Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218479.roa
File: AS218479.roa (raw, json)
Hash identifier: Wsd+ofF41un48TZZbl1976vPNF+cY0WhUfWEPveFUcM=
Subject key identifier: AB:27:0C:44:CE:76:54:02:21:A7:4C:F9:2C:89:DF:D9:00:B0:EA:51
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7184108020C74BD61C2AC76EE0F66D74D5CA21AA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218479.roa
Signing time: Fri 09 Oct 2026 11:03:17 +0000
ROA not before: Fri 09 Oct 2026 10:58:17 +0000
ROA not after: Fri 08 Oct 2027 11:03:17 +0000
asID: 218479
IP address blocks: 2a13:9500:46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:84:10:80:20:c7:4b:d6:1c:2a:c7:6e:e0:f6:6d:74:d5:ca:21:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 10:58:17 2026 GMT
Not After : Oct 8 11:03:17 2027 GMT
Subject: CN=AB270C44CE76540221A74CF92C89DFD900B0EA51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:8f:67:c6:f7:d4:a1:e8:f0:73:72:d0:de:
27:24:2c:d5:6f:e6:cb:22:49:0f:08:c9:2b:d1:84:
66:d9:51:4a:8d:93:8a:76:c4:83:32:69:40:b8:e1:
a4:df:e3:42:d6:af:a0:fe:94:99:70:de:d9:ff:14:
ca:f2:e7:e0:db:b5:29:8c:ba:aa:93:b8:95:4b:55:
29:d6:74:19:22:e9:fa:07:79:e7:87:25:b0:9d:2a:
31:03:f6:44:0e:dc:c3:b0:f4:fb:d9:c3:70:e8:7d:
c9:60:41:ef:7e:db:71:c5:94:76:91:89:0b:b3:53:
f1:57:79:41:50:cf:0e:84:32:6a:35:41:f7:dc:5f:
13:62:4c:bb:d0:11:d2:e7:ff:f2:df:8c:ce:bf:49:
34:4a:44:69:5f:e4:79:48:16:12:fd:bc:69:69:a6:
4f:ee:ab:23:c4:23:17:2f:0d:d0:31:3d:bc:c5:00:
ab:6a:2e:90:0a:09:d8:6e:86:04:3e:bf:fd:cb:60:
db:ef:c6:c3:ec:2a:a9:d5:a2:b5:18:e8:23:3c:52:
c4:75:87:aa:c5:a0:47:3e:6a:9e:4f:6b:35:2c:79:
66:2d:d2:34:51:67:1f:8d:cf:87:0a:14:e5:42:fb:
4e:ca:f2:83:2a:85:ee:0a:0c:3f:b4:d8:68:ee:70:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:0C:44:CE:76:54:02:21:A7:4C:F9:2C:89:DF:D9:00:B0:EA:51
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:46::/48
Signature Algorithm: sha256WithRSAEncryption
16:b1:33:37:87:db:c4:9c:eb:f4:9d:f3:0a:06:a9:01:9a:66:
c7:75:ab:3f:1e:13:d3:ee:63:4c:e7:8f:d1:9c:40:fc:00:41:
d1:1d:f9:95:f0:50:dc:e6:31:cc:14:94:a2:26:8b:23:44:9b:
d4:a3:01:d3:b9:19:20:5e:b6:17:14:92:7a:ed:02:58:66:43:
81:81:0c:3e:a0:10:3b:53:9d:c5:1f:80:26:85:8a:3d:03:f8:
8e:8f:33:c6:e5:d7:67:e6:64:0e:e6:ac:8c:7e:08:fa:de:39:
8c:5c:2f:f5:ae:67:f4:1c:f1:41:49:93:97:d6:66:57:c2:e0:
51:7a:03:34:6e:85:68:d4:76:6f:3e:4e:e1:08:a0:03:d6:cc:
a5:8d:f4:3b:7f:97:4c:97:f2:d5:4c:e5:e0:a3:1b:52:74:78:
a7:6b:4f:c9:df:20:4f:56:48:29:7a:22:cf:2f:c8:91:70:ad:
89:e5:50:51:23:6d:dc:3b:9d:5d:ce:bb:57:29:7c:7e:54:86:
e4:95:15:21:ad:05:f8:87:f3:69:c9:c2:75:af:f9:83:c3:57:
64:9e:a6:71:e0:d6:b1:ec:1d:14:59:ab:1e:5e:bd:f6:0f:7b:
a9:76:b7:b7:d4:6b:25:78:e7:29:d4:87:b0:1f:d9:6b:36:8a:
9a:91:05:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:03:06 2026 by rpki-client