Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218661.roa
File: AS218661.roa (raw, json)
Hash identifier: mHox6CE8NenArQM0RHXilCJVDBB8xlD+8iRv2F+eIbI=
Subject key identifier: D7:32:72:04:10:B9:9C:AA:86:7E:F0:5F:46:7A:B8:A2:AB:59:1D:92
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 587B9E7B49B3E4E6E0A36BEC7E4927D30E08CEB8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218661.roa
Signing time: Fri 25 Sep 2026 08:16:34 +0000
ROA not before: Fri 25 Sep 2026 08:11:34 +0000
ROA not after: Fri 24 Sep 2027 08:16:34 +0000
asID: 218661
IP address blocks: 69.90.128.0/24 maxlen: 24
69.90.129.0/24 maxlen: 24
76.74.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7b:9e:7b:49:b3:e4:e6:e0:a3:6b:ec:7e:49:27:d3:0e:08:ce:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 25 08:11:34 2026 GMT
Not After : Sep 24 08:16:34 2027 GMT
Subject: CN=D732720410B99CAA867EF05F467AB8A2AB591D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:cb:ad:5c:41:df:70:37:4c:a8:e2:c9:56:
da:0a:69:4a:8a:ee:df:27:0d:20:d0:93:ee:d9:49:
82:22:39:98:3a:d7:f3:65:5f:34:2e:e6:fe:b3:8b:
a0:9d:7f:24:7d:d2:17:37:7b:a1:2d:31:32:99:ca:
a9:f0:29:72:b3:83:62:8f:2f:5c:3f:ff:aa:c7:fa:
40:0b:37:7a:29:c4:11:bf:26:ff:04:44:00:e9:9b:
87:aa:22:19:01:8d:79:77:10:b1:a3:c2:73:ad:43:
63:d2:55:4a:9d:f2:5b:99:39:1f:c3:21:25:20:57:
ff:d9:2b:4e:4c:32:43:84:ed:a2:7b:19:30:44:61:
21:09:09:80:6c:4c:62:43:26:9f:44:10:d6:17:2d:
58:94:c4:77:0d:2a:ea:50:5e:ac:11:17:38:0e:6a:
cc:0d:6e:21:17:2b:f8:00:f8:d6:44:eb:5b:8e:d7:
cb:93:10:8a:e0:47:5f:6f:ad:2c:e2:bd:29:f0:5d:
06:b8:c1:88:05:a7:2c:81:67:4f:bc:75:ca:66:21:
a1:dd:81:38:e6:99:b2:1e:7e:f3:c5:3a:62:9a:76:
f0:ff:8c:53:82:9d:3a:a8:66:b6:93:10:ad:fe:b6:
dd:24:84:b4:87:9e:f5:dd:4b:41:b1:17:76:ae:c4:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:72:04:10:B9:9C:AA:86:7E:F0:5F:46:7A:B8:A2:AB:59:1D:92
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.90.128.0/23
76.74.212.0/24
Signature Algorithm: sha256WithRSAEncryption
67:48:1b:fb:fd:c7:3b:88:0b:85:f5:32:f7:e8:f6:56:8c:0b:
c0:5e:5e:5d:e7:64:42:59:af:02:52:7e:d6:c3:4d:59:1b:39:
a5:0f:40:42:c8:59:73:31:01:f4:6f:bc:a7:af:a4:5e:0c:ca:
59:66:1f:a3:f3:46:f3:14:f6:27:3d:dd:9e:df:40:37:81:b9:
98:62:09:6a:a4:ec:ae:bf:7b:69:8f:55:bb:b4:fa:14:32:51:
94:02:b8:3d:79:50:c8:18:a9:ec:2f:45:ee:bc:88:86:a8:a0:
cd:d9:07:2e:20:3e:47:3a:66:dd:a7:c1:29:d1:93:7e:fe:91:
d0:28:ee:53:04:f9:12:f5:7f:be:3f:c2:b8:45:f3:a2:43:4a:
54:9d:5a:7c:0f:65:97:20:d5:71:21:6f:50:00:80:ec:ba:d2:
eb:b6:2a:45:c3:22:03:07:1b:03:62:6c:85:53:5e:75:d0:7d:
ee:fb:86:15:5c:e8:3d:fe:92:58:14:c1:d3:bb:1d:00:e4:a0:
b0:1c:59:9f:1e:6c:be:11:e0:ef:30:b0:0b:fc:4a:bf:c9:d4:
93:0e:67:c7:04:66:64:64:10:63:19:d9:20:54:e8:fb:ca:e7:
9b:f6:52:73:7f:54:cf:04:e0:b0:57:96:0d:56:70:99:47:05:
92:82:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:58:52 2026 by rpki-client