Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218799.roa
File: AS218799.roa (raw, json)
Hash identifier: FTgOjfyvT0oPL5XidPRx1RCA+vxZtGOu//6AbgpaX5I=
Subject key identifier: 14:65:C6:86:32:35:E2:33:0B:B0:A6:AF:F5:C1:0C:E6:D2:94:D8:B1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3E443A9E214C84802804BA30A6959DC1670B9D02
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218799.roa
Signing time: Thu 03 Sep 2026 18:50:38 +0000
ROA not before: Thu 03 Sep 2026 18:45:38 +0000
ROA not after: Thu 02 Sep 2027 18:50:38 +0000
asID: 218799
IP address blocks: 181.215.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:44:3a:9e:21:4c:84:80:28:04:ba:30:a6:95:9d:c1:67:0b:9d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 3 18:45:38 2026 GMT
Not After : Sep 2 18:50:38 2027 GMT
Subject: CN=1465C6863235E2330BB0A6AFF5C10CE6D294D8B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:a9:83:70:51:82:b3:4a:f6:74:56:19:4f:
16:d6:76:9c:31:af:83:c5:b2:99:fb:5a:68:bc:d4:
60:d8:68:d9:a4:44:52:b8:b9:0d:08:58:99:33:7e:
83:35:e9:24:99:54:2b:a3:08:23:12:9d:51:1a:1c:
69:18:af:0b:bc:9c:ea:95:b1:7f:f7:30:48:18:8e:
33:60:78:26:79:cd:fe:d4:5e:64:cb:bd:e9:dc:05:
20:20:15:50:57:c0:6f:e9:d3:f0:8f:88:d7:fb:7d:
4d:4b:d2:10:f1:d4:de:c5:bb:b5:90:2a:2d:52:8a:
7a:09:75:aa:56:41:14:6a:00:68:6a:7c:f1:2e:2e:
1f:97:2f:8b:c1:46:fc:c7:82:78:42:1b:73:56:4a:
b8:d1:5e:50:92:fd:e4:3b:38:c3:1d:c6:e7:ab:8b:
de:bf:05:60:f3:8e:f8:14:4d:07:ab:db:e6:39:76:
0c:58:61:7f:77:a4:e0:ae:51:78:57:a7:e0:9d:71:
df:b6:48:c5:93:de:07:d9:31:53:1d:c5:5e:18:01:
65:b3:c0:54:bb:6e:b3:9d:48:99:22:cf:bf:a3:7c:
80:ae:42:33:14:2e:85:fc:4e:5e:36:7a:40:46:01:
13:d4:23:2d:56:fb:ee:6f:12:d7:2d:f3:3b:1b:84:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:65:C6:86:32:35:E2:33:0B:B0:A6:AF:F5:C1:0C:E6:D2:94:D8:B1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:23:f1:85:81:0c:2f:85:38:44:3f:b5:1e:2c:4d:5f:d6:0b:
6f:0a:8c:35:46:72:07:82:bd:35:19:00:2e:47:07:6a:11:bc:
42:c3:d3:40:4c:82:d3:d2:84:f0:23:02:86:fa:d8:ed:36:11:
c6:45:3d:98:31:28:53:2a:28:7a:7f:49:b4:d0:fc:f3:41:09:
ef:e7:4e:77:7b:97:69:2c:13:e9:03:13:2d:fc:bd:f2:36:1f:
8c:c3:45:fd:43:9a:dd:52:43:b0:07:85:b3:cb:61:48:ac:f4:
99:43:fb:32:d8:38:ba:6a:60:71:34:c6:8f:f5:4a:8d:a9:37:
b4:67:37:1b:ea:07:4d:cf:ba:76:04:a4:26:19:2c:f1:91:f0:
e6:5f:9d:54:77:de:56:a6:00:05:0c:51:99:f7:47:db:61:54:
c4:65:4c:1f:e3:9d:cd:6f:48:63:3b:20:cb:f5:8f:cf:75:27:
77:3d:c0:74:2d:01:48:f1:dc:5e:97:84:03:c1:bf:eb:ef:0a:
00:fe:56:e9:22:79:de:5a:5b:f0:a4:8b:5a:5f:bb:16:36:17:
c5:8e:8f:0d:e1:72:35:c5:dc:bc:93:f6:89:fc:00:7d:41:c0:
7b:43:f1:43:d6:7a:23:16:ac:fb:49:c6:4b:ad:92:7c:0b:23:
00:fc:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:10:49 2026 by rpki-client