Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7488.roa
File: AS7488.roa (raw, json)
Hash identifier: eOAK1LA/wYDbx7y1iTJCupuIyCCYwI1FKxGDN+pttjE=
Subject key identifier: 06:91:8A:89:FD:BF:33:60:04:98:8A:57:14:46:1E:4C:41:39:50:F1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 74700EFF129A55BD1E50713A98885E8961AC92FF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7488.roa
Signing time: Sun 19 Jul 2026 18:33:15 +0000
ROA not before: Sun 19 Jul 2026 18:28:15 +0000
ROA not after: Sun 18 Jul 2027 18:33:15 +0000
asID: 7488
IP address blocks: 82.39.120.0/21 maxlen: 24
178.83.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:70:0e:ff:12:9a:55:bd:1e:50:71:3a:98:88:5e:89:61:ac:92:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 19 18:28:15 2026 GMT
Not After : Jul 18 18:33:15 2027 GMT
Subject: CN=06918A89FDBF336004988A5714461E4C413950F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:fc:ef:8f:8d:34:f6:91:26:cd:a4:29:88:
3d:09:86:36:3a:56:13:c5:80:54:0c:82:e0:c0:c6:
92:ad:55:19:77:a2:c5:03:26:3a:54:7d:3b:58:80:
d2:50:c0:b0:60:5f:3e:48:75:88:e8:1e:ae:9a:99:
cc:5d:d5:48:ee:77:b5:a3:69:19:54:55:fb:4b:e6:
c8:39:dd:f1:e3:24:c5:3b:1e:a9:43:53:10:41:36:
76:31:5b:aa:36:d4:1a:28:47:2f:0c:16:b6:33:e9:
40:1c:06:6f:b5:be:0f:9d:6f:96:c9:67:a3:32:44:
d6:cb:cb:b4:44:7b:67:97:06:88:12:14:af:1c:00:
01:28:83:3c:b9:c0:09:8e:78:cd:76:28:68:8f:42:
8d:b0:b5:63:88:69:74:28:f6:4d:0f:20:61:fd:4d:
40:ac:b3:fb:43:6d:cb:1c:8c:d2:8c:a5:85:7c:34:
c8:ee:9f:aa:7b:d1:bb:8a:0a:93:8b:12:65:67:36:
23:2c:fd:4e:3c:8c:98:ed:72:a2:4f:ac:97:a5:1d:
49:8c:5c:bd:ab:e2:58:c6:2e:d9:56:e6:ec:4e:2a:
30:25:2a:d8:e0:4f:00:eb:95:59:a9:55:67:d7:a9:
4e:5d:41:5b:33:7d:87:1d:f1:0a:5e:1a:eb:cb:bc:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:8A:89:FD:BF:33:60:04:98:8A:57:14:46:1E:4C:41:39:50:F1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7488.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.120.0/21
178.83.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f3:85:1f:b8:a7:d8:79:04:e4:ab:75:e0:ab:ae:17:fc:5c:
26:ac:18:cb:de:e7:f0:f3:84:16:56:c8:0a:c8:d8:dd:14:d2:
38:20:e9:f7:3c:e4:e8:e1:a1:a5:92:71:94:02:08:9b:a4:71:
6d:1d:ab:33:c2:24:53:4a:dc:18:78:d1:15:9d:6a:37:d0:53:
c3:9d:af:f5:05:ba:e9:55:3c:d2:4b:03:5c:b2:70:29:9d:b3:
88:78:b2:13:d4:22:72:65:7b:97:30:f5:74:eb:0d:df:43:df:
18:c8:68:10:8d:f2:c3:09:55:18:6e:dd:da:81:db:9b:4a:c1:
06:39:79:29:3a:ac:d6:9a:2d:77:7f:c3:0a:a9:b4:12:f6:78:
11:08:fa:36:72:66:38:6d:42:2b:91:b2:ff:24:9d:46:fe:dc:
ae:9f:83:f4:af:25:e7:36:ab:df:5d:07:53:6a:63:65:0e:d0:
1c:31:56:8b:08:67:36:fd:79:1e:c9:15:dd:a2:a9:90:84:e1:
4a:91:26:61:6b:47:e1:c3:bd:ec:11:9b:c3:c4:f3:b8:87:c6:
19:81:bb:d1:ba:8b:32:a0:f5:da:59:f1:f5:09:6b:6e:b9:87:
ed:9e:4b:57:96:f8:22:42:ad:70:8c:5e:57:8d:a1:09:4b:70:
c4:2d:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:16:21 2026 by rpki-client