Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218736.roa
File: AS218736.roa (raw, json)
Hash identifier: ai4Bd+OvDcDIO4ai8D9jf66bCCOqcjZK8QkFC/wskwU=
Subject key identifier: C3:F0:6B:6B:03:1D:C9:63:54:AD:43:26:00:A1:35:27:6A:2B:89:1E
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 31CB7F3BD2677762C114895EC71CBB17F20E1CA7
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218736.roa
Signing time: Mon 05 Oct 2026 15:29:53 +0000
ROA not before: Mon 05 Oct 2026 15:24:53 +0000
ROA not after: Mon 04 Oct 2027 15:29:53 +0000
asID: 218736
IP address blocks: 82.139.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 21:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:cb:7f:3b:d2:67:77:62:c1:14:89:5e:c7:1c:bb:17:f2:0e:1c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 5 15:24:53 2026 GMT
Not After : Oct 4 15:29:53 2027 GMT
Subject: CN=C3F06B6B031DC96354AD432600A135276A2B891E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:dd:78:d4:30:72:0b:5e:1e:ea:3c:c7:62:
d2:6a:03:01:c3:ef:96:8f:9b:cd:39:01:cb:7a:ab:
e9:d8:a6:7d:5b:1c:ca:23:2a:7c:7d:be:c4:4a:cd:
11:53:ce:bb:35:34:15:af:85:48:21:ad:f1:fb:2f:
31:70:e3:e6:0f:dd:58:0d:88:2f:bf:d9:65:71:25:
70:bc:12:6b:ba:d5:31:fa:c0:7b:cd:ce:23:05:94:
86:ef:3e:99:39:6c:44:97:55:38:76:20:37:8a:32:
35:1d:cb:24:17:8c:d8:7d:f5:03:e3:68:79:3f:76:
d1:6f:4f:ef:c1:82:80:7e:1c:d3:eb:b1:90:44:97:
12:f4:62:41:be:3a:95:91:48:89:c9:d6:36:45:1a:
25:53:6e:5f:87:ce:5c:6f:4f:27:24:bd:6f:91:28:
dd:8b:ed:97:9b:d6:59:94:45:0e:f2:a5:6d:8b:0a:
fd:45:20:a1:57:f6:39:5c:1f:cc:4c:ae:10:fc:25:
99:83:88:e3:17:ff:5f:ef:89:d7:42:2a:24:8a:37:
0f:6e:4b:da:97:c5:a3:5c:ab:ce:8d:6a:e8:cd:b6:
04:67:67:52:f9:0a:ec:2d:e5:fe:13:a4:cf:a1:57:
54:e6:1e:08:c3:a0:1b:43:ac:89:bc:2b:5c:c7:7e:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:6B:6B:03:1D:C9:63:54:AD:43:26:00:A1:35:27:6A:2B:89:1E
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:88:e4:51:08:7c:fd:88:79:75:c2:07:12:20:1f:e0:a3:aa:
12:2d:08:64:43:22:53:e4:1a:6f:9a:52:79:82:b6:10:7a:cd:
28:4f:7d:af:76:45:dd:79:aa:0f:78:ab:74:07:2b:96:e1:d2:
37:f4:9b:87:38:97:52:06:fc:18:1d:3a:2a:d2:4f:b7:03:c5:
41:27:0e:e6:2d:9b:b4:ba:b6:76:e2:86:65:6d:9b:0b:d0:fc:
3a:e6:2b:30:3a:e7:d0:60:ee:b1:96:fc:27:75:62:4d:ae:74:
8e:d1:e2:58:3b:9b:a6:17:a4:26:cb:bb:6b:b9:c9:88:e3:e9:
b5:64:0f:87:90:c9:5e:a4:87:56:a5:c9:12:cc:a2:41:ce:a6:
f4:70:0e:3b:bd:24:41:ec:b4:fc:35:89:ef:3a:3d:37:39:15:
73:c0:90:fc:a6:f1:2e:cd:9e:91:e8:70:75:75:68:1b:e6:b5:
1b:7e:36:28:5f:65:11:31:1f:16:9a:fa:0c:27:36:0e:fc:f6:
18:42:5b:36:61:81:59:c7:1a:a2:27:2c:fe:38:a5:09:2b:38:
8a:3c:57:65:55:01:46:d2:00:64:0b:01:e4:5d:e1:10:d3:e8:
4d:68:b3:d1:b9:9d:24:ff:4d:a5:a4:49:51:74:d1:ac:41:7f:
d2:8f:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:10:02 2026 by rpki-client