Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218701.roa
File: AS218701.roa (raw, json)
Hash identifier: p9xAtVS0YM+wRlGFMpS5N631KjXEZsDOfnxVouGDxq4=
Subject key identifier: 54:0D:29:05:2E:7A:B2:6D:B5:23:F5:92:9E:2B:64:54:72:9C:2D:7B
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6D9083A2E2C510404FDAF30CD12A99510A784C3A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218701.roa
Signing time: Thu 22 Oct 2026 12:09:46 +0000
ROA not before: Thu 22 Oct 2026 12:04:46 +0000
ROA not after: Thu 21 Oct 2027 12:09:46 +0000
asID: 218701
IP address blocks: 143.20.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:90:83:a2:e2:c5:10:40:4f:da:f3:0c:d1:2a:99:51:0a:78:4c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 22 12:04:46 2026 GMT
Not After : Oct 21 12:09:46 2027 GMT
Subject: CN=540D29052E7AB26DB523F5929E2B6454729C2D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:eb:21:6a:e3:f2:f1:db:8f:96:ca:8a:66:
87:f4:c5:95:82:fe:d5:ad:cd:93:45:9a:4d:6c:42:
13:1a:9d:0e:4c:6d:81:1c:74:90:4d:9c:ac:d7:04:
78:29:c6:69:4e:15:b7:34:3f:dd:13:35:04:13:80:
a9:bf:09:ba:2a:18:37:29:c3:d8:04:f1:ae:f4:88:
b9:5e:93:35:c5:3e:12:02:81:98:43:1d:22:06:f9:
0c:4d:62:08:8f:1f:6f:42:57:6f:d8:21:74:61:ba:
d4:c1:0b:eb:84:34:5e:88:12:26:02:46:48:3d:8b:
59:1f:bc:8d:af:76:9f:9e:15:14:65:e3:51:ad:16:
db:ec:e3:bd:ed:3f:3c:27:26:4a:5f:15:2b:65:eb:
57:8e:ae:cc:d1:8f:ff:79:96:5b:92:d0:08:0b:16:
12:d5:ff:7d:c4:3c:bc:e3:cc:c0:aa:65:23:49:b3:
c2:e8:10:ff:4b:97:9b:71:8e:81:21:27:5b:5f:fe:
b5:31:4e:d4:26:e5:4e:79:a3:13:b6:5d:0a:af:cb:
a4:33:d9:31:79:72:38:07:3c:a6:05:87:8b:c9:b0:
9c:35:26:c4:a1:c6:93:34:87:c8:03:b9:ad:77:de:
11:c8:b9:5b:db:18:1a:5f:06:ac:13:c6:f6:d5:c4:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0D:29:05:2E:7A:B2:6D:B5:23:F5:92:9E:2B:64:54:72:9C:2D:7B
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218701.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.70.0/23
Signature Algorithm: sha256WithRSAEncryption
43:27:f6:88:99:4b:dc:bb:c3:63:fd:ae:ec:ff:77:19:46:dd:
0e:bb:8c:15:bd:0e:47:30:ed:00:65:f5:f2:17:2e:8e:5e:b1:
ad:99:99:10:87:a0:3b:49:c6:e7:4c:96:8b:50:05:97:71:ae:
14:e2:f7:96:f8:64:f2:7e:9a:3a:a9:53:a6:ee:ef:66:2f:c0:
67:a3:25:a9:8b:dd:c3:fe:53:32:65:89:b5:9a:f9:86:0b:60:
b4:e3:65:ec:99:32:7e:77:14:7f:10:aa:d7:10:29:50:97:0e:
4e:c6:ca:e0:45:3a:d7:ce:8a:96:67:f0:67:41:40:d1:53:2e:
b6:9e:2f:8a:72:32:58:28:f8:b4:4d:16:0d:3b:7b:9c:b5:92:
08:7b:1a:3f:12:80:fd:2b:e3:cc:4a:f4:6d:46:6b:72:1b:46:
37:69:c0:06:20:a5:39:16:25:2f:4f:4a:9c:11:19:25:80:86:
fc:a4:e3:00:8b:f3:2b:66:a1:80:82:03:9b:23:e6:7c:12:0f:
ab:6d:43:12:d6:58:3e:66:cd:f8:81:92:c5:9e:e5:b7:03:e1:
0b:ea:c8:83:a4:16:a8:7e:44:97:1e:7d:fd:7e:f1:aa:05:7e:
a7:d9:7a:b4:fc:b3:b6:02:3c:f3:6d:a6:b3:96:57:46:89:e3:
6f:91:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 15:28:41 2026 by rpki-client