Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401861.roa
File: AS401861.roa (raw, json)
Hash identifier: HFhIDADabBdCVodT9Q4dy0oV42b1rwBaMl7HI9H84qs=
Subject key identifier: 03:40:20:52:69:1A:77:95:BF:C5:4D:09:79:B4:F3:B6:C3:EE:F5:98
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 33D46F850140CCB160AD3658AD80C7F4ECF0FFA4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401861.roa
Signing time: Mon 11 May 2026 03:11:06 +0000
ROA not before: Mon 11 May 2026 03:06:06 +0000
ROA not after: Mon 10 May 2027 03:11:06 +0000
asID: 401861
IP address blocks: 82.39.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d4:6f:85:01:40:cc:b1:60:ad:36:58:ad:80:c7:f4:ec:f0:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 11 03:06:06 2026 GMT
Not After : May 10 03:11:06 2027 GMT
Subject: CN=03402052691A7795BFC54D0979B4F3B6C3EEF598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:fe:1e:64:3d:44:4b:f2:c4:a2:65:a0:ca:
91:5a:1d:9b:a7:70:27:1d:7d:f4:fc:ab:60:a7:06:
f8:28:bf:10:d1:11:74:64:58:9b:c4:cd:f2:a8:4f:
05:db:f4:24:d0:ee:98:c0:7f:2a:e8:3a:3b:ab:69:
0a:70:3f:bd:a7:b7:f9:2a:8c:5e:c7:7d:67:2d:a4:
a1:85:a4:a6:75:f5:95:75:63:5c:83:85:74:bf:28:
25:5f:77:b1:79:b9:98:40:b1:72:cc:43:7b:64:ce:
1d:05:81:18:c6:4e:b4:82:7e:99:cb:e9:9b:95:69:
94:3b:cd:c8:fe:db:59:3e:4d:90:dd:91:c1:7c:3e:
ee:49:7b:8c:e6:a0:9b:47:56:29:31:3f:c5:3d:48:
87:68:a5:04:f3:09:a8:27:e5:21:67:f6:6a:13:c6:
44:12:fd:54:13:4f:5c:ea:f9:bc:0e:41:a7:1d:84:
f2:1a:b7:75:c3:ca:81:3d:29:a1:3c:d7:35:b9:d5:
88:c9:05:2c:4e:4f:20:b5:52:8c:b9:09:d8:01:e7:
91:6d:70:d1:e9:1e:18:95:58:1e:f6:60:fc:66:58:
0c:20:c5:49:35:5d:7c:81:4b:50:0e:3b:e6:9c:c6:
32:78:92:fb:ed:5a:64:2c:5e:f8:70:28:38:8e:1c:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:40:20:52:69:1A:77:95:BF:C5:4D:09:79:B4:F3:B6:C3:EE:F5:98
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401861.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.119.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f1:2d:f0:88:72:0e:b3:1e:36:ad:18:15:b4:22:0e:c4:cf:
c3:48:1c:74:32:78:de:32:24:83:c3:5e:7e:ba:68:06:b9:73:
ec:8b:5d:65:d2:e6:c8:f4:62:71:ff:8e:de:bc:96:d5:b8:39:
8f:9e:93:c8:2a:d9:88:49:da:07:fa:20:aa:04:25:e2:46:45:
b8:9a:60:f2:c5:34:a4:fc:be:30:bd:a7:ef:30:e6:70:74:70:
fd:80:27:95:f4:c2:d6:f9:05:fa:4c:85:b7:65:ad:8b:19:89:
4c:6b:a3:1f:14:89:3d:93:e4:56:f9:bc:fe:e1:5a:a5:3f:91:
70:71:48:ef:e6:d0:1d:45:89:7d:32:93:b5:f5:a5:96:c2:3e:
65:96:22:4f:11:86:62:76:74:59:3a:00:77:27:6e:6e:ad:a5:
ea:36:b9:05:62:ae:58:04:e7:7d:b3:9a:8b:1c:e2:68:b5:47:
65:14:d2:38:fe:95:9a:89:70:8c:36:e6:5c:b7:ea:28:f0:1e:
71:e7:00:26:35:81:6c:49:dc:9f:76:80:05:3d:33:45:1a:60:
7f:7b:55:99:98:c1:5f:bf:3f:ad:31:dc:79:13:f4:d3:a9:bc:
e0:48:a5:3b:98:a0:5f:13:fe:16:2e:5a:0a:0b:34:fa:d6:81:
b5:57:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:51 2026 by rpki-client