Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218338.roa
File:                     AS218338.roa (raw, json)
Hash identifier:          qeHm9zSwZOJZOifMRJKb+WeYEuu0uaglaIDOe7hxqEQ=
Subject key identifier:   95:9F:0D:0E:C2:EB:02:61:36:4B:5D:A1:8C:36:A6:6D:D0:E2:B1:09
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       3CDB790B47C01CCF01BEC737DEF4F246B855BE97
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218338.roa
Signing time:             Sat 24 Oct 2026 11:12:07 +0000
ROA not before:           Sat 24 Oct 2026 11:07:07 +0000
ROA not after:            Sat 23 Oct 2027 11:12:07 +0000
asID:                     218338
IP address blocks:        2a14:7583:efc5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 11:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:db:79:0b:47:c0:1c:cf:01:be:c7:37:de:f4:f2:46:b8:55:be:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Oct 24 11:07:07 2026 GMT
            Not After : Oct 23 11:12:07 2027 GMT
        Subject: CN=959F0D0EC2EB0261364B5DA18C36A66DD0E2B109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:64:f4:da:f1:69:91:4f:ea:c3:f6:3b:d2:
                    e4:bc:67:78:79:44:34:51:78:00:9b:64:e1:08:6d:
                    88:33:c0:3e:b3:5f:8c:dc:f8:77:d7:b4:a7:91:4d:
                    a1:d2:65:3a:87:50:24:ef:f6:f5:07:20:7e:77:0a:
                    4f:66:60:c8:32:16:f7:ca:06:d5:91:6e:be:d4:cb:
                    9a:5b:c8:18:27:9d:a9:9f:2d:dc:7d:95:75:1e:29:
                    4b:fa:d3:f2:74:f8:89:c9:47:75:92:0f:36:40:49:
                    3a:35:13:8d:7e:83:48:1d:6c:33:ea:a8:2d:5f:f4:
                    d1:f4:88:9c:7e:c6:ad:e0:17:b5:eb:05:26:ef:e0:
                    90:e9:57:11:b4:e1:30:c3:33:95:12:5b:5d:b4:07:
                    5f:b6:a1:eb:06:37:be:b3:df:01:ae:e0:c6:14:e0:
                    b8:a6:74:e5:43:3b:ca:e2:c7:55:9b:a7:a4:b8:cf:
                    6f:5a:cb:99:26:34:a8:a9:af:a3:c4:b8:6d:02:95:
                    75:85:fe:36:7c:ff:4c:f0:f1:09:10:3a:6f:3b:a2:
                    10:f6:04:dd:bc:16:1e:a2:97:fb:f4:df:e3:55:4a:
                    2e:f1:1b:52:b1:9d:ff:48:7b:c9:1c:4c:8e:67:1b:
                    78:41:ba:00:12:25:2a:61:b1:09:ae:35:62:6d:4e:
                    ce:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9F:0D:0E:C2:EB:02:61:36:4B:5D:A1:8C:36:A6:6D:D0:E2:B1:09
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:efc5::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:f6:a3:b7:bc:4d:fa:66:80:be:78:8f:b7:a9:36:c2:ef:30:
         f7:d2:24:eb:12:a1:53:5c:b3:5e:90:52:eb:23:42:3e:31:15:
         68:35:0e:26:ca:81:70:ee:0a:9f:9a:06:9c:88:70:e2:e2:4d:
         4a:5d:0f:bf:ca:36:84:af:2f:59:d9:be:33:50:17:c4:0b:8e:
         f7:be:22:aa:a0:f1:c5:12:db:0e:3b:4a:3a:8a:24:f5:1c:ab:
         6b:64:6f:31:49:99:ce:d1:e3:a7:a3:17:1d:72:ff:6e:f7:c8:
         25:4b:12:96:99:47:ab:b8:fd:29:36:80:36:af:aa:f4:8a:49:
         7e:21:72:44:b0:ae:07:61:56:79:b4:05:1c:19:4f:9a:d0:81:
         ae:12:20:df:a6:59:5b:f1:21:d9:78:cd:63:f5:34:bd:81:12:
         75:f8:ee:f1:c0:2d:55:28:ec:13:fd:7e:34:03:3a:fe:7f:5c:
         ea:b3:3d:ec:b2:1c:49:bf:0e:95:a0:5b:77:9d:78:22:c8:25:
         b3:92:18:14:19:52:0a:18:1f:06:d0:69:36:7c:07:da:d8:cc:
         98:25:3f:32:9f:5b:18:93:69:0b:a0:f5:53:c3:8d:a6:26:95:
         65:9d:b6:93:12:82:00:a5:55:8c:a7:78:bd:8f:45:fc:d1:a5:
         05:2f:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----