Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218797.roa
File: AS218797.roa (raw, json)
Hash identifier: 1gI6RSTTZZSgUJ6+NmtPNQIELMhuD7wtkosHo2G6gcY=
Subject key identifier: 73:79:C8:25:C9:0D:9B:A5:50:0C:ED:BB:6A:80:C7:7E:E6:7F:DF:84
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 13AAA5E4752BE64BC9AC21C77D630FFB0AAC678C
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218797.roa
Signing time: Sat 24 Oct 2026 10:22:15 +0000
ROA not before: Sat 24 Oct 2026 10:17:15 +0000
ROA not after: Sat 23 Oct 2027 10:22:15 +0000
asID: 218797
IP address blocks: 82.139.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:aa:a5:e4:75:2b:e6:4b:c9:ac:21:c7:7d:63:0f:fb:0a:ac:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 24 10:17:15 2026 GMT
Not After : Oct 23 10:22:15 2027 GMT
Subject: CN=7379C825C90D9BA5500CEDBB6A80C77EE67FDF84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:3b:26:ce:bd:66:bc:cd:65:e5:71:77:00:
b6:ec:4a:e7:e4:57:6f:81:40:3d:b9:70:77:83:e1:
2e:e1:44:ef:34:7e:22:d7:25:d3:59:cf:16:05:a0:
d9:25:8b:e1:47:9e:6e:2a:d7:8c:5e:56:cb:66:73:
82:4c:af:f1:73:bb:d6:d6:f1:10:01:83:a5:57:af:
89:8c:d6:5c:ec:60:7e:6c:a6:af:43:6f:b9:ea:89:
ba:b6:25:1b:64:73:21:69:1b:f1:33:1e:c7:1e:6a:
35:a0:1b:a6:d0:80:2f:78:d7:c4:ec:b9:61:11:f6:
14:5c:84:f3:9a:af:22:46:fe:ba:07:7c:83:97:09:
63:4b:80:ac:1e:9f:ed:b1:db:98:67:29:10:4c:97:
a6:e0:3b:d2:f4:bd:4b:51:1c:68:38:db:d4:3b:4f:
46:ae:39:30:e6:2e:42:19:ec:21:77:98:bd:a5:a5:
b7:f3:1a:51:b9:30:7e:09:a2:b0:46:99:63:c2:e3:
09:cd:0b:03:a0:b5:27:15:0f:a3:a9:aa:00:b6:16:
19:ea:ed:97:8e:d2:46:15:b4:fb:3c:4b:a5:f0:50:
3e:60:11:a2:48:70:eb:c8:fe:1e:7d:23:d6:bc:b7:
7f:f6:e8:96:e5:24:56:fb:23:f7:7d:0c:3d:b8:1f:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:79:C8:25:C9:0D:9B:A5:50:0C:ED:BB:6A:80:C7:7E:E6:7F:DF:84
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218797.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.216.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e3:a9:66:50:5d:15:55:fc:b9:eb:aa:77:2a:b9:ba:5b:95:
cb:48:db:e7:98:9c:41:a3:b4:6e:28:2d:aa:83:b0:40:66:e7:
27:8e:48:31:ec:0f:3d:de:32:3b:03:d0:46:2c:db:76:ec:92:
68:9a:9b:77:28:30:0f:a5:71:24:c0:c8:33:f9:e0:7a:49:62:
7e:b5:e5:06:c1:65:08:47:d4:b7:dd:f3:89:21:08:86:9f:09:
8d:26:ff:9e:f6:fb:95:0d:dd:04:df:0e:9b:cd:44:af:b7:80:
00:28:e2:2a:db:02:e3:9d:c8:e0:29:d2:2b:1c:bb:4e:f1:2c:
87:d9:b8:16:86:e3:0e:80:a3:3c:1c:06:0a:b1:67:d9:6b:95:
5b:c5:79:76:15:30:5a:5b:68:90:d4:f3:ae:84:5d:28:04:72:
c5:43:34:52:c6:99:cf:af:8b:fd:76:5b:fa:32:d1:69:24:ef:
66:44:54:d4:67:59:c1:1d:30:85:72:1d:95:ed:d2:22:59:c9:
37:28:b6:c0:8c:06:99:9c:91:14:f7:08:0f:5c:f5:1b:eb:f2:
1e:52:2c:64:77:be:15:da:61:fe:52:0d:50:a2:27:d3:8a:ff:
fc:3f:b4:38:b8:43:56:bc:f5:e4:37:f0:b9:2e:c8:6e:56:63:
b1:9d:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:46:26 2026 by rpki-client