Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402203.roa
File: AS402203.roa (raw, json)
Hash identifier: RBB+iEPL4f+zWo1JXWW/xS2hxv/9F/ucKuPGMpoMwlE=
Subject key identifier: 88:09:46:F1:24:A0:76:6A:DB:E4:7A:E6:36:58:FA:CD:CB:A6:63:47
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 52A227AAA17A43BA1355BA31AF9FE1DC1DDFA8CD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402203.roa
Signing time: Mon 23 Mar 2026 05:54:48 +0000
ROA not before: Mon 23 Mar 2026 05:49:48 +0000
ROA not after: Mon 22 Mar 2027 05:54:48 +0000
asID: 402203
IP address blocks: 82.26.131.0/24 maxlen: 24
82.39.155.0/24 maxlen: 24
84.75.8.0/24 maxlen: 24
84.75.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a2:27:aa:a1:7a:43:ba:13:55:ba:31:af:9f:e1:dc:1d:df:a8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 23 05:49:48 2026 GMT
Not After : Mar 22 05:54:48 2027 GMT
Subject: CN=880946F124A0766ADBE47AE63658FACDCBA66347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a9:99:3c:09:00:de:aa:a0:b5:64:37:59:53:
50:3e:f8:9d:52:94:13:a1:ab:99:71:d5:97:cc:58:
4f:f4:ba:bb:51:1f:c7:2c:db:53:57:ec:fa:0f:bc:
b5:fa:dd:23:53:5f:8c:29:a0:f8:8a:ee:46:11:ef:
71:08:f4:33:50:4a:f0:3f:80:c5:9d:6f:54:57:05:
8e:b9:62:98:51:c1:51:0d:1e:97:65:f4:ff:db:fa:
93:85:f1:cb:7a:8f:22:6a:f0:18:57:26:bb:a3:e3:
92:2d:7f:9f:44:83:31:44:2b:34:52:d5:6f:c8:9f:
e3:05:a0:21:8c:58:01:4b:44:09:9d:23:98:93:f4:
0f:34:15:57:27:54:28:c9:01:5a:81:4b:32:02:9e:
24:33:92:97:e4:70:99:94:bb:c5:5c:30:a0:05:4e:
39:f7:c2:d0:69:e1:09:b9:c6:6b:87:39:13:1e:47:
18:27:cb:8e:68:38:87:28:0d:6c:8f:69:dd:58:3b:
c0:ec:ef:23:14:c5:3a:74:cb:08:7b:3b:c9:5d:f0:
10:49:66:9c:d9:00:97:de:bd:17:9d:06:64:a6:c5:
69:10:67:a3:58:fb:0d:12:2c:05:84:a9:3c:25:3f:
af:b8:28:20:7f:74:bb:f8:e5:81:98:1b:c3:32:0f:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:09:46:F1:24:A0:76:6A:DB:E4:7A:E6:36:58:FA:CD:CB:A6:63:47
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.131.0/24
82.39.155.0/24
84.75.8.0/23
Signature Algorithm: sha256WithRSAEncryption
12:4f:88:0a:a9:09:54:45:bf:06:81:fc:c0:2c:c2:8e:8e:0a:
03:b6:88:9f:68:ab:52:eb:cd:41:d5:4c:08:b8:7c:b3:41:8e:
83:6d:52:7b:f7:55:83:1e:3f:47:df:9a:73:e7:4f:15:c8:30:
bb:74:62:24:94:58:e8:49:78:e8:a6:0a:49:44:ad:ec:4b:cc:
6b:d3:8b:29:22:48:b4:29:16:59:02:b2:2a:de:33:45:12:9b:
2a:0e:51:66:3d:49:1b:99:25:7f:5e:d0:b0:e7:bc:e6:7d:aa:
10:76:92:7a:fb:b7:57:08:bd:30:f6:f4:62:96:c5:ec:c4:9d:
13:a8:19:a9:8b:83:96:e0:b4:28:71:df:81:fe:74:0f:51:33:
02:f6:62:31:d8:13:0c:8d:3d:b7:15:1a:2b:d0:de:0b:b8:96:
31:06:5f:cd:14:72:3f:80:82:67:90:9c:99:a6:d6:f8:98:ab:
a3:b3:70:2a:33:4b:0e:60:64:5c:ff:89:78:17:e9:d1:02:24:
78:1a:8d:fc:52:35:9f:27:57:4f:e7:83:94:0d:0e:37:a9:b8:
1a:da:18:a6:82:e1:b4:db:ba:6d:1b:5a:a7:03:04:87:e3:6d:
e0:9e:d2:65:dd:b4:e6:64:8a:1a:87:20:d5:0b:a7:13:c2:e9:
cf:6b:45:2c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUUqInqqF6Q7oTVboxr5/h3B3fqM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMjMwNTQ5NDhaFw0yNzAzMjIwNTU0NDhaMDMxMTAvBgNV
BAMTKDg4MDk0NkYxMjRBMDc2NkFEQkU0N0FFNjM2NThGQUNEQ0JBNjYzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3qZk8CQDeqqC1ZDdZU1A++J1S
lBOhq5lx1ZfMWE/0urtRH8cs21NX7PoPvLX63SNTX4wpoPiK7kYR73EI9DNQSvA/
gMWdb1RXBY65YphRwVENHpdl9P/b+pOF8ct6jyJq8BhXJruj45Itf59EgzFEKzRS
1W/In+MFoCGMWAFLRAmdI5iT9A80FVcnVCjJAVqBSzICniQzkpfkcJmUu8VcMKAF
Tjn3wtBp4Qm5xmuHORMeRxgny45oOIcoDWyPad1YO8Ds7yMUxTp0ywh7O8ld8BBJ
ZpzZAJfevRedBmSmxWkQZ6NY+w0SLAWEqTwlP6+4KCB/dLv45YGYG8MyDx5TAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUiAlG8SSgdmrb5HrmNlj6zcumY0cwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAyMjAzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhqD
AwQAUiebAwQBVEsIMA0GCSqGSIb3DQEBCwUAA4IBAQAST4gKqQlURb8GgfzALMKO
jgoDtoifaKtS681B1UwIuHyzQY6DbVJ791WDHj9H35pz508VyDC7dGIklFjoSXjo
pgpJRK3sS8xr04spIki0KRZZArIq3jNFEpsqDlFmPUkbmSV/XtCw57zmfaoQdpJ6
+7dXCL0w9vRilsXsxJ0TqBmpi4OW4LQocd+B/nQPUTMC9mIx2BMMjT23FRor0N4L
uJYxBl/NFHI/gIJnkJyZptb4mKujs3AqM0sOYGRc/4l4F+nRAiR4Go38UjWfJ1dP
54OUDQ43qbga2himguG027ptG1qnAwSH423gntJl3bTmZIoahyDVC6cTwunPa0Us
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:46 2026 by rpki-client