Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218535.roa
File: AS218535.roa (raw, json)
Hash identifier: 4YPd1qQliQhlsJxp5luKi+cvJvmqGXLTi3E/UwyaDHg=
Subject key identifier: F2:4D:29:F8:7B:4A:4B:A7:10:4C:6F:74:D3:C4:E0:4E:D2:0C:9E:2E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 751A3BE5D8B5E76C9C1F2B381C6B450B57ED2B19
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218535.roa
Signing time: Wed 30 Sep 2026 12:44:29 +0000
ROA not before: Wed 30 Sep 2026 12:39:29 +0000
ROA not after: Wed 29 Sep 2027 12:44:29 +0000
asID: 218535
IP address blocks: 181.214.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1a:3b:e5:d8:b5:e7:6c:9c:1f:2b:38:1c:6b:45:0b:57:ed:2b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 30 12:39:29 2026 GMT
Not After : Sep 29 12:44:29 2027 GMT
Subject: CN=F24D29F87B4A4BA7104C6F74D3C4E04ED20C9E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:ce:46:4c:82:99:8d:d8:a8:70:ed:31:6a:
16:32:4a:be:d8:81:b4:3c:ef:4b:55:d2:55:32:60:
15:31:71:a6:41:46:74:29:67:3a:d7:31:f8:0f:83:
70:94:e2:ac:93:e0:88:42:08:ac:ab:bc:d3:a4:10:
13:c5:b0:37:fb:34:ac:cb:cf:3e:bf:68:ec:1b:af:
01:7a:e5:5f:6c:1a:f0:6c:60:bc:64:bf:2c:d4:64:
56:ea:0a:6b:51:9a:d8:08:e9:a2:5c:83:e5:cd:76:
5f:d2:1b:25:35:6a:09:0a:a9:0b:b6:a6:60:92:bf:
e1:92:3f:ef:71:51:2d:a9:19:d9:0b:c5:e2:f0:6c:
b0:18:23:f3:f7:b4:22:3d:83:e0:69:98:67:94:02:
60:6d:d2:f2:af:7a:f0:a1:2f:36:68:68:4e:30:5e:
fe:7a:4f:0c:15:5d:80:56:49:43:b1:0d:08:87:01:
54:36:0b:b2:a3:1c:2b:34:03:2c:8e:37:26:85:ce:
d2:ad:ad:b0:45:61:7d:1a:70:22:36:63:00:0b:1c:
da:76:28:8d:a5:b3:fe:01:60:f9:ff:3a:43:a4:0a:
20:41:67:ba:5a:92:01:2e:27:5e:52:1c:ad:a2:81:
ae:3b:75:20:a6:45:c7:96:9f:b1:6b:0b:b7:34:47:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4D:29:F8:7B:4A:4B:A7:10:4C:6F:74:D3:C4:E0:4E:D2:0C:9E:2E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ec:68:d7:ce:fb:db:1b:b1:e7:5e:35:e9:da:8d:71:a5:42:
26:60:6a:12:3e:5f:40:a3:d9:7e:f4:4a:cf:f2:25:af:f8:9c:
51:69:35:3d:d6:15:12:24:99:79:c9:5a:37:07:c6:a5:cc:e3:
a4:4d:88:bf:e9:d5:4c:0f:fb:0b:5d:d3:c3:f9:6b:4d:fc:9c:
09:14:23:08:e3:f6:19:bc:ad:6f:25:f8:34:94:ff:f2:c8:28:
62:00:ac:08:0c:d3:6e:be:db:14:87:3c:26:81:f3:a7:ea:15:
83:60:73:1d:71:bd:ce:3b:f8:fd:bf:5c:47:cb:29:c2:21:22:
e7:89:9f:e0:7a:e7:b2:5b:ec:d8:66:ab:25:c7:14:83:bc:1c:
cb:a2:95:16:f1:2e:ca:8f:d4:58:f6:4d:8d:83:66:ba:4e:8e:
d3:40:62:73:1d:1d:3b:9b:9c:90:74:19:5c:0e:05:83:77:8d:
a1:7a:92:8e:6e:bf:6c:93:db:90:f6:3e:58:64:a4:33:70:a5:
fa:2d:ff:80:e4:4b:2d:76:3f:3f:93:2b:60:49:30:8f:03:59:
7c:97:45:97:bf:51:90:d1:33:95:7e:72:19:39:dc:d9:85:de:
17:c1:b1:5e:9f:a5:4c:fa:cc:42:47:d3:8a:75:5b:03:45:fe:
3c:70:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:30:41 2026 by rpki-client