Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401322.roa
File: AS401322.roa (raw, json)
Hash identifier: /1JSrgFBHjiP66ihZi95nAEZo2xBEeWjiBQ75YT/LG0=
Subject key identifier: 13:37:2A:BD:E9:40:3C:F2:F9:E3:EE:C6:94:01:49:0B:29:CD:79:A3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0A2C8A12607284E2B35FDA7BFAA4AECE73BE5687
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401322.roa
Signing time: Sat 25 Apr 2026 09:39:57 +0000
ROA not before: Sat 25 Apr 2026 09:34:57 +0000
ROA not after: Sat 24 Apr 2027 09:39:57 +0000
asID: 401322
IP address blocks: 82.21.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2c:8a:12:60:72:84:e2:b3:5f:da:7b:fa:a4:ae:ce:73:be:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 25 09:34:57 2026 GMT
Not After : Apr 24 09:39:57 2027 GMT
Subject: CN=13372ABDE9403CF2F9E3EEC69401490B29CD79A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:45:ff:79:d3:88:c1:07:2f:57:45:e5:3a:1b:
3b:5d:35:25:38:f4:f4:25:41:a2:45:e6:e1:64:42:
7b:81:a8:a4:3b:f6:b2:fe:8a:6f:68:ba:08:e7:2d:
0e:bc:e0:40:77:6e:84:b4:b1:f0:cd:36:4d:67:eb:
40:2c:8b:fe:1e:3b:1d:90:e7:98:7a:a7:fe:e4:89:
ef:d4:ea:b1:c4:12:87:6f:9c:40:25:6f:b7:8f:7c:
e3:5b:60:65:97:55:d4:4a:89:02:e9:ff:c8:15:fb:
e2:20:20:fb:25:67:24:1c:5c:4f:3a:51:72:d9:c3:
e0:03:dd:2d:4c:53:67:af:40:04:1e:40:a1:02:9f:
8b:34:c9:ed:24:bb:3f:c9:44:55:11:50:e4:e2:ae:
0c:0e:fc:14:5b:c8:e8:57:5f:90:ad:26:35:fe:54:
f8:21:ff:b8:62:ad:0c:8f:fd:87:a2:3f:df:b6:27:
52:d1:9c:7b:33:6b:e3:ca:44:f5:5c:f9:a7:ec:0e:
67:8b:5c:d2:ff:82:e5:dc:04:b6:46:d7:a9:82:a4:
47:ab:0f:4e:ed:19:80:22:48:b9:ce:2d:78:90:ac:
94:b7:f1:17:a9:ff:bf:66:54:d3:49:89:be:c3:e7:
46:73:1c:7a:11:3a:ac:33:6c:6c:d8:9d:50:3c:f4:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:37:2A:BD:E9:40:3C:F2:F9:E3:EE:C6:94:01:49:0B:29:CD:79:A3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:90:ef:6b:7e:aa:be:e9:98:d9:e9:a4:5e:d2:27:31:74:fb:
f0:32:fc:bb:c7:63:2b:c3:ee:2d:5e:20:b4:bb:6d:7a:0c:b3:
05:41:d0:8b:79:7b:fe:74:ce:57:20:d4:20:f4:92:95:72:48:
1c:84:35:c0:2c:d8:16:51:dc:cc:a7:19:58:44:99:13:bc:2a:
f5:4a:4a:a8:23:76:ec:9a:f8:5d:dc:ce:bb:19:c8:80:be:b1:
c8:17:1d:18:54:32:0c:b4:00:34:c4:65:1f:a5:9e:75:82:fd:
0b:2c:8f:35:a7:79:7f:d9:44:34:fb:64:48:38:a5:78:5f:fc:
bb:ba:c5:fd:eb:9f:0e:d0:16:df:42:22:bf:50:1f:59:59:ae:
4b:1f:eb:5e:e6:ea:82:eb:a8:32:33:5c:15:52:7f:a9:92:77:
7a:3c:e3:79:b6:7b:7e:11:ac:eb:ae:9e:07:7a:54:d2:50:f2:
75:b6:03:e7:4e:92:d0:74:dd:55:d6:3f:f7:4b:da:56:46:b5:
43:97:60:14:67:7e:b3:da:77:da:5d:25:2e:98:53:7f:84:dd:
8c:68:3a:3b:cf:37:6b:e7:b2:03:fa:c2:f3:df:e0:f6:1c:25:
c0:36:b2:5b:96:4c:6d:58:fa:bb:12:9d:66:a2:47:46:5b:ec:
0b:93:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:04:58 2026 by rpki-client