Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218919.roa
File: AS218919.roa (raw, json)
Hash identifier: sRzUHWWkhdp3WOxSKU5t27wtyfFt49fgeHMM+R43dWg=
Subject key identifier: 5D:7F:75:F9:02:F7:DB:4C:8C:4C:FA:AE:E9:8A:84:1D:F6:08:6C:04
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 125DAC90B9BD8BCD87522AE0E07BC1183A6BBA77
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218919.roa
Signing time: Sat 10 Oct 2026 04:01:15 +0000
ROA not before: Sat 10 Oct 2026 03:56:15 +0000
ROA not after: Sat 09 Oct 2027 04:01:15 +0000
asID: 218919
IP address blocks: 143.14.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5d:ac:90:b9:bd:8b:cd:87:52:2a:e0:e0:7b:c1:18:3a:6b:ba:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 10 03:56:15 2026 GMT
Not After : Oct 9 04:01:15 2027 GMT
Subject: CN=5D7F75F902F7DB4C8C4CFAAEE98A841DF6086C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:51:01:ef:67:ef:e7:33:86:e2:a3:d4:67:
96:3d:58:a8:72:a9:1a:5f:8f:ef:63:98:39:dd:0e:
f8:41:c6:30:8e:d1:0c:f2:8f:a8:ad:e1:c4:40:e0:
d7:5b:09:84:7d:8b:c9:7b:39:46:a7:c2:94:7f:ed:
d6:f8:92:a8:5b:fc:d7:a5:3f:29:42:a0:2d:0c:14:
ef:d5:86:29:c2:ea:22:63:cc:2b:2a:f9:3b:a5:2d:
e6:eb:43:f8:5b:34:56:56:c7:56:07:3e:86:d7:ad:
49:32:d0:46:ad:4f:36:57:4c:af:60:c8:3f:f8:49:
e7:16:e2:ab:00:92:eb:4d:b1:e0:86:36:0b:fe:15:
cc:f4:b3:3d:22:01:04:8e:dc:6b:5e:49:17:73:ca:
2c:89:32:72:61:ff:6b:df:f1:09:93:6e:39:0c:fb:
22:38:f4:51:75:38:8b:45:bd:2f:3a:a6:76:2d:05:
26:cb:b3:be:0a:ee:e9:fa:e4:53:7c:8e:2c:3f:3f:
22:16:93:66:7d:d7:9e:73:5f:b4:58:f2:63:35:ab:
e4:77:b4:3f:15:2e:29:d6:f8:9e:43:c0:9b:ba:35:
4d:58:56:0d:9e:a7:46:ce:cf:a8:31:24:ac:28:22:
f0:3b:91:0f:5b:b0:d2:d4:e1:df:dc:e0:68:7a:45:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:75:F9:02:F7:DB:4C:8C:4C:FA:AE:E9:8A:84:1D:F6:08:6C:04
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:14:0c:3a:5a:ef:8c:1e:c9:59:d5:09:08:3a:cd:42:d7:fd:
e4:a3:d9:44:00:0f:a8:74:93:5e:25:f8:ec:bd:b9:6f:24:0d:
e3:f6:bc:6c:00:82:97:7c:8d:b5:18:46:cb:ad:97:00:19:1a:
47:04:0c:c9:6b:62:2c:cf:0e:41:98:13:d6:d5:45:f3:8c:fb:
dd:21:b8:e3:e9:62:07:72:c4:21:84:f4:0e:79:a7:75:79:2a:
ac:af:e7:21:85:7a:dd:25:43:d5:4b:b9:87:b3:62:f7:ea:c4:
4a:da:80:bf:89:ae:b3:c6:c4:f5:c7:7c:9e:58:19:8a:42:5a:
85:d2:0e:a0:f5:9c:cd:ff:43:b1:c3:af:a4:06:ab:9b:77:bb:
85:c4:b7:9c:c4:46:af:67:bd:53:19:51:1f:c1:eb:74:8a:8c:
6e:9d:04:2a:7f:44:75:02:90:8c:7f:f3:06:f2:3c:22:e5:c2:
4e:32:75:49:fb:0d:99:bf:08:e5:26:32:36:8c:b9:62:5d:12:
f5:49:fe:97:3f:02:07:9d:81:19:08:6d:a5:1b:38:e8:7e:ae:
53:b3:b3:9a:37:40:d4:12:5f:c8:e2:88:b8:d5:ee:77:ec:ef:
27:44:b1:f9:98:69:5d:6e:d0:15:a3:87:74:5f:70:ee:7a:10:
be:c7:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:54:50 2026 by rpki-client