Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218780.roa
File: AS218780.roa (raw, json)
Hash identifier: fRh6VVgJDnzXWAcZKV8uyK9gxBpDYm8uiC7ihNT5BnU=
Subject key identifier: F8:C7:63:18:6F:38:47:AF:1F:AE:B8:09:40:C4:80:C8:1F:7C:87:92
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 55FB7F8FA03F3F5D56375A0BFC461863201E09E3
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218780.roa
Signing time: Sat 24 Oct 2026 10:22:15 +0000
ROA not before: Sat 24 Oct 2026 10:17:15 +0000
ROA not after: Sat 23 Oct 2027 10:22:15 +0000
asID: 218780
IP address blocks: 82.139.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fb:7f:8f:a0:3f:3f:5d:56:37:5a:0b:fc:46:18:63:20:1e:09:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 24 10:17:15 2026 GMT
Not After : Oct 23 10:22:15 2027 GMT
Subject: CN=F8C763186F3847AF1FAEB80940C480C81F7C8792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:c9:8d:bf:39:2f:25:7c:34:4e:b7:76:74:
6a:57:af:0f:90:2a:0a:40:23:78:d0:ff:90:07:14:
16:6f:6e:e8:a5:e9:dc:83:52:51:da:bf:9b:d3:eb:
3f:40:dd:84:86:02:50:71:ef:ad:23:84:8d:5e:99:
66:14:09:79:9d:a3:c8:bb:54:fd:cb:21:ab:35:54:
e6:e8:41:52:c7:cc:0c:a5:42:7e:1b:6e:da:08:53:
ac:4b:91:2f:6b:91:b3:bb:b7:18:7a:5c:b4:42:4a:
a1:57:83:00:d3:8f:30:f2:97:fc:91:52:b3:5e:51:
a7:e0:1c:89:20:08:00:a3:57:2d:d1:9c:bd:48:4c:
e1:47:98:19:f5:19:b1:c9:95:34:b2:a5:04:51:22:
4c:3c:bc:a2:7f:af:ab:79:fd:d3:de:2a:86:4c:71:
89:40:07:02:d8:06:d5:c1:ab:6d:36:9e:f1:9f:a1:
c6:f5:f1:e0:32:71:58:7e:64:bd:17:a1:3d:2f:89:
6e:04:94:81:3a:e8:5d:02:ed:1d:48:72:63:f5:92:
dc:15:dc:e7:3c:c4:60:44:64:e4:94:bc:40:f4:9e:
6c:29:bf:29:16:92:d8:65:80:ea:72:5d:f7:52:d9:
fa:5d:c9:7e:ea:46:13:0d:d9:69:aa:00:a9:12:b0:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C7:63:18:6F:38:47:AF:1F:AE:B8:09:40:C4:80:C8:1F:7C:87:92
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.216.0/24
Signature Algorithm: sha256WithRSAEncryption
57:86:33:a0:65:02:54:f8:0c:f9:0f:15:08:8d:62:ff:53:2d:
c2:c5:5b:dd:af:12:9e:a3:59:1d:0e:ea:34:77:50:bc:6e:fb:
63:c7:57:a3:76:0e:95:e1:32:a2:f0:f7:3f:37:0c:a9:be:02:
51:32:d6:b3:bd:b0:36:98:73:ba:2a:ef:2b:53:11:0d:82:c7:
0d:80:d8:07:3d:50:ca:22:9a:63:90:d9:63:83:bf:e9:4b:69:
5d:b6:a9:20:07:c6:97:52:16:17:cd:ac:a6:a3:0b:89:29:5b:
ce:56:94:e5:f1:7a:5f:d0:a7:ef:bf:fe:99:bd:55:d1:6a:6b:
25:24:c4:f4:8c:a1:dd:e0:ee:73:d4:08:8c:53:29:00:57:31:
ef:10:73:f0:a7:3b:e8:2c:19:5c:c8:a6:17:44:57:37:c4:2b:
cb:2d:79:85:d8:1e:34:9b:59:db:cb:81:56:01:51:67:c0:49:
b1:f8:f3:ab:8c:20:86:ca:b3:41:0f:3e:de:a9:12:9c:45:3b:
d5:05:2a:7a:76:f5:e2:85:4a:ff:e1:d5:a6:99:c3:ce:ee:fd:
dc:9b:bc:76:8c:f4:c3:e0:19:00:b6:6c:dd:8d:32:1b:4f:71:
a4:62:a1:c0:58:60:3d:db:22:b5:54:ed:9c:a2:13:9c:7f:c2:
46:62:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:05 2026 by rpki-client