Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218955.roa
File: AS218955.roa (raw, json)
Hash identifier: kZDSJ1tXA7OVGJpYDA9AMaZkheiizf/gyXUNOjeH55k=
Subject key identifier: 51:18:81:37:CE:AB:8D:6F:9F:67:10:97:29:7E:D6:D4:2A:63:C9:00
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 24430D6AB87D6A033C5F3BB48359F2931B80621D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218955.roa
Signing time: Wed 02 Sep 2026 12:03:36 +0000
ROA not before: Wed 02 Sep 2026 11:58:36 +0000
ROA not after: Wed 01 Sep 2027 12:03:36 +0000
asID: 218955
IP address blocks: 185.139.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:43:0d:6a:b8:7d:6a:03:3c:5f:3b:b4:83:59:f2:93:1b:80:62:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 2 11:58:36 2026 GMT
Not After : Sep 1 12:03:36 2027 GMT
Subject: CN=51188137CEAB8D6F9F671097297ED6D42A63C900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5e:82:3f:8b:43:9d:c8:de:eb:71:d9:89:96:
72:58:cb:cc:f5:39:c0:cc:1a:9f:59:69:18:8b:6e:
32:db:e9:7b:06:7b:58:5b:01:1d:ee:00:46:d1:99:
61:27:e1:af:b7:96:a1:a6:5e:9f:4d:41:c4:1b:e9:
89:ba:ff:37:42:79:f1:20:e2:7c:a9:b1:13:6c:b6:
8e:1c:93:d9:8a:74:c9:55:e4:7b:96:d3:7e:bd:b0:
31:f2:5b:52:92:70:01:e7:d0:c3:19:7d:60:54:0f:
3d:54:5d:59:eb:19:c5:88:a6:ee:6c:63:52:57:52:
d1:51:93:be:3d:2e:c2:03:c5:d4:56:01:fe:f5:a1:
21:90:1d:a9:c3:3d:67:19:1e:71:d7:25:38:1f:56:
4a:6b:ed:90:5b:bb:9f:14:f1:dc:e7:40:fd:74:3a:
ce:88:e7:83:22:6d:0d:de:a9:bc:0a:1d:f1:21:b9:
8a:8b:89:41:e9:f2:3b:f1:27:de:97:70:aa:21:e1:
ee:75:9b:40:13:da:c9:57:72:66:f4:d0:e9:d7:0f:
a3:5e:6c:36:f2:a2:98:93:bc:95:8a:9b:f3:6d:ed:
e1:20:db:33:04:08:dc:67:c6:66:1e:94:40:4a:9a:
be:eb:c3:0a:d9:fc:f9:f2:e8:82:69:ac:fe:bc:bf:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:81:37:CE:AB:8D:6F:9F:67:10:97:29:7E:D6:D4:2A:63:C9:00
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.237.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5b:f3:82:fd:14:53:e5:3f:95:b0:c9:2d:a5:90:aa:f4:f1:
92:0c:53:29:60:50:17:0b:58:e8:30:7a:9e:51:5e:02:fe:37:
99:bb:8c:63:41:23:49:1d:29:3e:c4:b4:d5:23:45:79:0d:45:
23:84:3f:a5:6f:a8:05:11:e3:7d:79:9e:e0:dd:bf:a1:7b:d9:
31:10:0f:01:6a:a2:4a:55:b6:b2:8b:85:e6:e7:83:1e:99:ba:
72:60:ed:74:4d:9c:27:99:ad:db:bd:02:b4:6e:a5:08:82:e8:
8e:a7:fd:78:9b:a4:32:0d:f6:10:e7:19:78:68:55:46:e3:d1:
06:32:cf:98:17:8a:2f:cb:6b:cf:d0:ef:97:f8:18:65:5f:0d:
e9:2d:00:4e:3a:96:73:fa:1f:a5:34:fd:62:57:21:83:c0:7b:
5c:11:02:18:56:ba:c0:ad:57:82:9c:67:a6:8c:a3:81:7b:81:
5e:13:90:18:1e:91:0a:bc:49:9e:32:fa:58:cb:cf:74:cd:5b:
4b:28:10:5c:8c:3c:3e:3a:8a:55:43:ca:d3:cf:a7:08:94:5e:
cb:eb:26:f8:92:6b:d9:2b:30:1a:a2:1a:86:46:a3:23:48:06:
76:92:1e:8e:2d:f7:b7:d4:76:82:4e:9f:09:d5:29:7c:0c:f0:
40:31:ea:d8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUJEMNarh9agM8Xzu0g1nykxuAYh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MDIxMTU4MzZaFw0yNzA5MDExMjAzMzZaMDMxMTAvBgNV
BAMTKDUxMTg4MTM3Q0VBQjhENkY5RjY3MTA5NzI5N0VENkQ0MkE2M0M5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5XoI/i0OdyN7rcdmJlnJYy8z1
OcDMGp9ZaRiLbjLb6XsGe1hbAR3uAEbRmWEn4a+3lqGmXp9NQcQb6Ym6/zdCefEg
4nypsRNsto4ck9mKdMlV5HuW0369sDHyW1KScAHn0MMZfWBUDz1UXVnrGcWIpu5s
Y1JXUtFRk749LsIDxdRWAf71oSGQHanDPWcZHnHXJTgfVkpr7ZBbu58U8dznQP10
Os6I54MibQ3eqbwKHfEhuYqLiUHp8jvxJ96XcKoh4e51m0AT2slXcmb00OnXD6Ne
bDbyopiTvJWKm/Nt7eEg2zMECNxnxmYelEBKmr7rwwrZ/Pny6IJprP68v0FJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUURiBN86rjW+fZxCXKX7W1CpjyQAwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE4OTU1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYvt
MA0GCSqGSIb3DQEBCwUAA4IBAQBlW/OC/RRT5T+VsMktpZCq9PGSDFMpYFAXC1jo
MHqeUV4C/jeZu4xjQSNJHSk+xLTVI0V5DUUjhD+lb6gFEeN9eZ7g3b+he9kxEA8B
aqJKVbayi4Xm54MembpyYO10TZwnma3bvQK0bqUIguiOp/14m6QyDfYQ5xl4aFVG
49EGMs+YF4ovy2vP0O+X+BhlXw3pLQBOOpZz+h+lNP1iVyGDwHtcEQIYVrrArVeC
nGemjKOBe4FeE5AYHpEKvEmeMvpYy890zVtLKBBcjDw+OopVQ8rTz6cIlF7L6yb4
kmvZKzAaohqGRqMjSAZ2kh6OLfe31HaCTp8J1Sl8DPBAMerY
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:28 2026 by rpki-client