Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: JxBBgGUub5ENpwUDjgD/2WnMt58o38Oqd55x/fLKVKo=
Subject key identifier: C2:08:2E:47:FE:C7:54:2E:E7:74:41:F4:A3:4B:FB:03:2F:47:61:71
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 77C1EED802780B5A19752CD78C2E415AA6CFAA8E
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218965.roa
Signing time: Sat 03 Oct 2026 11:24:23 +0000
ROA not before: Sat 03 Oct 2026 11:19:23 +0000
ROA not after: Sat 02 Oct 2027 11:24:23 +0000
asID: 218965
IP address blocks: 212.74.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c1:ee:d8:02:78:0b:5a:19:75:2c:d7:8c:2e:41:5a:a6:cf:aa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 3 11:19:23 2026 GMT
Not After : Oct 2 11:24:23 2027 GMT
Subject: CN=C2082E47FEC7542EE77441F4A34BFB032F476171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5c:c9:14:43:92:80:2f:d4:31:e5:36:09:a1:
0c:bb:52:fe:19:1e:9c:2d:cf:d5:4d:75:05:a4:8a:
1b:b9:ba:8f:53:2c:25:11:b2:69:7e:64:43:f3:1e:
67:4a:22:af:8e:6b:61:2b:c0:c5:fd:a2:64:cb:f3:
4e:cc:d7:56:ba:11:db:d5:d1:42:e3:75:82:97:0e:
dc:f5:e6:4d:8f:17:94:99:51:ff:ac:d7:0b:1c:25:
61:36:1e:bc:85:19:07:1d:58:0a:dc:46:39:e6:63:
93:0c:d5:3b:91:c7:aa:7b:e5:97:10:14:cc:96:c4:
cb:1a:ca:08:52:ce:e9:29:69:ac:a7:c2:3f:c2:07:
ba:e0:2e:7d:08:21:7c:e1:c8:cb:c6:93:54:52:74:
aa:c3:a8:c5:72:4d:57:f2:28:39:de:6a:21:93:10:
fb:49:cf:9b:9b:ce:d7:54:c4:a9:87:b1:67:9f:1c:
a6:ca:59:a7:d4:37:4b:38:68:77:e8:99:1c:f0:03:
83:8d:8e:89:5b:59:c4:8d:93:50:8c:2d:1e:c3:ed:
df:a0:95:fa:ff:ab:cc:1a:65:cf:5d:60:d3:14:98:
72:8b:31:2f:f6:ab:2d:cd:04:6b:a2:c3:15:89:88:
54:8f:e0:33:90:d0:30:bc:84:52:41:47:4b:99:eb:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:08:2E:47:FE:C7:54:2E:E7:74:41:F4:A3:4B:FB:03:2F:47:61:71
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:bf:d8:4f:85:4f:c6:11:e1:7a:de:72:df:42:1d:2c:69:f1:
6f:aa:bb:38:4e:4a:d4:cc:6b:df:71:fa:a8:fd:df:3b:cd:87:
85:b7:63:0f:3c:a6:f2:93:c4:55:a5:d9:b3:8b:c0:ef:85:65:
20:8c:15:08:83:d4:88:24:dc:92:47:97:64:48:1d:7b:ef:2b:
b6:52:56:de:52:64:25:74:3b:20:72:4a:a7:95:18:09:e5:f4:
4d:00:c2:4e:c7:f4:d4:af:df:7f:fd:a6:a7:dd:e5:e2:57:c2:
20:eb:72:ae:15:4d:89:06:57:a7:6c:11:b2:57:c1:0f:d4:6d:
79:50:0d:22:54:02:72:f5:6b:9f:f9:b8:2a:85:b3:d6:07:a0:
bb:ac:09:2d:39:44:c6:98:37:94:7b:e8:b5:8d:4d:3b:45:3c:
1c:5b:71:5f:a5:43:a5:4b:ea:c1:e5:56:8f:8e:0d:e1:cf:71:
8d:90:62:00:60:15:ce:91:99:93:07:cd:15:4e:18:53:db:7b:
02:c8:f4:5b:ee:b7:ad:0c:cb:58:0c:ce:3d:66:bc:53:85:39:
8a:f0:5a:74:16:99:5d:4e:e0:f4:8c:cb:63:80:98:9a:13:f5:
2a:f9:88:e6:cb:3c:8f:b8:82:e2:11:39:26:d0:eb:f0:3a:3b:
9e:e8:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:21:08 2026 by rpki-client