Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402186.roa
File: AS402186.roa (raw, json)
Hash identifier: bqk6ugBNy516eaVxmpq+ntwoTAXC611TdDfN7d72vSE=
Subject key identifier: 6C:CA:40:10:62:D4:FD:FB:20:34:43:60:B2:25:25:B3:E2:AD:66:C2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 50F463DA0E37E6F93E2E05CEB090EEDF7C8B4FDE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402186.roa
Signing time: Tue 24 Mar 2026 04:40:19 +0000
ROA not before: Tue 24 Mar 2026 04:35:19 +0000
ROA not after: Tue 23 Mar 2027 04:40:19 +0000
asID: 402186
IP address blocks: 82.26.129.0/24 maxlen: 24
82.41.158.0/24 maxlen: 24
178.83.193.0/24 maxlen: 24
178.83.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f4:63:da:0e:37:e6:f9:3e:2e:05:ce:b0:90:ee:df:7c:8b:4f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 24 04:35:19 2026 GMT
Not After : Mar 23 04:40:19 2027 GMT
Subject: CN=6CCA401062D4FDFB20344360B22525B3E2AD66C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:eb:d4:df:bf:ec:cc:58:45:60:e6:a9:61:
9e:ba:40:90:2b:bc:5c:f9:fa:f3:6f:c6:6a:88:e1:
7a:da:23:f5:92:ac:d2:08:bc:6e:64:83:7d:d8:4a:
7b:54:2a:15:3c:f6:8b:98:65:91:c1:22:ce:ca:1a:
aa:ae:6b:b8:79:cf:a8:8a:ba:41:85:d8:1b:91:88:
1f:72:3c:d6:49:b5:56:19:81:0d:c9:95:40:fd:9b:
64:0c:1a:14:92:5d:97:29:d6:55:4c:3d:f4:d9:c7:
37:84:12:e2:40:3c:a0:86:16:82:3e:13:d6:fa:c3:
b4:79:16:29:9c:86:a3:ac:4b:66:2c:bb:c3:a1:86:
1d:02:0b:fa:33:a3:fb:86:d7:bf:dd:46:0e:e4:06:
3e:83:43:ed:81:a4:1f:a9:2f:3f:2a:1c:07:b9:38:
86:e5:ec:5f:df:c2:e5:ec:b4:53:08:f3:ef:21:8a:
c1:6e:af:57:33:69:de:3b:65:da:f2:58:3d:9f:0d:
5d:f6:71:ed:5e:4c:ec:69:5e:de:4f:45:4a:18:8c:
31:26:90:80:8e:aa:76:60:4b:57:02:75:07:b3:d7:
5e:74:e2:ba:8f:89:f1:44:2d:76:b2:fe:c6:43:52:
c4:a6:14:d3:66:d1:14:e8:48:1d:bc:53:35:b6:dd:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CA:40:10:62:D4:FD:FB:20:34:43:60:B2:25:25:B3:E2:AD:66:C2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.129.0/24
82.41.158.0/24
178.83.193.0/24
178.83.245.0/24
Signature Algorithm: sha256WithRSAEncryption
52:de:b2:30:95:4b:b8:e9:0d:cd:c2:0e:37:4b:a9:f9:77:5d:
cf:42:dc:16:6f:28:89:b3:95:9e:5c:4d:b5:e5:e3:de:49:33:
80:a6:c2:30:b2:60:2e:11:7e:48:df:05:a9:29:96:4b:6b:57:
6d:b7:4a:0f:ce:ff:85:a3:60:05:eb:b0:29:08:cc:fb:e9:b7:
fe:96:e6:ce:1c:00:1c:7d:6d:e1:09:63:37:36:5c:93:03:47:
03:95:03:43:3e:4d:ec:99:df:67:b2:37:03:ee:89:5c:73:f0:
95:5e:5c:8f:21:9e:37:8e:f5:fe:54:3d:10:72:9a:37:dd:62:
d4:bf:e0:bd:cc:18:60:1b:55:a3:cb:4f:2f:39:01:68:eb:4b:
28:8b:05:4a:e4:9c:85:74:82:3b:db:ca:f5:32:28:77:b8:0a:
39:3d:07:49:57:54:aa:b9:d6:51:7c:24:13:3f:1b:2d:f8:d6:
d0:e3:56:15:55:af:f5:21:56:a2:3e:37:c0:22:86:c0:23:cf:
2a:09:9e:01:8c:59:37:04:13:6c:46:e8:19:3a:88:7c:fd:fb:
5e:41:5e:18:57:09:dc:d6:08:7f:fa:57:c8:d1:c3:20:15:d2:
f6:1a:64:f9:e8:e5:cf:9e:4d:9e:77:2d:bc:b0:ad:7e:5a:bc:
14:76:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:42 2026 by rpki-client