Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218885.roa
File: AS218885.roa (raw, json)
Hash identifier: 4VFL6DcpE7S+srpQsCWqbhJj+hGVlFpdACVIjVySnl0=
Subject key identifier: 4E:51:8E:A1:4C:81:B5:56:60:FB:7F:5F:9C:3F:2A:F1:D2:C7:82:62
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 015B9EE251D9A19F7BB0C0547CB3C28B1D910C67
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218885.roa
Signing time: Mon 31 Aug 2026 19:25:12 +0000
ROA not before: Mon 31 Aug 2026 19:20:12 +0000
ROA not after: Mon 30 Aug 2027 19:25:12 +0000
asID: 218885
IP address blocks: 168.222.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5b:9e:e2:51:d9:a1:9f:7b:b0:c0:54:7c:b3:c2:8b:1d:91:0c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 31 19:20:12 2026 GMT
Not After : Aug 30 19:25:12 2027 GMT
Subject: CN=4E518EA14C81B55660FB7F5F9C3F2AF1D2C78262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:0d:05:93:d9:c3:38:cf:23:cd:4e:60:fb:
56:70:a8:2f:ae:9d:60:f4:24:ad:39:eb:4b:44:0a:
33:79:89:f5:74:66:7e:0e:db:54:30:97:19:5b:58:
5e:c5:71:1c:17:ed:28:60:51:f8:2d:75:62:b5:60:
99:38:47:11:14:7b:39:43:e2:c5:7a:8a:50:96:b4:
75:88:89:59:86:dc:63:ec:46:1d:62:29:45:09:f1:
22:00:78:48:46:51:52:8a:98:98:92:6b:86:03:6f:
77:99:71:99:2e:cd:53:75:ff:0f:53:c5:f2:06:84:
c5:39:ee:81:ca:a6:52:8c:66:56:ce:29:59:9f:1a:
8d:3b:34:e9:0d:5b:b3:d1:38:1e:ef:b7:2f:6a:10:
f0:ee:0f:96:f0:04:ed:3c:d8:4e:b2:34:84:f4:56:
ac:c0:5d:40:f3:27:a6:0e:2f:6d:7a:bd:fd:7e:df:
7d:f3:b8:2d:db:c3:03:20:68:2e:3f:d0:6b:02:d2:
72:32:d0:d8:f9:ac:c6:22:61:c2:6f:99:a4:2b:36:
2b:bc:25:e3:b9:93:89:c9:87:02:8d:50:29:ae:41:
15:04:73:02:b3:6d:1f:3c:70:8c:78:9c:ec:16:72:
11:f1:7e:a8:93:ec:0c:1e:61:81:31:79:14:0a:14:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:51:8E:A1:4C:81:B5:56:60:FB:7F:5F:9C:3F:2A:F1:D2:C7:82:62
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.71.0/24
Signature Algorithm: sha256WithRSAEncryption
95:de:70:24:98:5d:a0:76:17:0a:51:eb:1b:6d:57:b6:85:48:
6d:60:5f:bf:44:61:48:20:04:76:45:6f:e8:b9:8d:53:3a:ac:
55:2c:d6:bb:63:66:28:4b:9b:cb:22:30:1f:19:40:83:81:ef:
58:18:fa:cf:70:0a:a4:ae:b5:5a:2d:3d:91:5d:f9:1e:3f:ed:
09:41:1f:18:08:33:50:07:26:09:97:93:89:2f:c3:3d:b5:2d:
09:15:81:f8:31:0b:a4:49:e5:70:fc:5c:e9:a9:d8:93:34:a2:
3c:93:9a:d8:25:3a:e5:34:b5:49:9d:d4:e1:c2:8c:1b:b4:48:
19:4b:23:b8:ef:1c:a1:b4:cc:28:2c:a6:58:5e:fb:69:a6:ff:
0c:5d:95:e2:37:5f:42:b1:e0:47:30:2a:7c:6c:22:d6:f8:16:
29:e1:6b:ea:a2:2e:70:76:bb:e5:ec:af:a6:a1:49:ee:d5:d2:
7a:06:e8:b5:c2:66:52:b6:02:1c:f1:15:ca:18:58:ee:4d:9d:
83:5a:d3:a3:4a:41:7e:66:32:4d:35:05:d0:43:26:8a:4e:cc:
43:6a:f9:7a:39:19:c7:3a:aa:e6:09:1a:e2:44:0b:d3:ec:d8:
da:2d:66:7c:df:04:b5:57:09:69:dc:69:39:43:4b:28:70:3b:
0b:d6:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:32 2026 by rpki-client