Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218910.roa
File: AS218910.roa (raw, json)
Hash identifier: 7ltkmc9/do3C9iN+hh0tT+uteoQUndmm0HrjhfmewmI=
Subject key identifier: 91:BA:EA:5A:87:42:2E:61:05:BF:0B:DC:FE:E7:4C:4F:D5:2A:F5:F7
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6AEDBFAAFEFAD133029202A8852B3B09408953F2
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218910.roa
Signing time: Fri 02 Oct 2026 13:03:58 +0000
ROA not before: Fri 02 Oct 2026 12:58:58 +0000
ROA not after: Fri 01 Oct 2027 13:03:58 +0000
asID: 218910
IP address blocks: 5.199.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ed:bf:aa:fe:fa:d1:33:02:92:02:a8:85:2b:3b:09:40:89:53:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 2 12:58:58 2026 GMT
Not After : Oct 1 13:03:58 2027 GMT
Subject: CN=91BAEA5A87422E6105BF0BDCFEE74C4FD52AF5F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:06:ea:e0:15:01:03:c1:8b:09:92:9f:1d:
3a:dd:8d:5e:41:1f:99:35:c2:e8:b3:96:57:05:0d:
88:17:d1:27:29:86:d5:68:10:73:e9:16:3e:b0:33:
9e:5a:63:3f:22:ee:80:98:7e:64:ea:0f:9e:08:e5:
f1:eb:99:18:23:be:f7:ee:63:ec:08:00:9f:e5:ca:
92:d7:d9:16:5d:66:1b:20:09:e9:ba:09:91:ca:20:
99:38:06:09:e2:d5:5e:f1:94:83:cf:2e:32:e2:bc:
50:57:0c:16:b8:8c:7b:3d:0d:26:54:21:bf:20:16:
18:8f:5d:b3:c3:4b:0e:e0:9d:de:14:f3:24:94:ab:
24:e4:be:f3:90:5d:2d:d1:85:12:a5:b4:67:da:48:
37:c4:ab:ea:43:ff:f4:4d:48:f7:d7:9c:d5:6b:5d:
ef:53:17:d1:56:37:1a:ae:aa:7e:fd:6e:e7:cd:bc:
6d:69:cb:c8:54:a6:e2:57:f6:1f:59:e3:a1:c7:d6:
00:6a:08:02:d9:61:9d:ef:4a:01:a5:b2:2a:7b:a7:
bb:d9:90:04:d3:96:80:c4:c9:a2:8d:8f:9c:59:92:
d6:24:2e:9c:aa:26:c0:41:39:39:45:29:cd:b0:aa:
ca:e5:07:a4:fb:55:f4:41:ca:2b:97:9b:df:a2:d0:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BA:EA:5A:87:42:2E:61:05:BF:0B:DC:FE:E7:4C:4F:D5:2A:F5:F7
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.32.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:1f:32:02:f8:a9:67:77:d5:28:90:1f:bb:88:e0:c5:45:e2:
8b:70:9a:26:b6:1c:03:ee:66:7f:ff:9f:df:fe:7d:ee:53:d3:
66:4b:ec:db:4e:da:4d:b3:19:1d:af:89:16:db:74:33:f7:9b:
62:3b:de:fb:90:50:52:ba:1c:71:f3:a0:a2:82:65:63:ec:c9:
c1:28:71:fe:da:6b:94:13:f0:51:0a:8c:cf:94:a6:ed:e8:a0:
61:65:aa:df:f1:64:63:95:56:04:e4:68:f7:eb:74:4c:8f:82:
53:dd:24:f5:64:c4:66:1b:ad:ba:07:e3:49:76:73:38:e5:fa:
ff:71:2a:7b:b4:23:82:07:46:af:b5:72:39:80:9a:f0:09:2b:
09:26:d5:ca:71:df:30:c1:a5:b3:62:d5:b1:38:8a:3e:c5:5e:
97:87:80:27:52:6d:93:80:3e:9b:20:af:c4:68:43:0b:04:83:
9f:6c:63:3b:ae:64:f9:50:5c:cc:b4:ae:4c:4c:ca:0f:5d:3f:
4b:22:dc:e6:da:d0:6d:a9:05:01:6a:b4:11:6a:e4:4a:86:a4:
ad:d9:ab:a0:9a:59:c4:16:bd:9b:54:e9:8c:37:53:20:30:a1:
32:05:5c:f8:b3:b5:5c:ed:3e:26:66:18:f1:2e:0c:13:28:b1:
2e:a2:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:24 2026 by rpki-client