Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218887.roa
File: AS218887.roa (raw, json)
Hash identifier: BvWT3b4njqvGKbTMXeWP+0CiYyIsNCP0Cx1b6ydt9DA=
Subject key identifier: F2:F9:8F:EB:80:5E:9A:C5:C0:07:73:D1:F2:18:53:53:BF:96:8C:EA
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 20543C4492F42ADF4836EBD04AE36037FED6F9A8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218887.roa
Signing time: Mon 14 Sep 2026 05:44:35 +0000
ROA not before: Mon 14 Sep 2026 05:39:35 +0000
ROA not after: Mon 13 Sep 2027 05:44:35 +0000
asID: 218887
IP address blocks: 179.61.236.0/24 maxlen: 24
185.139.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:54:3c:44:92:f4:2a:df:48:36:eb:d0:4a:e3:60:37:fe:d6:f9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 14 05:39:35 2026 GMT
Not After : Sep 13 05:44:35 2027 GMT
Subject: CN=F2F98FEB805E9AC5C00773D1F2185353BF968CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:21:c7:b9:61:f9:7e:83:1e:d0:27:ec:6e:
57:ac:f0:c1:ae:cc:02:92:4c:94:e8:46:18:98:d8:
b9:89:aa:d2:35:fd:3c:c1:8b:50:d9:8d:73:4b:37:
92:c3:14:1b:13:79:b6:2f:c7:26:de:01:3f:be:66:
28:f6:90:32:4c:12:37:6e:25:54:fa:fe:9a:19:06:
a0:58:a9:c4:36:11:53:8d:73:a5:7c:fa:09:a4:64:
e7:10:1d:80:08:12:04:5e:65:06:4b:91:b9:6e:ab:
7c:5f:5c:bd:af:fa:fc:47:35:c9:c3:93:c4:97:ee:
d3:0c:49:4b:ba:37:28:14:23:bf:87:14:fd:51:34:
35:4e:e4:c1:fe:8c:de:39:cf:bc:0c:67:f3:99:de:
7d:db:ca:60:8e:62:90:1b:5b:ef:9a:20:1c:a0:aa:
7a:49:52:08:d4:0e:92:97:12:a9:81:8c:54:d3:eb:
3b:b6:e4:52:44:8b:c3:21:64:cd:5e:6f:31:c8:4f:
9d:db:95:5c:e5:6b:00:d4:65:0a:dd:29:a6:f3:34:
15:49:cf:5c:05:ca:aa:f2:a0:c9:fa:5a:89:f3:6e:
7f:fb:28:a1:52:90:4f:31:29:6d:5d:89:54:c5:27:
42:a7:0c:c3:88:63:3a:fe:7a:2b:e2:ae:c0:6a:06:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:8F:EB:80:5E:9A:C5:C0:07:73:D1:F2:18:53:53:BF:96:8C:EA
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.236.0/24
185.139.0.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c3:8f:35:69:88:ad:8f:40:e0:59:d4:30:a6:7f:12:9f:2b:
80:70:6d:23:2d:07:fc:d0:b4:4a:f5:7f:fe:51:14:c9:44:dc:
43:81:d8:d5:e7:e8:8b:3f:c8:06:7a:5a:19:2d:08:ff:5e:b6:
75:75:10:cf:97:fb:47:ec:95:f7:9a:4e:55:f1:da:43:86:6e:
7a:63:51:19:e1:2d:d0:93:a4:f4:d6:0a:8a:39:1f:0c:3d:f7:
37:64:dc:fa:9e:ba:91:f7:b4:5e:1c:2a:40:d1:fd:22:27:e4:
62:29:42:4f:e9:64:72:72:44:32:7f:50:42:05:50:a5:70:04:
20:2c:ff:bc:ec:b5:b3:16:e0:d2:13:3a:8a:5f:07:3e:c8:f9:
46:31:fd:fe:79:4e:c7:d4:d8:b8:11:ca:09:99:e2:a6:60:66:
e4:53:ba:0d:bf:a3:d4:25:59:63:e6:dc:9f:60:07:7c:ac:7a:
c8:65:68:eb:b7:0b:c0:bf:de:8c:24:e5:65:c3:4b:55:e1:60:
c3:7a:7d:83:b2:3c:db:22:30:8f:00:06:3b:5c:de:8c:41:e2:
ca:d6:f3:b5:bc:15:50:1a:b8:51:a1:4a:aa:73:9d:31:75:78:
3e:ad:cf:21:2e:b6:2e:5a:d5:ca:7d:bc:51:1f:af:66:2e:8f:
14:b7:48:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:31:57 2026 by rpki-client