Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: QzlUL6/p+6okJ+jb4aqQYF2NLmvAlo8SN+xwImTJobs=
Subject key identifier: B6:FA:E9:CD:6E:03:8E:21:CD:A9:DB:04:70:44:C8:D7:57:00:C3:CF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 65ED8B8117F7DFAA609C74B693FE65593963D892
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
Signing time: Tue 22 Sep 2026 16:45:32 +0000
ROA not before: Tue 22 Sep 2026 16:40:32 +0000
ROA not after: Tue 21 Sep 2027 16:45:32 +0000
asID: 402265
IP address blocks: 82.22.124.0/24 maxlen: 24
82.24.105.0/24 maxlen: 24
82.26.205.0/24 maxlen: 24
82.38.19.0/24 maxlen: 24
82.41.135.0/24 maxlen: 24
82.47.160.0/24 maxlen: 24
84.75.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ed:8b:81:17:f7:df:aa:60:9c:74:b6:93:fe:65:59:39:63:d8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 16:40:32 2026 GMT
Not After : Sep 21 16:45:32 2027 GMT
Subject: CN=B6FAE9CD6E038E21CDA9DB047044C8D75700C3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:00:10:87:b6:6d:fc:b2:f7:14:84:58:04:
f6:57:0c:f0:08:11:23:84:ac:23:e5:32:06:de:55:
81:9c:09:da:87:ed:bd:48:27:81:a0:26:69:79:3f:
6f:22:47:f9:9b:1e:fb:a1:0c:71:4f:ca:a6:94:08:
74:68:42:22:24:12:5b:f2:c2:ed:4c:19:2e:45:88:
4d:c6:a2:7a:b8:4d:07:e3:77:3b:f9:f4:cb:8a:9d:
9c:71:c0:f5:7d:57:d2:74:58:50:59:42:cf:40:38:
d1:fe:4c:b8:3b:40:a3:6a:98:6c:99:33:6c:5d:15:
b6:e4:22:95:47:ba:13:e0:b3:f9:19:71:39:fb:c9:
0b:18:34:01:00:2f:e0:65:dd:5e:56:5f:8d:64:24:
0c:cd:74:4c:8e:51:99:90:2b:4c:93:34:29:5d:02:
3c:02:e2:35:67:f6:fa:cd:5c:ed:a3:dd:e6:07:f5:
06:2d:52:86:5d:bc:97:9b:14:7b:e1:62:20:25:c2:
b7:7c:22:7c:27:e1:2e:45:5e:9e:af:76:ef:a0:26:
0a:8e:00:a3:dd:ad:cd:54:62:54:33:9c:af:e8:47:
a6:01:78:f2:4f:73:82:ab:1f:45:a1:04:da:d3:6f:
68:72:89:15:fe:f3:7f:bd:a6:e9:e8:3b:e7:c7:fa:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FA:E9:CD:6E:03:8E:21:CD:A9:DB:04:70:44:C8:D7:57:00:C3:CF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.124.0/24
82.24.105.0/24
82.26.205.0/24
82.38.19.0/24
82.41.135.0/24
82.47.160.0/24
84.75.164.0/24
Signature Algorithm: sha256WithRSAEncryption
30:fb:41:f2:43:6f:e4:73:90:ed:3c:bb:3f:de:e5:f2:a0:f1:
0d:40:5f:c3:73:fd:97:2c:88:3b:1a:35:a5:cd:41:85:c8:04:
a8:71:38:c0:7f:f8:e9:ec:cc:ea:8e:59:90:83:75:65:77:d0:
96:c8:84:71:86:9a:23:c4:ce:6d:72:b1:8a:19:ab:d3:9c:ad:
c3:94:3e:7b:d1:31:d5:00:2e:0e:51:e8:37:ee:45:cd:e7:66:
82:8b:da:c0:f8:04:df:0a:e5:f4:d7:c5:71:20:2c:56:b0:8a:
b7:65:48:f6:17:49:d1:c7:7a:35:f1:89:69:f9:5c:55:dd:46:
8e:15:f2:83:a7:ee:96:c8:bc:da:05:13:df:ad:98:1e:ef:96:
49:4b:16:c9:8a:eb:0d:dd:4e:a6:a2:ea:a7:31:e3:5a:15:a8:
37:23:b0:f6:a0:7a:89:a8:71:8c:6a:3d:df:28:5c:1f:3c:de:
36:1f:e5:53:7d:b4:66:d3:b3:be:68:3a:5d:e5:ba:49:e6:77:
a1:e0:2c:da:16:cf:08:74:27:5e:9c:01:14:1d:df:1d:9e:c4:
51:a2:4b:e2:3f:71:9a:cb:cb:d6:82:a1:d1:34:21:a0:1a:0a:
2d:05:f0:10:84:93:f2:ea:9c:90:94:d2:7d:69:9f:7b:f2:93:
62:21:66:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:46:30 2026 by rpki-client