5MsWsnzjQCaqz/qGD+Kti9Y
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:53 2026 by rpki-client