Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218479.roa
File: AS218479.roa (raw, json)
Hash identifier: cBhMAY1SC1MTbRi+sqgQMV/GAYG1ELG2SKWbQYVQZNw=
Subject key identifier: 0A:CB:BB:7B:40:77:C0:56:78:89:CA:63:60:4C:E7:C4:EF:1B:B8:6F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 283891F8975A343814EEB54FB3747F53A972B374
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218479.roa
Signing time: Fri 09 Oct 2026 11:32:59 +0000
ROA not before: Fri 09 Oct 2026 11:27:59 +0000
ROA not after: Fri 08 Oct 2027 11:32:59 +0000
asID: 218479
IP address blocks: 143.14.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 13:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:38:91:f8:97:5a:34:38:14:ee:b5:4f:b3:74:7f:53:a9:72:b3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 9 11:27:59 2026 GMT
Not After : Oct 8 11:32:59 2027 GMT
Subject: CN=0ACBBB7B4077C0567889CA63604CE7C4EF1BB86F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:8b:e3:e8:19:ad:9e:40:93:9f:61:9b:1e:
ef:e3:01:06:ec:1b:49:d5:96:84:cd:ed:23:02:10:
a0:90:d1:54:be:9b:f1:10:c9:c6:96:c8:44:9e:3b:
16:86:44:b0:cc:b4:95:11:22:23:73:ac:82:0c:3e:
fe:3f:45:76:66:83:5a:cf:6e:7b:a5:9b:5b:1c:0a:
09:34:16:10:65:81:00:5f:e5:e2:e6:60:44:c3:10:
76:bf:d5:01:68:7d:43:a7:a5:8b:ac:03:d8:3e:17:
7b:ae:bd:93:15:d4:49:91:c2:8e:7c:75:44:b3:72:
3a:79:af:2f:7f:a2:f0:55:b5:e4:02:ab:e7:3e:1c:
5a:2e:79:45:a3:1e:b7:cb:ad:a7:05:b1:9c:78:97:
06:6f:bf:b4:16:06:05:4d:a1:53:46:7e:a3:e1:cd:
cc:92:e6:96:18:11:cc:16:dc:51:dd:f9:3f:0c:5c:
1c:62:7d:dd:98:22:4f:8c:b8:01:72:dc:2e:7d:8e:
de:10:14:97:e0:b3:49:aa:8f:59:e0:ab:c1:5d:58:
a0:2f:c8:8d:b7:9f:bd:dd:eb:7c:ce:32:50:81:fc:
05:9e:c5:3d:59:2a:75:cb:4e:ef:3f:2f:2d:44:fc:
17:73:5f:d5:8b:cc:2b:6f:43:ec:5d:2d:21:e0:b7:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CB:BB:7B:40:77:C0:56:78:89:CA:63:60:4C:E7:C4:EF:1B:B8:6F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.12.0/24
Signature Algorithm: sha256WithRSAEncryption
01:be:39:25:eb:da:6d:da:f5:d1:47:f8:a3:3b:f6:4f:65:e7:
8b:32:de:28:83:28:63:a9:47:8f:9b:ab:ac:1a:4e:0e:f4:c7:
f3:9f:d4:ee:cb:3a:b0:00:ee:73:64:f6:0d:dd:fe:73:ac:e7:
8b:0e:91:04:64:16:52:eb:89:69:49:95:b0:dc:ae:ce:b7:5e:
21:8f:6b:58:b1:e3:25:3e:63:46:6f:b6:62:00:08:0f:11:0c:
ab:b9:78:da:50:1a:6a:20:63:34:03:87:22:9b:2c:56:57:71:
40:a9:26:5a:79:fe:b2:1d:35:cc:5d:44:35:9a:3a:ed:12:ac:
1d:a3:04:68:2b:42:72:d3:b5:70:0e:8a:d7:3e:45:3c:12:1f:
be:54:48:c4:08:f6:20:8b:cd:cb:8c:3a:9c:44:5f:6c:e4:1f:
e2:49:27:a6:e9:26:fd:df:5d:47:8f:be:01:2a:b2:02:61:08:
5d:e0:82:e7:ef:61:c0:c2:f4:27:6a:19:66:f0:2b:86:96:9c:
90:28:d8:63:f0:22:c1:66:31:02:9e:4f:4c:c7:02:8b:67:e6:
48:a5:07:91:3c:10:42:67:ca:fe:fa:06:74:49:8b:de:34:01:
ed:2c:bc:8d:06:a0:ad:6b:4b:f8:b2:bb:67:40:7a:1e:af:96:
73:8c:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:01:37 2026 by rpki-client