Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS218994.roa
File: AS218994.roa (raw, json)
Hash identifier: GqC8CZr2r15tKKoJDw/3GQRgh/7F98xvdEz2Ygqwwp0=
Subject key identifier: 7B:C7:2A:84:4E:20:03:67:5C:0C:9D:73:87:7F:09:05:CB:C6:74:4C
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 74D26E69C292BE01786E52D3A22780BF48C1089A
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS218994.roa
Signing time: Tue 11 Aug 2026 12:28:22 +0000
ROA not before: Tue 11 Aug 2026 12:23:22 +0000
ROA not after: Tue 10 Aug 2027 12:28:22 +0000
asID: 218994
IP address blocks: 217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d2:6e:69:c2:92:be:01:78:6e:52:d3:a2:27:80:bf:48:c1:08:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Aug 11 12:23:22 2026 GMT
Not After : Aug 10 12:28:22 2027 GMT
Subject: CN=7BC72A844E2003675C0C9D73877F0905CBC6744C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4e:3e:3e:a8:9f:26:cb:44:50:51:90:c8:01:
40:af:51:59:a6:68:b4:9f:b8:a0:f9:9a:05:da:3a:
32:30:b2:7b:56:e4:6d:d6:fc:78:d9:1c:8b:7b:fa:
c9:9a:06:5b:a6:20:66:fc:7f:b5:ea:36:32:ea:5b:
7c:8e:1d:c7:92:94:88:13:70:74:bb:1e:e0:8a:e4:
d3:0a:7d:ce:04:14:51:df:b7:d7:f5:f7:b0:63:e2:
9c:ed:08:08:c9:e9:b9:04:ce:3d:f5:ce:48:24:a7:
47:a8:b0:2c:4b:27:14:0e:5c:92:df:aa:f1:82:9f:
3d:a9:f3:05:0a:82:91:85:96:80:d5:56:38:6a:dc:
5a:93:7a:4c:35:0b:73:7a:d6:7b:4c:9a:e0:12:71:
07:99:19:c1:46:5a:36:49:0c:0f:0f:2f:78:da:22:
e1:b5:42:79:e7:42:80:ef:14:36:0f:28:c2:81:76:
31:ab:84:d9:1f:0c:29:d3:80:6b:98:e7:ed:e9:1d:
91:8b:a6:91:46:4d:73:8e:90:87:3e:e9:ab:76:96:
e0:9d:40:64:c3:ca:8c:dc:01:f5:bf:e9:f0:c9:fa:
53:1f:74:47:59:0f:09:5d:cd:31:d1:81:da:a3:0f:
6c:c0:9f:42:61:a9:08:4c:85:d1:95:d5:dc:eb:eb:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C7:2A:84:4E:20:03:67:5C:0C:9D:73:87:7F:09:05:CB:C6:74:4C
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS218994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e9:b8:ac:9e:a5:e5:69:14:e6:90:12:66:c6:bc:41:8f:5f:
5c:b9:43:57:30:8e:51:0c:3b:aa:b7:8e:c5:25:86:f3:97:17:
5b:94:65:79:ba:c7:a5:f7:59:f9:b7:b6:07:16:12:e5:27:26:
36:58:42:90:4a:99:77:6a:5c:00:c6:7c:13:a4:59:cd:61:46:
5a:07:ca:4a:2b:75:02:d0:86:84:35:8d:7c:b7:42:7b:bd:67:
9a:4e:ef:f9:5f:b1:1a:b6:1c:a8:cd:e1:37:bd:e3:5d:32:ae:
99:c6:90:cf:30:ad:5c:59:86:31:9d:61:46:f3:50:f1:c6:3b:
5a:13:c2:6d:f1:83:52:c1:51:1d:94:e3:95:05:89:48:bc:c1:
45:f6:33:fa:77:fa:e9:a4:d3:57:bc:83:97:8d:76:4b:4b:4f:
94:ed:7f:27:8a:9b:5a:11:65:3d:72:b1:74:c7:32:30:15:ed:
b7:41:44:95:13:2c:80:19:fc:61:8e:2a:8e:86:17:b5:55:f7:
4b:cc:3b:7f:6b:dc:fc:c8:fa:d1:00:19:4d:2c:0c:ac:35:bc:
fb:c5:28:e3:fb:9b:07:31:cf:0c:71:e2:28:3d:af:ec:4a:12:
6d:de:6f:0b:1f:1d:8c:16:17:f9:75:f1:d1:69:52:f7:62:ba:
fe:c2:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:03 2026 by rpki-client