Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: lX91zUEspkKRCI1oyzM6eOQQpxN2f9FJ+XRFbIpVa+A=
Subject key identifier: 74:FF:85:59:B6:1C:2C:64:45:4A:B6:B7:13:61:D3:11:C7:0F:AB:06
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2806831E63B26D51FE10DBB4C001E54722373864
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218965.roa
Signing time: Wed 02 Sep 2026 20:18:31 +0000
ROA not before: Wed 02 Sep 2026 20:13:31 +0000
ROA not after: Wed 01 Sep 2027 20:18:31 +0000
asID: 218965
IP address blocks: 82.139.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:06:83:1e:63:b2:6d:51:fe:10:db:b4:c0:01:e5:47:22:37:38:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 2 20:13:31 2026 GMT
Not After : Sep 1 20:18:31 2027 GMT
Subject: CN=74FF8559B61C2C64454AB6B71361D311C70FAB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:74:0f:51:6f:61:f0:62:06:68:c0:df:3f:
de:80:25:19:b5:5c:d3:4c:82:b2:87:d2:b2:2d:91:
c7:1e:12:fe:d1:de:3d:6b:80:ee:a3:06:96:1a:bd:
d8:93:f4:1a:11:8e:1f:b3:1f:6c:a3:ba:0e:12:f4:
23:36:29:6f:da:22:41:5b:30:a9:b5:90:29:0f:42:
d0:ae:50:da:af:86:9e:b1:29:27:f5:08:5e:b0:11:
ef:c1:94:aa:10:4f:f0:cb:d2:1c:22:d3:e3:ed:59:
8f:ce:92:95:79:3a:86:97:b6:23:de:ee:1c:c4:f0:
84:bb:21:e2:e6:bc:5b:05:6b:de:07:12:3e:ec:09:
76:5e:a0:9c:25:9e:36:12:4b:d2:8e:9f:73:45:00:
9c:4d:ee:c3:dc:1c:5a:44:5d:ba:1d:b2:de:f0:fb:
0d:7e:1e:94:e4:f0:85:bf:d3:10:ff:29:09:c1:9f:
d2:34:33:65:14:6b:76:2d:6d:55:32:24:df:98:25:
f5:74:e3:ab:1a:89:dc:b2:0a:aa:ae:2c:c3:54:b6:
c2:93:42:a3:16:2b:81:64:30:01:43:a1:06:28:fe:
9d:22:ea:93:4c:ae:e3:69:d1:de:98:5b:56:ab:49:
49:ad:cb:90:51:83:48:40:fd:bf:b6:af:b3:c9:03:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:85:59:B6:1C:2C:64:45:4A:B6:B7:13:61:D3:11:C7:0F:AB:06
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.247.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:36:72:91:a9:a6:11:25:96:7d:5f:76:3e:0a:9d:17:b5:8e:
8c:cf:70:cb:b8:00:e9:57:99:94:55:62:df:d3:b5:28:60:c4:
00:8c:80:eb:0f:ac:39:b0:ef:c2:2b:f5:e0:2c:f1:64:e7:11:
44:12:91:df:7e:e4:de:49:d0:01:f4:c2:f6:65:04:be:d4:0c:
0a:f0:f2:8d:52:b3:66:69:e2:b9:b7:88:05:19:71:ca:3c:1f:
c7:0e:3f:f8:ab:3e:9c:93:02:59:68:93:73:ee:8c:a4:0e:52:
8c:cc:9d:06:18:1a:1c:f8:e7:4b:55:2e:ed:0d:07:9b:d9:7d:
72:87:84:4b:65:5a:53:f9:42:dd:ca:4b:42:ac:b1:1b:0b:f6:
a2:fe:29:3d:b2:5b:4b:b4:6f:26:b6:26:e1:c7:78:5b:5a:0d:
bf:fb:40:15:06:3c:f5:80:f0:c3:9d:8f:12:13:c7:a0:bf:29:
4c:a1:71:02:b6:db:5d:18:20:23:ed:ca:e3:9b:85:03:e3:fc:
04:aa:3b:c8:e7:38:05:9f:b1:6b:1e:e7:d9:89:a2:db:cf:f4:
5d:2f:32:89:ae:5a:5b:da:fc:4c:39:58:0f:d5:1c:10:f4:30:
56:1d:dc:b8:9e:38:35:a1:05:ee:21:e2:8a:70:80:8a:1a:db:
84:6d:d2:67
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKAaDHmOybVH+ENu0wAHlRyI3OGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MDIyMDEzMzFaFw0yNzA5MDEyMDE4MzFaMDMxMTAvBgNV
BAMTKDc0RkY4NTU5QjYxQzJDNjQ0NTRBQjZCNzEzNjFEMzExQzcwRkFCMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5HQPUW9h8GIGaMDfP96AJRm1
XNNMgrKH0rItkcceEv7R3j1rgO6jBpYavdiT9BoRjh+zH2yjug4S9CM2KW/aIkFb
MKm1kCkPQtCuUNqvhp6xKSf1CF6wEe/BlKoQT/DL0hwi0+PtWY/OkpV5OoaXtiPe
7hzE8IS7IeLmvFsFa94HEj7sCXZeoJwlnjYSS9KOn3NFAJxN7sPcHFpEXbodst7w
+w1+HpTk8IW/0xD/KQnBn9I0M2UUa3YtbVUyJN+YJfV046saidyyCqquLMNUtsKT
QqMWK4FkMAFDoQYo/p0i6pNMruNp0d6YW1arSUmty5BRg0hA/b+2r7PJA4RzAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUdP+FWbYcLGRFSra3E2HTEccPqwYwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjE4OTY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUov3
MA0GCSqGSIb3DQEBCwUAA4IBAQAbNnKRqaYRJZZ9X3Y+Cp0XtY6Mz3DLuADpV5mU
VWLf07UoYMQAjIDrD6w5sO/CK/XgLPFk5xFEEpHffuTeSdAB9ML2ZQS+1AwK8PKN
UrNmaeK5t4gFGXHKPB/HDj/4qz6ckwJZaJNz7oykDlKMzJ0GGBoc+OdLVS7tDQeb
2X1yh4RLZVpT+ULdyktCrLEbC/ai/ik9sltLtG8mtibhx3hbWg2/+0AVBjz1gPDD
nY8SE8egvylMoXECtttdGCAj7crjm4UD4/wEqjvI5zgFn7FrHufZiaLbz/RdLzKJ
rlpb2vxMOVgP1RwQ9DBWHdy4njg1oQXuIeKKcICKGtuEbdJn
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:02:50 2026 by rpki-client