Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218862.roa
File: AS218862.roa (raw, json)
Hash identifier: fYIlE+nXOLvKm3y1qts6RswomA31L4ZsVI2KmeY0L0Y=
Subject key identifier: D5:9F:DE:1F:89:02:8E:29:41:18:01:4D:46:0B:28:1A:B6:94:29:ED
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 176DA66998C9E0ABDEABDE68DB5EE39B4E26CBA4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218862.roa
Signing time: Mon 07 Sep 2026 06:21:27 +0000
ROA not before: Mon 07 Sep 2026 06:16:27 +0000
ROA not after: Mon 06 Sep 2027 06:21:27 +0000
asID: 218862
IP address blocks: 193.107.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6d:a6:69:98:c9:e0:ab:de:ab:de:68:db:5e:e3:9b:4e:26:cb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 7 06:16:27 2026 GMT
Not After : Sep 6 06:21:27 2027 GMT
Subject: CN=D59FDE1F89028E294118014D460B281AB69429ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:45:15:f3:12:c5:4b:87:33:96:6e:c7:8a:
de:84:c1:63:72:1a:66:20:59:e7:a8:7e:78:bb:7e:
1c:b6:5c:1b:d1:3d:44:6c:b3:4b:f0:98:ea:b2:b7:
c0:cc:8b:e4:8b:b6:d3:92:7b:7f:d7:b0:d3:2e:61:
c8:24:52:4b:76:d4:7d:c5:ed:f2:72:36:4c:d3:2e:
12:df:f8:47:0c:01:5b:8c:a7:d2:e9:f4:1d:01:df:
47:8e:ca:40:0a:13:4f:68:93:05:28:54:2a:af:5d:
da:27:83:55:e9:e8:70:c7:0c:a8:ed:cf:be:6d:d3:
af:fc:dc:92:f6:fe:8e:94:95:ec:99:3a:99:4e:9d:
34:34:42:02:31:52:3c:aa:6d:fa:fc:e9:2a:50:81:
de:cb:e2:76:2a:39:e5:58:8d:38:53:df:41:74:ff:
97:de:db:bf:2c:4b:13:d8:aa:47:39:d8:72:1a:4a:
41:bc:60:a2:98:56:ba:db:dd:ca:3e:de:b6:0a:d6:
2c:0e:f1:10:71:b6:94:f3:a8:93:e1:36:85:05:cd:
4a:0d:db:65:68:2a:24:27:81:0c:d4:ca:6e:ca:f9:
f1:9b:cf:cd:27:99:55:a7:40:a8:4f:d1:a1:c2:90:
ce:47:e6:57:c4:1e:db:a6:b8:0d:83:57:dc:a7:40:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:DE:1F:89:02:8E:29:41:18:01:4D:46:0B:28:1A:B6:94:29:ED
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:63:52:57:51:ca:6e:d9:c1:5f:d6:64:29:b2:3e:4a:c8:d2:
02:2b:1a:9e:82:5e:72:81:4f:91:79:25:8c:59:d5:0a:5a:e2:
3f:f3:a8:b0:e2:10:55:f5:49:e0:1d:38:fe:10:80:34:cb:6f:
05:f1:af:c6:18:e6:ff:96:06:aa:bf:7f:c2:60:f1:19:2e:84:
30:29:64:74:eb:ea:a5:35:57:e5:b6:ce:3e:a8:d4:20:13:c7:
51:2b:66:5c:1c:4b:41:6b:73:3e:8e:2b:77:31:d4:92:17:71:
35:1b:36:d0:c0:2f:88:1e:76:a5:c3:b1:11:52:f3:f5:8a:9b:
8c:20:8e:63:1b:4b:18:e0:c0:89:7a:7e:32:a6:9b:48:3f:d9:
de:c3:8f:50:6f:1c:74:f7:19:34:30:22:cc:c3:1d:f4:02:96:
be:ee:f2:8c:4d:2f:b1:45:6e:6a:05:07:65:c2:48:9c:a9:3b:
a9:b5:c1:9d:9e:51:aa:42:db:96:45:6f:72:f1:a1:1c:72:3d:
19:97:5e:15:9e:55:02:a7:5c:f2:fd:fe:6a:6f:80:f9:89:77:
68:8f:6a:97:56:c1:1c:40:46:18:58:4b:b8:6d:02:f9:13:5f:
de:f2:60:58:19:0c:53:5e:5c:98:48:0e:2f:39:d0:2a:66:a2:
71:fc:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:00 2026 by rpki-client