Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
File: AS402857.roa (raw, json)
Hash identifier: VpZB7GmstM5WmfEQ3FpuxQ01SppdVhpuYtwJJLny8P0=
Subject key identifier: 4E:21:69:3A:78:BA:BD:4E:BE:76:C3:50:24:9E:5B:A5:A9:BB:EA:66
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1294F7817E00F0FA56CC6580B9092B119EBB39B8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
Signing time: Mon 21 Sep 2026 09:34:42 +0000
ROA not before: Mon 21 Sep 2026 09:29:42 +0000
ROA not after: Mon 20 Sep 2027 09:34:42 +0000
asID: 402857
IP address blocks: 82.25.47.0/24 maxlen: 24
82.27.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:94:f7:81:7e:00:f0:fa:56:cc:65:80:b9:09:2b:11:9e:bb:39:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 21 09:29:42 2026 GMT
Not After : Sep 20 09:34:42 2027 GMT
Subject: CN=4E21693A78BABD4EBE76C350249E5BA5A9BBEA66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:e9:4a:d8:0a:75:76:48:c0:72:91:81:7c:
f1:93:cd:67:28:c7:d4:1a:42:bc:b4:4c:8b:4b:71:
53:54:26:e2:92:3a:ae:8d:a8:3b:6e:99:d5:50:b7:
81:fd:de:e8:8f:89:8b:7d:0f:6d:2e:d0:72:c1:05:
b0:5c:24:68:55:d3:e8:94:03:5b:f9:7a:2d:51:ac:
f0:0f:3b:0f:8f:15:7a:e4:79:78:a3:6a:3b:61:68:
17:9f:58:28:da:1c:68:32:e1:3c:47:5f:bf:fe:6d:
82:8e:67:a3:e5:1b:e7:7c:36:6a:b5:49:d7:90:03:
39:c8:23:fc:53:d5:f5:54:f5:31:4b:bc:d8:ee:8a:
57:1c:a9:d8:c2:3c:ca:55:6a:a4:c0:2d:59:da:38:
f9:1c:59:5a:cf:a0:fa:aa:82:35:41:51:b3:09:f0:
b7:0a:0a:8b:b2:81:d5:50:6f:2e:6b:a1:48:49:6a:
65:ce:48:dc:db:8c:89:1f:b9:31:db:80:c8:42:a7:
a5:09:cc:7e:fd:ca:32:98:06:c7:96:f2:eb:47:1b:
7d:14:d9:2a:79:d2:00:03:f2:79:ab:45:6d:44:de:
f5:e1:fa:f4:af:6c:3e:e6:37:e7:d9:a6:83:50:ec:
7e:3a:2c:52:85:57:de:1c:5a:41:dd:bc:0f:61:be:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:21:69:3A:78:BA:BD:4E:BE:76:C3:50:24:9E:5B:A5:A9:BB:EA:66
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.47.0/24
82.27.41.0/24
Signature Algorithm: sha256WithRSAEncryption
51:42:52:a1:4c:f1:16:94:c5:ee:88:8d:24:1c:3b:cf:a4:84:
64:22:fb:b5:4d:a0:df:47:92:4d:81:10:ad:9f:59:24:2e:a3:
d5:13:da:e4:b0:29:c1:be:98:b7:a5:78:16:06:60:66:c0:6a:
8e:e9:10:1e:09:6a:d9:39:12:2d:0b:e6:7b:03:58:3d:c1:9a:
02:ae:33:59:ec:7b:77:8c:a0:97:bd:a0:f0:74:b5:97:0f:be:
62:50:62:0c:61:d1:cf:24:26:5a:c3:8a:94:c2:88:7e:96:75:
65:3f:c7:7a:50:54:31:84:79:11:cb:6e:59:0f:63:1f:db:8e:
ac:46:82:33:fd:e8:ca:36:0e:60:f5:b5:90:f1:11:cc:0d:ff:
b8:ae:3c:69:3c:60:66:35:dd:00:2f:1d:a4:cc:34:34:8d:42:
be:8b:42:94:ca:26:3b:50:00:4e:0b:02:2c:72:26:cb:60:81:
6c:48:34:94:67:da:87:43:81:e7:03:58:0b:2f:d8:ce:99:96:
3d:5c:2f:98:ef:2a:3a:b3:0e:a1:3f:4f:24:73:81:bf:24:57:
1b:50:9d:20:b9:05:fc:04:4c:84:65:64:8f:47:86:f5:f0:3b:
d3:36:1f:da:36:81:fa:84:ee:72:f4:a6:1f:d7:20:ec:16:70:
2d:dd:f9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:07:11 2026 by rpki-client