Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401856.roa
File: AS401856.roa (raw, json)
Hash identifier: 7ZdDZ9WsB7GZujg2/T+bsadYxZXTjg4Zf57v3MrtzXA=
Subject key identifier: DB:60:7F:B6:4F:64:7A:12:73:A2:CB:3F:2E:DD:17:68:DD:7B:D9:A1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 50FB8B720657E305F4617930951831F4FFD51861
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401856.roa
Signing time: Mon 11 May 2026 09:27:38 +0000
ROA not before: Mon 11 May 2026 09:22:38 +0000
ROA not after: Mon 10 May 2027 09:27:38 +0000
asID: 401856
IP address blocks: 84.75.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:fb:8b:72:06:57:e3:05:f4:61:79:30:95:18:31:f4:ff:d5:18:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 11 09:22:38 2026 GMT
Not After : May 10 09:27:38 2027 GMT
Subject: CN=DB607FB64F647A1273A2CB3F2EDD1768DD7BD9A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:c3:0a:63:ff:eb:d9:eb:2c:64:8a:e5:83:
cd:68:84:b7:9c:50:30:f9:83:88:34:7f:ff:76:7c:
1c:e9:3f:6b:29:f5:0d:d4:0b:b9:95:c0:b7:c3:7f:
21:56:d0:3d:99:75:3c:b9:af:50:a3:9e:a5:0f:81:
f1:66:07:44:f9:8e:43:70:79:7d:a9:a2:a6:d0:76:
97:0a:3c:64:f5:f6:b2:09:2b:3a:b0:f7:31:c4:b2:
18:d0:8d:a8:e1:fa:45:5b:a0:cd:d8:00:d4:0a:16:
af:e8:db:56:07:e2:65:42:3e:6a:76:8e:51:80:39:
8e:ef:85:a3:b3:7b:3c:cb:0c:ea:e6:03:8f:74:5d:
53:3a:20:44:1a:1e:53:59:2a:2c:a8:15:90:65:a1:
fa:ad:5f:52:48:ef:79:24:4e:b3:95:95:70:04:ee:
75:b5:23:6d:d3:e3:dd:5a:ee:37:e4:51:f5:8d:f4:
8c:f0:56:c7:6d:50:9d:24:51:52:32:c7:c0:eb:36:
a7:aa:f7:db:e1:60:a9:07:00:7f:fa:24:2a:d8:05:
89:ab:59:84:00:21:59:bd:d3:b3:bc:12:df:d8:27:
ef:fa:7f:7d:5f:94:c5:f3:b1:8f:d9:ee:d9:10:cd:
45:c8:4c:56:23:ed:6b:aa:a3:58:e0:1f:5a:b4:a8:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:7F:B6:4F:64:7A:12:73:A2:CB:3F:2E:DD:17:68:DD:7B:D9:A1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d0:20:5f:25:98:d0:1e:c6:36:57:cb:d4:7c:63:bb:91:da:
44:6d:e8:4f:55:e5:5a:2d:56:89:9c:b8:2a:e7:d4:14:17:be:
ca:d6:b3:c1:37:27:2a:f8:89:14:66:c6:7d:09:41:82:40:77:
86:1d:cd:98:43:9e:a5:dc:ab:3b:df:a1:7d:ff:aa:56:2c:2c:
43:18:fd:5f:0f:31:05:5d:17:8a:bf:ba:ed:a1:a9:58:37:23:
f0:15:52:ef:34:c0:c9:58:09:59:58:1d:55:ed:27:f5:ed:41:
61:c0:b8:8e:89:ac:d5:53:52:76:ea:25:dd:61:ba:f6:10:95:
7e:7f:39:d7:0d:b7:4e:ad:42:dc:21:5f:e3:2c:26:25:87:05:
ac:38:e8:07:ca:a4:49:db:c2:00:22:67:75:4d:7f:ac:bd:c7:
1c:eb:b8:70:1f:70:ae:cd:01:4e:2d:0f:15:b4:47:58:ee:3a:
fa:2a:eb:e0:d5:3e:b4:69:b2:61:1e:c2:38:f1:28:8f:0a:92:
ac:ee:15:af:09:ac:33:97:cb:88:b0:d3:3b:a7:ad:94:e4:68:
9c:39:ce:bc:8c:e4:e7:c7:56:4e:62:16:8f:56:6e:d4:ce:5d:
67:e1:d3:11:b6:17:95:2a:fe:53:e1:0c:89:fa:80:f3:80:af:
eb:bc:ba:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUUPuLcgZX4wX0YXkwlRgx9P/VGGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MTEwOTIyMzhaFw0yNzA1MTAwOTI3MzhaMDMxMTAvBgNV
BAMTKERCNjA3RkI2NEY2NDdBMTI3M0EyQ0IzRjJFREQxNzY4REQ3QkQ5QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2MMKY//r2essZIrlg81ohLec
UDD5g4g0f/92fBzpP2sp9Q3UC7mVwLfDfyFW0D2ZdTy5r1CjnqUPgfFmB0T5jkNw
eX2poqbQdpcKPGT19rIJKzqw9zHEshjQjajh+kVboM3YANQKFq/o21YH4mVCPmp2
jlGAOY7vhaOzezzLDOrmA490XVM6IEQaHlNZKiyoFZBlofqtX1JI73kkTrOVlXAE
7nW1I23T491a7jfkUfWN9IzwVsdtUJ0kUVIyx8DrNqeq99vhYKkHAH/6JCrYBYmr
WYQAIVm907O8Et/YJ+/6f31flMXzsY/Z7tkQzUXITFYj7Wuqo1jgH1q0qJphAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU22B/tk9kehJzoss/Lt0XaN172aEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAxODU2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVEuS
MA0GCSqGSIb3DQEBCwUAA4IBAQAL0CBfJZjQHsY2V8vUfGO7kdpEbehPVeVaLVaJ
nLgq59QUF77K1rPBNycq+IkUZsZ9CUGCQHeGHc2YQ56l3Ks736F9/6pWLCxDGP1f
DzEFXReKv7rtoalYNyPwFVLvNMDJWAlZWB1V7Sf17UFhwLiOiazVU1J26iXdYbr2
EJV+fznXDbdOrULcIV/jLCYlhwWsOOgHyqRJ28IAImd1TX+svccc67hwH3CuzQFO
LQ8VtEdY7jr6Kuvg1T60abJhHsI48SiPCpKs7hWvCawzl8uIsNM7p62U5GicOc68
jOTnx1ZOYhaPVm7Uzl1n4dMRtheVKv5T4QyJ+oDzgK/rvLqc
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:11 2026 by rpki-client