Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218521.roa
File: AS218521.roa (raw, json)
Hash identifier: U9KhQ2TK39Zhey5t2yBHjRx14aiD5YIUAYFJ4QrqlFs=
Subject key identifier: BD:04:9A:BB:F6:69:87:9F:C3:9C:ED:A5:6B:FE:34:E7:14:5D:53:07
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6C415BD2DDAB66CC0E8422C021FD3D49542ACC44
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218521.roa
Signing time: Sun 04 Oct 2026 07:27:58 +0000
ROA not before: Sun 04 Oct 2026 07:22:58 +0000
ROA not after: Sun 03 Oct 2027 07:27:58 +0000
asID: 218521
IP address blocks: 82.39.162.0/24 maxlen: 24
82.39.163.0/24 maxlen: 24
2a13:9500:1eb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:41:5b:d2:dd:ab:66:cc:0e:84:22:c0:21:fd:3d:49:54:2a:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 4 07:22:58 2026 GMT
Not After : Oct 3 07:27:58 2027 GMT
Subject: CN=BD049ABBF669879FC39CEDA56BFE34E7145D5307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:b5:a6:8a:4f:84:bf:1f:45:38:55:62:14:
6f:20:59:ff:ce:40:99:ee:cc:36:e3:65:0f:a1:03:
91:0a:a5:96:d7:d8:44:a0:f2:f6:d6:2f:64:00:d7:
76:84:68:64:f5:51:9c:e7:f4:96:81:d2:31:1a:f9:
4d:d9:06:85:89:88:48:f5:e0:d7:fa:3f:17:e1:6d:
33:2b:7e:3c:1a:db:f0:86:77:7f:4c:26:6f:66:ef:
7f:e8:7f:f0:47:ad:b9:cc:f2:27:6c:e7:12:de:7c:
84:c0:99:ba:97:87:a9:91:59:a1:1c:e6:6e:d3:ab:
02:34:c0:6f:b8:cd:87:a1:e9:2d:b6:59:d1:a4:0c:
0f:8b:ef:2d:96:56:80:86:0a:67:47:67:65:1f:ee:
1f:7a:c7:90:47:b6:ad:ef:df:a8:6a:fa:d9:0b:d5:
3e:5b:f6:7a:0f:ca:e5:fe:ce:44:bf:11:71:29:50:
6d:b6:2e:a9:22:46:21:8f:4f:c6:f8:51:2b:3a:dc:
df:67:b4:2f:40:24:9b:79:2c:90:36:27:ce:c2:42:
c1:74:31:f3:90:1f:22:8a:06:7b:eb:50:ff:61:4a:
c9:ec:8f:ae:fa:01:71:c8:27:0c:da:84:2a:08:74:
c3:e0:13:f3:14:ad:a9:45:a4:03:a5:e2:56:d1:33:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:04:9A:BB:F6:69:87:9F:C3:9C:ED:A5:6B:FE:34:E7:14:5D:53:07
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.162.0/23
IPv6:
2a13:9500:1eb::/48
Signature Algorithm: sha256WithRSAEncryption
60:af:24:df:fc:5c:87:b6:51:99:c9:15:a1:ae:82:e6:ef:7c:
67:07:8e:69:b3:d3:f8:2f:06:c9:97:0d:f6:91:27:88:8a:ca:
07:84:38:21:1b:1e:f8:ac:10:7d:dd:10:6f:94:e7:c6:51:50:
d5:20:1d:af:37:4a:31:c6:b5:90:cb:7c:0f:79:fc:4c:da:17:
cd:47:04:f7:e9:38:4a:17:2a:10:bd:16:5d:90:bf:b0:61:8e:
56:f1:82:eb:65:0d:87:53:5e:f2:eb:bf:98:83:27:b1:b2:3d:
9e:8c:43:00:03:9e:98:0b:7f:28:a5:c6:5c:fb:d7:54:04:d1:
f3:e5:7d:7c:48:a7:0a:bd:50:04:e2:c2:95:e5:dc:6c:6c:7a:
b0:f9:28:77:4b:7a:5a:37:10:1a:6f:8b:f3:a4:27:ce:f3:a4:
d9:f8:ce:7a:2c:b6:9a:9c:a6:97:b8:7c:34:05:96:3c:15:33:
0e:91:8c:c4:4f:d3:d9:56:35:80:04:3e:bd:58:e6:fc:99:03:
b9:38:d2:46:53:34:1e:7a:2c:48:df:18:1d:1c:57:26:51:94:
5f:fb:4d:3e:b3:00:67:0f:0b:34:9a:50:79:9b:ee:11:43:ae:
c5:0c:4d:22:d1:d8:1f:5a:17:eb:1f:ac:b1:d0:af:0d:cb:89:
bf:1b:48:3b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUbEFb0t2rZswOhCLAIf09SVQqzEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMDQwNzIyNThaFw0yNzEwMDMwNzI3NThaMDMxMTAvBgNV
BAMTKEJEMDQ5QUJCRjY2OTg3OUZDMzlDRURBNTZCRkUzNEU3MTQ1RDUzMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0rWmik+Evx9FOFViFG8gWf/O
QJnuzDbjZQ+hA5EKpZbX2ESg8vbWL2QA13aEaGT1UZzn9JaB0jEa+U3ZBoWJiEj1
4Nf6PxfhbTMrfjwa2/CGd39MJm9m73/of/BHrbnM8ids5xLefITAmbqXh6mRWaEc
5m7TqwI0wG+4zYeh6S22WdGkDA+L7y2WVoCGCmdHZ2Uf7h96x5BHtq3v36hq+tkL
1T5b9noPyuX+zkS/EXEpUG22LqkiRiGPT8b4USs63N9ntC9AJJt5LJA2J87CQsF0
MfOQHyKKBnvrUP9hSsnsj676AXHIJwzahCoIdMPgE/MUralFpAOl4lbRM9DXAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUvQSau/Zph5/DnO2la/405xRdUwcwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE4NTIxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBUiei
MA8EAgACMAkDBwAqE5UAAeswDQYJKoZIhvcNAQELBQADggEBAGCvJN/8XIe2UZnJ
FaGugubvfGcHjmmz0/gvBsmXDfaRJ4iKygeEOCEbHvisEH3dEG+U58ZRUNUgHa83
SjHGtZDLfA95/EzaF81HBPfpOEoXKhC9Fl2Qv7BhjlbxgutlDYdTXvLrv5iDJ7Gy
PZ6MQwADnpgLfyilxlz711QE0fPlfXxIpwq9UATiwpXl3GxserD5KHdLelo3EBpv
i/OkJ87zpNn4znostpqcppe4fDQFljwVMw6RjMRP09lWNYAEPr1Y5vyZA7k40kZT
NB56LEjfGB0cVyZRlF/7TT6zAGcPCzSaUHmb7hFDrsUMTSLR2B9aF+sfrLHQrw3L
ib8bSDs=
-----END CERTIFICATE-----
Generated at Sat Oct 17 13:11:13 2026 by rpki-client