Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: FUQaECJZ3MZj/7kCiX27UAirAHKsAYBhjL20D0VIncg=
Subject key identifier: 32:9D:3C:DB:E5:DE:5C:27:9F:7B:15:17:1D:48:11:95:60:FB:15:A2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04A3B58E8E7A4E3BECBBA9B1BF4A85DAAD84773C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218965.roa
Signing time: Wed 02 Sep 2026 05:35:46 +0000
ROA not before: Wed 02 Sep 2026 05:30:46 +0000
ROA not after: Wed 01 Sep 2027 05:35:46 +0000
asID: 218965
IP address blocks: 143.14.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a3:b5:8e:8e:7a:4e:3b:ec:bb:a9:b1:bf:4a:85:da:ad:84:77:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 2 05:30:46 2026 GMT
Not After : Sep 1 05:35:46 2027 GMT
Subject: CN=329D3CDBE5DE5C279F7B15171D48119560FB15A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:e0:f1:35:f1:6c:c6:b9:fc:05:1a:a1:60:
87:f2:a0:90:3a:08:c6:a4:6f:4e:0f:22:34:db:91:
65:66:d6:18:1d:5a:e1:e5:d0:83:67:79:da:71:26:
6a:96:a5:3a:31:5b:46:b9:86:48:05:9c:34:24:8c:
8a:b8:0f:99:18:42:4f:67:ca:c4:c2:87:16:db:14:
1a:91:f1:2a:8d:ce:3e:cd:7e:1d:85:ee:5f:42:c3:
c7:bd:e8:b1:44:e1:b3:e0:d5:72:a0:95:85:66:f4:
22:80:cc:7f:48:4d:76:95:d4:b9:2a:8f:63:5e:84:
94:f7:94:17:b7:c1:87:70:94:8d:34:90:3f:0e:93:
d8:ff:56:29:2a:43:28:8d:fe:d3:cc:c4:9a:ff:4a:
e2:dd:87:2c:8c:02:cb:1f:b0:84:a7:87:4b:6c:5d:
48:c3:fa:9b:5a:42:4a:82:20:92:51:a5:21:73:e5:
80:c7:2a:52:ac:42:29:c4:b9:8a:e7:fb:81:e0:d8:
7d:fa:aa:27:08:86:07:69:d0:30:51:98:85:a9:ae:
fd:8a:e2:6b:da:0e:92:0e:25:cc:42:f7:aa:4b:30:
83:bb:fb:e1:c2:c6:9d:42:70:7a:b7:5d:ca:32:95:
43:dc:fc:3c:41:52:e7:0b:49:ef:49:fa:11:7c:fb:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:3C:DB:E5:DE:5C:27:9F:7B:15:17:1D:48:11:95:60:FB:15:A2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.186.0/24
Signature Algorithm: sha256WithRSAEncryption
86:71:7d:94:3c:ef:77:6a:13:45:6f:31:28:3a:4f:e7:1c:eb:
e4:41:1a:f1:e3:6c:20:e9:5a:30:36:f5:e4:db:5a:eb:ad:d3:
55:60:24:26:86:97:da:87:25:44:6b:55:32:d3:a1:81:4f:6f:
51:cf:4f:13:bf:bd:68:16:22:fa:0e:b3:f9:d6:4a:ff:55:27:
05:10:f7:1e:2e:2f:5d:f3:29:cc:fb:f0:6b:93:8f:53:2f:7f:
4d:7a:86:45:d5:3b:fc:10:df:a6:9f:2e:09:8c:73:07:00:92:
2c:1d:a2:f3:5d:79:44:90:eb:88:71:ce:f8:c3:9c:f5:86:2e:
e9:77:5f:70:d6:39:94:6d:42:b4:f4:79:7f:ad:5e:29:b4:82:
a2:e1:ac:4c:23:ae:d3:84:a5:82:f6:d8:4d:de:0d:33:80:e6:
9f:4b:3c:be:fd:c9:dc:fc:55:91:8b:de:2d:bc:18:6c:48:64:
33:e5:8f:6d:5e:a2:76:5d:6f:7e:43:f7:89:4a:c4:b5:48:f8:
25:b3:11:41:0e:f8:85:f7:f3:ee:bc:3e:5f:9e:9c:46:10:b7:
27:2f:8b:d5:13:5d:8c:2a:e2:0c:10:ca:b2:44:c0:a6:c2:28:
23:c9:e9:52:34:60:00:05:75:89:a6:c6:22:d2:90:1a:4b:07:
6a:ae:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:32 2026 by rpki-client