Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: enRnOmNsDUONRR500mhFijxR+z0kWF8JmU+FiaQLnCk=
Subject key identifier: EE:4C:5D:76:98:A0:A1:C4:C0:76:FA:3A:E9:72:3A:B6:B5:4D:00:AD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3D5EC411A782A60F4C946147F48CC19D68A9BD84
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401362.roa
Signing time: Thu 24 Sep 2026 03:45:34 +0000
ROA not before: Thu 24 Sep 2026 03:40:34 +0000
ROA not after: Thu 23 Sep 2027 03:45:34 +0000
asID: 401362
IP address blocks: 82.21.197.0/24 maxlen: 24
82.24.127.0/24 maxlen: 24
82.38.22.0/24 maxlen: 24
84.75.130.0/24 maxlen: 24
178.83.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5e:c4:11:a7:82:a6:0f:4c:94:61:47:f4:8c:c1:9d:68:a9:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 24 03:40:34 2026 GMT
Not After : Sep 23 03:45:34 2027 GMT
Subject: CN=EE4C5D7698A0A1C4C076FA3AE9723AB6B54D00AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:6c:d1:43:fc:78:ae:c1:56:5c:ce:11:32:
e0:ae:d6:81:de:2c:c1:91:49:df:7c:7d:c4:fa:74:
db:9e:1c:73:b1:42:f7:8b:a8:79:9d:1d:6a:3a:e5:
3f:8b:02:45:ab:ac:36:b9:3e:eb:ab:68:9d:60:23:
89:36:ec:88:6e:95:63:6b:30:e9:02:6b:56:e6:a2:
5a:f3:5b:d8:b8:92:66:12:58:8f:af:25:56:b3:1b:
3b:a2:52:65:18:3b:f5:d5:a5:39:7a:be:fe:ba:5e:
d9:52:d4:99:2e:04:88:98:0f:b9:b6:f3:b7:11:b9:
09:b0:6b:56:ca:7d:93:28:a4:99:78:6f:1c:74:03:
ac:6e:bf:41:4d:18:f5:27:ee:30:c6:38:44:af:00:
e8:02:5c:33:cd:d2:73:8b:28:4d:56:81:9b:08:98:
bc:56:bd:42:65:e7:65:44:78:83:0d:a8:56:f6:44:
f4:3e:39:c8:0d:53:1b:c1:1a:c9:3a:1b:15:2b:21:
c0:34:07:70:8f:32:df:4c:e4:8e:72:fa:25:c2:43:
99:f8:8a:25:62:e7:ac:bb:0d:53:88:08:4f:c6:6c:
23:48:b8:4b:f2:73:30:99:b0:5f:9f:3c:4e:89:d8:
d5:25:b0:b6:a9:70:76:d6:f2:e9:92:22:a1:9a:fd:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4C:5D:76:98:A0:A1:C4:C0:76:FA:3A:E9:72:3A:B6:B5:4D:00:AD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.197.0/24
82.24.127.0/24
82.38.22.0/24
84.75.130.0/24
178.83.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8e:28:f3:87:89:75:af:37:eb:b9:b0:92:8d:12:21:c1:17:
15:6b:40:cf:bd:3d:cb:ec:7f:2c:a8:7a:8a:3d:72:82:3a:0b:
63:d9:eb:b3:33:23:44:74:11:ea:58:b4:51:68:b7:82:65:9e:
49:3c:ea:95:3b:6a:ba:c6:b7:da:45:7e:09:12:0f:15:04:87:
6b:88:99:c2:8f:e4:c6:f8:c1:5a:bc:aa:ee:f3:41:75:32:43:
94:65:e6:3f:61:58:62:44:57:c9:a8:38:67:5f:46:53:62:4e:
f2:0a:91:2a:d0:a5:ea:6d:c6:a5:8c:ff:54:39:aa:b3:69:e6:
96:e8:33:b4:09:80:fa:9c:2e:ac:23:ec:bb:8c:d4:53:ff:db:
da:b6:9c:4e:1e:c3:bc:7e:f0:96:5f:20:90:43:71:95:e7:65:
f2:5f:de:0f:76:3e:03:b1:8b:4b:45:89:0d:10:b2:a5:36:19:
5e:31:53:83:71:e4:92:79:d7:2f:47:1c:21:4d:60:dd:e9:df:
c6:25:b8:54:f8:4a:0e:81:5a:87:e8:50:0a:20:7b:6f:9f:8c:
e7:9e:2b:a0:27:76:3f:c8:3c:11:8c:8b:e9:5e:df:2e:69:01:
2c:d7:cd:cd:9f:b6:ba:8c:16:a1:ef:d3:24:4b:f0:24:2e:75:
ea:70:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:39:41 2026 by rpki-client