Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218995.roa
File: AS218995.roa (raw, json)
Hash identifier: r4FeTgknaKQppk92E2icsUQUUHbHhS07ebaAN4eEO50=
Subject key identifier: 7B:1E:9F:DE:69:80:00:B0:A5:D6:DB:F8:1B:F5:76:BF:89:7D:53:17
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4AB3255F5E3382A91848C0566F4FA0A4155F8694
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218995.roa
Signing time: Wed 12 Aug 2026 13:05:49 +0000
ROA not before: Wed 12 Aug 2026 13:00:49 +0000
ROA not after: Wed 11 Aug 2027 13:05:49 +0000
asID: 218995
IP address blocks: 96.62.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b3:25:5f:5e:33:82:a9:18:48:c0:56:6f:4f:a0:a4:15:5f:86:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 12 13:00:49 2026 GMT
Not After : Aug 11 13:05:49 2027 GMT
Subject: CN=7B1E9FDE698000B0A5D6DBF81BF576BF897D5317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:83:b1:29:cd:7e:8f:ce:9c:c2:5b:0a:67:
a9:64:ea:8b:f4:25:6d:0e:0a:a0:b0:3a:fb:f2:f4:
2a:b0:93:a7:c6:ca:4f:a1:14:7b:c3:16:3d:4b:6a:
81:e3:5b:61:75:96:0d:fd:9b:24:19:a7:d7:96:27:
8d:46:98:89:69:bb:d0:ab:2d:6b:10:87:e2:32:4e:
f3:8a:87:54:37:73:26:27:5d:4e:88:f5:26:06:5a:
c7:52:9e:b6:b1:cd:1d:f0:88:e2:cd:d9:33:ec:93:
5f:de:e3:af:7c:61:a0:40:65:58:48:5c:84:a9:65:
f3:14:cb:b6:c5:72:2f:bd:45:26:48:57:21:63:d1:
93:92:3f:20:cb:9c:69:35:42:7c:71:f2:22:1a:53:
3d:f3:2b:ce:74:ce:c7:f1:3e:02:37:5c:30:df:ff:
92:bb:f2:1d:e9:37:82:7c:1b:31:f1:1b:33:08:3a:
1d:8b:4e:47:2f:00:a2:e7:67:be:fa:d0:61:11:10:
af:d5:10:84:d6:08:71:7d:e8:21:bb:48:e1:a9:54:
9f:2c:a0:be:85:44:da:07:74:db:51:73:d0:26:46:
a5:bc:ac:ed:85:86:80:95:8e:75:b1:cd:a7:10:27:
89:a1:b4:ce:9d:26:6a:c5:5b:c2:61:19:88:cf:fc:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:9F:DE:69:80:00:B0:A5:D6:DB:F8:1B:F5:76:BF:89:7D:53:17
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:7c:b8:3c:7a:09:83:45:8c:eb:60:55:ef:b1:16:d3:50:b4:
70:4f:94:08:a2:65:88:f5:af:bf:ff:e7:c9:9a:ac:42:8e:c4:
7d:39:f4:b9:29:ce:f8:48:a6:cf:32:af:07:05:79:99:99:14:
f5:92:16:4a:02:59:d5:3f:03:d4:c9:60:ff:23:c2:a9:13:78:
87:ea:a3:1a:74:b6:0a:4c:c7:d6:35:ac:db:01:b8:2f:00:30:
d4:6d:65:b2:f7:53:60:be:1e:0c:22:dd:12:15:a7:89:83:90:
0b:6a:0b:78:8a:96:03:e9:3c:39:86:8e:81:47:3c:ae:5d:90:
af:b5:d0:5a:9d:51:ab:4c:16:46:75:7f:5c:0d:c4:ce:77:f0:
2a:22:e7:6b:b1:a6:51:69:e5:30:d9:6d:30:e8:ec:3e:9d:67:
89:f0:38:3e:cd:7c:fe:a9:d4:e2:7b:0e:82:71:ae:6b:07:5a:
58:6f:72:a2:61:3e:25:9f:9d:60:39:e6:a3:79:c0:c3:58:1b:
1c:42:6a:bf:aa:9b:03:a4:1d:00:e0:a4:02:b4:f2:79:8f:ce:
78:59:d8:e4:f6:ea:7f:9a:b1:33:c1:2a:cb:fa:7e:b2:02:41:
9c:51:65:f6:8b:a5:54:27:34:f7:ab:2d:5e:51:1e:93:f8:65:
32:16:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 03:33:15 2026 by rpki-client