Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218797.roa
File: AS218797.roa (raw, json)
Hash identifier: Sdb1ORcpdWl7bs93obWy6fdssJA7At7117XtrscO0Q0=
Subject key identifier: 2A:FF:49:F7:5F:30:D4:82:FC:CB:36:F7:A1:CC:0F:9E:49:50:09:5B
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 4855948398A57C9328C142730AED70CE0273EDD7
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218797.roa
Signing time: Thu 01 Oct 2026 03:58:51 +0000
ROA not before: Thu 01 Oct 2026 03:53:51 +0000
ROA not after: Thu 30 Sep 2027 03:58:51 +0000
asID: 218797
IP address blocks: 5.199.18.0/24 maxlen: 24
5.199.29.0/24 maxlen: 24
5.199.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:55:94:83:98:a5:7c:93:28:c1:42:73:0a:ed:70:ce:02:73:ed:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 1 03:53:51 2026 GMT
Not After : Sep 30 03:58:51 2027 GMT
Subject: CN=2AFF49F75F30D482FCCB36F7A1CC0F9E4950095B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:4c:4e:c0:0f:c9:d0:84:31:af:0f:b3:bf:
9e:68:d6:03:9b:72:a6:3e:c8:ef:10:40:4a:7c:42:
5a:b8:fb:c1:00:21:de:46:d2:90:bd:ef:72:a4:68:
ae:9d:8d:24:02:bc:37:51:e9:bb:47:3b:05:9f:3d:
92:46:62:58:6e:e5:d4:a3:4a:ca:54:00:09:cc:a5:
a1:61:8b:ef:c8:33:8e:cd:ff:b7:46:0a:7c:fb:d3:
33:d1:8a:b8:a4:28:a0:5a:82:61:b7:34:c0:66:ee:
7a:eb:d9:0f:10:a4:6c:b5:6e:27:29:91:82:2f:8c:
12:44:e9:ff:1b:b6:74:69:7b:3d:cf:89:e9:48:1f:
85:54:aa:c6:41:bd:e0:3e:59:4c:3b:93:94:27:e6:
08:54:9c:b0:03:b4:a6:2c:73:2d:8e:5d:4a:26:31:
56:01:e9:fb:1f:39:6b:42:de:16:53:bf:1a:b1:63:
20:12:b5:aa:8d:15:cd:a8:a0:ad:93:6f:fe:f4:6b:
dd:8c:41:52:5e:4a:4b:85:a4:b1:10:14:b0:54:2b:
dc:e3:ab:23:cb:b4:32:ba:82:f7:05:b4:b4:e9:85:
30:1a:12:c0:42:d9:84:27:18:4a:6f:88:a5:23:aa:
51:16:ce:b4:70:a2:30:6a:9b:b5:1e:f3:ee:b7:a0:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:49:F7:5F:30:D4:82:FC:CB:36:F7:A1:CC:0F:9E:49:50:09:5B
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218797.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
5.199.29.0/24
5.199.51.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bd:5a:61:6d:01:61:51:45:06:3c:6a:85:68:d2:a7:e3:57:
db:4e:72:13:ab:82:a8:77:ac:74:2e:d9:b7:e2:e5:07:9f:40:
04:ba:1a:4c:58:0b:da:ef:eb:c9:07:34:86:b2:86:5f:7b:8d:
50:bd:9a:56:52:65:68:57:8e:8c:a7:f9:0b:8d:8b:dd:9a:11:
70:8c:2c:80:b1:7d:d7:1f:d3:d5:d1:4a:f6:f6:6e:db:4e:c3:
53:ca:3e:7c:81:da:97:80:79:0e:fe:04:df:5f:35:7e:81:aa:
89:4b:88:03:fe:f1:27:b4:7a:90:f3:77:37:8b:b6:28:4f:3f:
b7:08:a8:7a:c8:b6:2c:78:c9:75:10:77:0d:34:b8:4a:26:38:
ce:e0:41:b1:d8:29:83:5f:20:98:17:f5:17:d4:c1:0a:8a:b9:
ac:81:a9:e8:69:4b:aa:18:c2:c9:82:ba:91:2d:e3:c5:db:3d:
23:47:15:82:f7:32:f1:08:dc:75:47:e5:26:ea:08:c3:c1:9b:
7c:dc:6b:0c:e0:48:f0:da:66:22:04:08:56:80:c7:43:31:f8:
95:3c:51:5e:a0:88:81:b7:3c:ef:68:f5:30:ca:c4:c3:26:5f:
ce:ee:d5:bc:1c:a9:ae:78:b2:3f:c0:fa:24:fb:50:f5:a0:20:
45:9d:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:18:30 2026 by rpki-client