Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218955.roa
File: AS218955.roa (raw, json)
Hash identifier: fIfHtI7CEIchaAbPeZ0nFyA/XMGCx7DFx7UOm58/wMs=
Subject key identifier: BF:4D:08:AA:53:DE:C8:EF:3A:CF:33:90:A7:FE:5B:0E:3A:89:B7:D0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 50F0C7E5FEE1A9D572E12FA3B1FF390134969E8B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218955.roa
Signing time: Wed 02 Sep 2026 12:03:26 +0000
ROA not before: Wed 02 Sep 2026 11:58:26 +0000
ROA not after: Wed 01 Sep 2027 12:03:26 +0000
asID: 218955
IP address blocks: 155.117.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f0:c7:e5:fe:e1:a9:d5:72:e1:2f:a3:b1:ff:39:01:34:96:9e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 2 11:58:26 2026 GMT
Not After : Sep 1 12:03:26 2027 GMT
Subject: CN=BF4D08AA53DEC8EF3ACF3390A7FE5B0E3A89B7D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:36:30:83:2c:e0:d2:0d:d1:9d:ad:05:84:
52:ae:4b:69:0d:5d:5d:9e:4c:17:67:14:41:03:ea:
8a:41:bc:f0:30:bd:52:64:67:24:7d:0c:82:d6:20:
cc:fe:8f:77:66:0e:2c:fa:93:57:80:32:c6:88:da:
35:04:8e:db:3d:e1:11:64:29:30:7c:01:53:ca:49:
af:c0:a6:d1:3b:70:74:29:8b:e4:1d:7e:82:3b:05:
45:96:25:27:ab:29:aa:d7:e8:dc:d4:0e:14:91:99:
c1:2f:f7:94:c8:88:f1:1c:7a:91:29:f6:bc:90:c8:
d2:44:8f:f2:3d:43:18:6f:17:1b:07:ce:be:6c:69:
84:13:1d:54:87:30:2b:f4:11:52:18:de:c2:62:75:
12:9d:ab:57:c9:73:4b:a9:2b:fe:70:21:f2:9c:b5:
4e:e6:01:02:4c:1b:25:3c:ac:a5:ee:ec:69:c6:2b:
e9:b6:c7:a9:54:7b:6b:fb:f8:d9:ac:f3:99:7a:77:
88:7d:02:03:f6:8b:3e:c4:63:23:c0:fd:27:47:a0:
3f:7c:81:bc:31:17:b6:c4:b0:79:72:0e:c6:27:17:
0d:9b:0a:56:39:ff:a4:0a:03:11:24:e2:0c:e9:f3:
2c:48:bc:e2:eb:20:3f:80:cc:7a:06:94:a5:eb:8a:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4D:08:AA:53:DE:C8:EF:3A:CF:33:90:A7:FE:5B:0E:3A:89:B7:D0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:eb:26:3b:87:b7:92:e1:2d:71:b8:3a:0e:af:82:e1:3a:60:
99:1c:a8:2a:64:98:72:b6:c4:48:bc:ab:1e:de:b9:77:92:e1:
8c:02:3d:ce:1e:d6:a4:d1:02:c5:2b:5b:9a:0d:fc:c9:28:20:
f5:36:d4:d3:64:c6:0f:da:15:85:00:16:37:fb:83:09:ad:fa:
b6:ad:3a:41:b4:40:c5:25:1e:78:fd:0e:5b:4d:d5:59:d8:82:
ed:6e:1e:58:24:3c:32:96:e4:a3:b6:22:6c:d5:14:99:ce:85:
e2:62:77:54:d1:b3:4b:d0:88:8b:51:cc:a2:22:90:f7:3b:5f:
ef:60:d1:9d:b5:41:27:67:b7:4d:7f:20:17:85:b3:45:cc:08:
4f:f6:4c:22:29:e0:eb:83:e5:8d:be:75:0d:e7:c9:aa:2a:38:
ae:f1:91:b1:e3:ee:54:b1:73:ef:64:1f:d3:40:c2:4c:d4:80:
40:a9:16:a4:e8:b9:3f:8e:58:d4:5c:88:fa:40:03:e3:50:56:
23:04:57:01:47:98:84:b1:d1:b5:69:a6:f7:b9:90:b9:da:43:
0e:47:78:02:a5:2b:af:4e:8d:ec:1c:04:a1:3d:25:2a:a5:94:
ae:04:74:7e:cd:b1:36:5b:d3:ec:87:46:45:07:91:f4:45:ef:
f7:f4:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:34 2026 by rpki-client