Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS218163.roa
File: AS218163.roa (raw, json)
Hash identifier: 0FtTU2szL9sVmVRAKrTrbbiFA2VHDdCpOufRjLECVxc=
Subject key identifier: 76:2E:48:E2:87:25:51:75:50:2F:45:80:FF:50:EE:1D:D9:66:18:1C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 736B4BD53775C344203B477FBDA6696F1A6AC788
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS218163.roa
Signing time: Thu 05 Nov 2026 13:55:21 +0000
ROA not before: Thu 05 Nov 2026 13:50:21 +0000
ROA not after: Thu 04 Nov 2027 13:55:21 +0000
asID: 218163
IP address blocks: 2a0e:8f02:22b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 21:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:6b:4b:d5:37:75:c3:44:20:3b:47:7f:bd:a6:69:6f:1a:6a:c7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 5 13:50:21 2026 GMT
Not After : Nov 4 13:55:21 2027 GMT
Subject: CN=762E48E287255175502F4580FF50EE1DD966181C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:2a:40:86:74:15:ae:b2:80:e3:20:b0:01:
cd:a4:7c:9b:b3:09:3f:fb:9a:01:9a:0a:29:c6:70:
1f:20:2c:36:2a:cd:30:fa:36:43:39:d0:49:fb:20:
24:3c:8f:1e:49:25:29:d3:48:3e:72:7e:97:de:f0:
3a:dd:d7:8f:ef:4e:01:2f:92:c3:f2:ab:b0:66:1b:
0a:bf:a9:8d:50:46:68:19:b6:d3:35:6d:74:61:ed:
a3:0a:36:26:29:41:83:47:60:a9:db:28:c0:5d:22:
29:c1:5a:31:63:9c:f8:27:07:94:db:db:17:ce:24:
e4:71:ff:21:ba:2e:59:20:fb:61:de:ac:2c:33:f6:
04:11:1a:2b:a3:fe:e6:ca:9c:e7:4a:00:06:79:a1:
dd:24:d2:cc:68:0c:84:f9:28:6a:30:b4:a8:46:fe:
46:91:c6:ab:59:bd:a1:94:df:17:4b:20:93:99:1b:
c3:2a:1a:af:8f:3d:52:93:8e:34:47:91:f6:fc:93:
be:83:0c:9d:ac:96:e4:17:6e:84:fe:93:7b:13:16:
6e:2c:22:32:cf:42:09:f8:fa:92:05:7e:d0:15:e6:
21:83:75:60:b9:00:d7:8b:f0:94:a8:33:c3:1e:c2:
0f:fa:1f:54:66:41:c3:84:4d:82:ea:6e:5b:35:3f:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:48:E2:87:25:51:75:50:2F:45:80:FF:50:EE:1D:D9:66:18:1C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS218163.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:22b0::/44
Signature Algorithm: sha256WithRSAEncryption
2c:5b:39:18:91:b6:72:84:85:76:8e:1b:23:be:9b:c3:1c:23:
fc:c0:24:e8:0d:d9:22:55:b3:24:4f:4f:8d:cd:e1:64:c0:a7:
18:1a:1c:8a:4e:34:ef:93:93:61:1b:3e:85:32:a5:6c:cc:c7:
02:38:42:c5:bb:d9:86:d1:3a:08:9d:55:5d:25:b0:f2:a7:2b:
8c:88:dc:4d:88:c6:10:32:10:87:35:af:1e:6a:52:8a:1a:13:
bc:39:2c:43:84:63:d7:c4:a1:bb:4f:3d:42:0e:9f:79:4f:25:
e8:7e:47:b8:13:ea:b9:ef:22:6b:32:f9:93:2b:41:fe:2f:8b:
98:a0:5c:22:20:ab:36:f5:21:5d:92:ed:dc:ad:c1:f0:42:bd:
f8:b1:65:f3:2e:83:13:1f:8c:c2:7e:97:56:c8:12:ed:ae:83:
d4:c2:9b:1a:19:48:d8:1f:03:3b:28:53:ae:12:e8:93:26:be:
40:88:56:16:d8:b2:14:cb:4a:45:81:c5:60:16:33:d2:39:59:
bd:49:37:d2:5b:55:41:ab:b7:23:83:7d:31:de:1b:d0:91:a8:
96:c4:13:d6:b1:ca:fe:e6:a8:ea:d3:f0:aa:35:b7:59:1c:fd:
6c:d0:31:49:9b:60:a5:84:2f:30:b1:7a:88:81:03:39:3b:10:
5f:8a:7e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 11:33:46 2026 by rpki-client