Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218955.roa
File: AS218955.roa (raw, json)
Hash identifier: NyhMhQLM99M2U6XNM9Cmy7gmgC1FopFyWEr04msetOg=
Subject key identifier: 9E:C2:7B:CF:58:E3:7D:62:FB:82:70:BD:43:13:9D:A7:6E:F4:ED:E5
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 332BAFDE07052C542E906A6F0ECD51406F77C2E3
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218955.roa
Signing time: Fri 02 Oct 2026 13:03:58 +0000
ROA not before: Fri 02 Oct 2026 12:58:58 +0000
ROA not after: Fri 01 Oct 2027 13:03:58 +0000
asID: 218955
IP address blocks: 5.199.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2b:af:de:07:05:2c:54:2e:90:6a:6f:0e:cd:51:40:6f:77:c2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 2 12:58:58 2026 GMT
Not After : Oct 1 13:03:58 2027 GMT
Subject: CN=9EC27BCF58E37D62FB8270BD43139DA76EF4EDE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:09:fa:d6:1d:76:5c:b2:78:71:d8:da:20:
cb:3c:51:e7:af:f6:28:6a:6f:97:b6:59:18:e6:de:
31:28:10:26:6d:89:d0:fb:61:67:7c:a3:db:80:e1:
57:8b:47:d7:15:ec:06:b8:9c:ac:12:dd:ef:1b:7b:
e0:c1:33:87:ab:7e:c4:98:ea:50:45:a1:1d:4e:eb:
44:1a:d9:ac:f0:fc:a9:7f:3d:9d:ad:8f:97:56:e3:
af:31:78:17:83:06:01:75:f6:fe:32:07:8a:87:60:
29:d0:10:e3:15:13:2b:57:86:fd:6b:50:be:62:c6:
a5:37:1d:2c:ad:a2:43:c9:b8:2f:ba:d9:89:35:72:
62:fe:50:06:7a:48:46:ea:c9:0b:c3:6a:38:04:c1:
18:2d:e1:54:8f:c7:d2:0b:ba:0f:22:67:4e:84:5f:
41:69:eb:d3:5f:79:92:64:48:9b:5c:9c:12:08:a6:
21:72:70:05:39:cc:41:09:a7:38:82:ac:34:58:95:
32:69:cd:77:9c:0d:9a:4e:35:24:2c:4c:e3:c3:bb:
c1:57:09:89:cb:ee:c4:c0:57:5a:cb:4a:00:20:a7:
ef:b4:af:20:ef:40:57:98:b7:82:07:77:ef:94:15:
0f:43:c4:ca:00:2f:2e:4e:3f:33:4e:1a:d9:fc:3e:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:7B:CF:58:E3:7D:62:FB:82:70:BD:43:13:9D:A7:6E:F4:ED:E5
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.32.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6c:63:eb:53:8a:54:e5:9c:55:79:7f:53:f9:d2:b2:54:0d:
23:83:63:18:d0:b4:43:42:77:3b:ff:ed:05:59:4f:ec:21:b5:
aa:6a:7a:5c:64:f5:12:2c:b3:0d:9e:ad:56:4e:7d:b3:f2:40:
d3:e0:bd:d8:0a:6b:00:45:42:b3:c4:44:6f:a3:d2:50:83:48:
53:c1:d9:c4:5e:30:60:9e:77:63:78:be:a0:aa:5d:c2:26:2f:
49:fa:f9:33:19:b0:94:1f:f7:29:37:17:de:c5:42:9e:69:32:
f8:90:0b:3f:aa:e6:5f:c1:2a:99:a1:f8:b5:92:34:4a:0d:ba:
b2:42:e6:33:5d:6e:d0:cd:d2:5e:b6:7d:8f:ce:f7:5f:34:91:
ce:3d:79:ef:e3:f7:7d:96:73:63:a6:94:d1:20:76:f7:01:e3:
db:b2:ef:85:2f:ad:3a:57:a4:1e:f4:6e:18:a5:03:76:d5:c9:
b9:1d:f8:71:64:d3:4a:aa:26:a8:55:a5:42:72:b8:1d:0b:ce:
33:b5:19:57:ce:59:14:a5:fc:de:c1:e2:a2:4f:72:c4:b6:b9:
8a:e3:8e:86:40:a6:51:46:6c:0b:64:85:ac:ef:9f:c9:ec:f4:
e1:7c:97:b9:9c:af:71:23:5a:aa:f4:76:29:68:98:c1:d8:f9:
35:91:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:18:14 2026 by rpki-client