Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400906.roa
File: AS400906.roa (raw, json)
Hash identifier: 9V78u2PMpGAY6vqcHiIc+02dWy3c8p4ZLDDQ9BnaMEc=
Subject key identifier: C3:1F:5D:EA:C9:91:BF:79:F1:FE:97:E0:A6:6A:11:13:8E:39:3A:99
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0DCE71A9821872391866BFE040E1742492C4E477
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400906.roa
Signing time: Fri 08 May 2026 12:28:40 +0000
ROA not before: Fri 08 May 2026 12:23:40 +0000
ROA not after: Fri 07 May 2027 12:28:40 +0000
asID: 400906
IP address blocks: 82.41.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ce:71:a9:82:18:72:39:18:66:bf:e0:40:e1:74:24:92:c4:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 12:23:40 2026 GMT
Not After : May 7 12:28:40 2027 GMT
Subject: CN=C31F5DEAC991BF79F1FE97E0A66A11138E393A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ce:61:b6:9e:96:54:0b:a2:6b:87:9e:8c:a7:
ae:d6:b0:53:12:5d:fc:9c:5e:21:4d:b5:1f:8d:1f:
75:20:3e:f1:99:ba:e3:34:8d:e8:9c:ab:83:b8:1a:
a6:57:b0:99:53:28:1d:d3:b6:30:9e:37:0e:f0:b6:
93:85:c3:b4:7c:f9:eb:8d:cc:ec:eb:6d:96:4a:f2:
64:2a:11:ed:1b:4a:ed:88:eb:56:ac:03:2e:5b:a8:
ad:86:6c:63:27:fe:f7:9b:ec:d9:4b:36:66:cf:3e:
2e:b8:5b:26:8c:7f:37:ea:3e:95:34:0e:8b:04:93:
c7:dc:08:a1:5f:15:95:70:56:0a:3a:70:78:16:fa:
0a:77:b1:5f:23:99:39:44:40:7b:f2:be:a5:5e:d0:
25:75:75:e3:6d:d0:c9:f6:06:9c:f7:e2:f8:b0:59:
d5:16:47:81:0b:fa:f7:1a:56:dc:3d:3d:69:43:0a:
8a:23:87:fb:2d:b0:6d:6b:7c:6c:92:07:d9:b6:23:
54:f5:df:47:c1:68:61:54:8c:65:73:43:2e:e6:2b:
24:ec:f2:84:53:66:18:53:13:ea:03:2f:2b:e1:dd:
a2:67:3b:f1:6e:b8:47:a6:a0:0c:41:ff:cf:87:69:
86:77:8f:75:5f:99:23:ed:b8:a6:cb:aa:1d:b2:9e:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1F:5D:EA:C9:91:BF:79:F1:FE:97:E0:A6:6A:11:13:8E:39:3A:99
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2e:74:6d:68:85:79:4d:fb:dc:e6:35:87:4e:04:f1:8b:99:
ac:2f:47:3e:d1:fa:34:da:55:84:fa:bf:75:f8:bb:57:9d:ff:
58:c5:dc:4c:1c:3d:17:86:4c:af:f6:17:35:cc:8e:90:70:f6:
fb:82:3f:bc:6b:17:9e:9d:f4:bc:d7:cc:89:00:8d:38:f3:55:
e4:50:fd:9f:ed:15:c4:72:be:37:2a:02:46:a1:ba:3c:25:f1:
ba:84:c8:1c:51:3e:9f:81:16:91:da:dd:9b:04:b2:0d:94:a4:
90:93:1c:a7:c3:ab:96:0a:04:be:91:5f:30:e6:4b:fe:ba:0b:
b5:de:af:b3:db:6a:c8:46:8a:35:3e:18:db:24:db:fe:41:20:
6f:f8:fe:43:89:5b:04:fd:83:0e:64:92:52:3c:d2:7d:63:84:
ac:36:93:ca:b8:2b:11:49:18:78:99:37:03:61:59:ec:27:10:
23:e5:93:f2:16:e7:be:7c:d2:05:df:8e:a3:2b:c8:70:82:ec:
f1:71:a1:f2:77:7e:d6:a0:06:b0:c8:68:49:86:e4:26:57:37:
8b:1c:b5:96:84:a2:af:8a:ed:35:7d:ba:42:b4:4c:e0:a5:c7:
02:42:0d:ad:a9:88:4b:74:bf:b4:cf:04:79:a0:84:92:b3:a9:
2e:40:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:18 2026 by rpki-client