Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205018.roa
File: AS205018.roa (raw, json)
Hash identifier: LQCebRBOJT5rVsWbg18rYEjFTeP5l/Ad7JPcCFZ7Zbk=
Subject key identifier: 9C:A6:E2:47:9B:82:01:86:6C:C7:76:E5:03:4E:7D:0F:4F:EF:D3:EC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0BEE700208A85B71F2A2143CB7453292BE4141E2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205018.roa
Signing time: Sun 23 Aug 2026 13:49:30 +0000
ROA not before: Sun 23 Aug 2026 13:44:30 +0000
ROA not after: Sun 22 Aug 2027 13:49:30 +0000
asID: 205018
IP address blocks: 2a13:9500:e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ee:70:02:08:a8:5b:71:f2:a2:14:3c:b7:45:32:92:be:41:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 23 13:44:30 2026 GMT
Not After : Aug 22 13:49:30 2027 GMT
Subject: CN=9CA6E2479B8201866CC776E5034E7D0F4FEFD3EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:ee:30:cd:43:5c:93:e0:02:56:dc:3a:58:
33:8c:a6:7d:59:16:4b:78:dc:15:7d:1a:17:42:b7:
79:44:48:9b:0d:19:09:39:2d:78:51:c0:dc:0d:09:
23:70:f1:fe:c7:71:0b:2e:ff:6e:d1:23:c3:e9:2d:
d6:54:bd:c1:97:c3:13:7e:33:60:17:e7:c0:5c:c5:
a4:01:24:22:ce:be:94:68:ee:53:8d:3c:13:a1:8c:
47:5b:66:a7:90:bc:19:10:a4:47:15:2d:1e:65:60:
bf:06:9c:ac:0c:c4:7a:b4:4a:0a:6c:cf:ba:60:d5:
5d:44:03:19:2b:e2:c4:33:70:32:fe:65:38:68:a1:
40:00:69:58:3b:88:70:41:4a:4d:7b:9b:8f:97:7e:
8e:3a:29:35:ba:2c:7b:25:a6:60:8a:2b:cc:bb:02:
c5:12:d4:9c:08:d6:c1:1f:65:8a:bd:b4:eb:7c:e8:
1b:96:98:d0:d6:fb:64:51:e0:bd:8d:dc:56:41:39:
ab:ab:9f:3f:9a:73:a5:a8:2a:e9:f0:7c:db:8e:d4:
00:76:68:ee:4a:86:b9:d7:8f:3c:13:be:ea:35:86:
db:69:c7:df:2f:64:59:d6:12:eb:3d:8b:01:6a:a4:
27:f9:c0:cd:1e:5c:52:f8:4c:f6:8c:6a:1e:62:a4:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A6:E2:47:9B:82:01:86:6C:C7:76:E5:03:4E:7D:0F:4F:EF:D3:EC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:e4::/48
Signature Algorithm: sha256WithRSAEncryption
58:39:ec:e3:ef:61:48:78:b9:32:a0:f4:f0:12:4d:16:2e:87:
43:ae:76:e6:89:74:0b:c1:56:aa:42:ef:3b:c7:aa:dd:cf:9d:
9d:27:9c:7a:0f:f2:8e:1e:72:0a:36:b0:06:ed:18:19:83:2e:
d9:39:43:df:de:b3:de:f4:d9:01:fd:21:d4:25:ad:12:da:25:
14:a9:91:58:f2:be:d0:92:16:79:92:d7:31:56:35:72:c8:0a:
ae:bd:57:90:bc:12:57:46:fa:6c:d8:57:0a:d9:d7:e7:3e:6c:
5b:e7:5b:e0:f1:9f:08:40:da:c9:31:c1:58:aa:1a:07:7e:42:
1a:e1:53:75:ae:0a:d0:67:7f:41:df:05:f7:17:a5:e1:aa:df:
66:48:03:05:d3:f5:f8:e4:63:bb:57:20:f7:79:b8:dc:14:03:
e5:75:00:f5:66:43:0f:0f:e7:d5:f9:01:24:aa:1d:9e:0c:e6:
a4:41:b4:97:24:33:69:e0:cf:2a:3d:66:dc:e3:8b:38:0d:35:
48:11:9a:2c:83:35:bf:ac:52:50:2a:7f:5b:a0:10:3e:b0:19:
0f:e9:d4:44:93:08:e7:4d:4d:8c:e5:67:29:99:92:99:a8:4b:
84:44:a6:ef:4c:26:32:ba:f1:20:16:36:7d:4e:e7:df:9f:5d:
7f:7f:8e:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUC+5wAgioW3HyohQ8t0Uykr5BQeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MjMxMzQ0MzBaFw0yNzA4MjIxMzQ5MzBaMDMxMTAvBgNV
BAMTKDlDQTZFMjQ3OUI4MjAxODY2Q0M3NzZFNTAzNEU3RDBGNEZFRkQzRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwe4wzUNck+ACVtw6WDOMpn1Z
Fkt43BV9GhdCt3lESJsNGQk5LXhRwNwNCSNw8f7HcQsu/27RI8PpLdZUvcGXwxN+
M2AX58BcxaQBJCLOvpRo7lONPBOhjEdbZqeQvBkQpEcVLR5lYL8GnKwMxHq0Sgps
z7pg1V1EAxkr4sQzcDL+ZThooUAAaVg7iHBBSk17m4+Xfo46KTW6LHslpmCKK8y7
AsUS1JwI1sEfZYq9tOt86BuWmNDW+2RR4L2N3FZBOaurnz+ac6WoKunwfNuO1AB2
aO5KhrnXjzwTvuo1httpx98vZFnWEus9iwFqpCf5wM0eXFL4TPaMah5ipLsJAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUnKbiR5uCAYZsx3blA059D0/v0+wwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1MDE4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AADkMA0GCSqGSIb3DQEBCwUAA4IBAQBYOezj72FIeLkyoPTwEk0WLodDrnbmiXQL
wVaqQu87x6rdz52dJ5x6D/KOHnIKNrAG7RgZgy7ZOUPf3rPe9NkB/SHUJa0S2iUU
qZFY8r7QkhZ5ktcxVjVyyAquvVeQvBJXRvps2FcK2dfnPmxb51vg8Z8IQNrJMcFY
qhoHfkIa4VN1rgrQZ39B3wX3F6Xhqt9mSAMF0/X45GO7VyD3ebjcFAPldQD1ZkMP
D+fV+QEkqh2eDOakQbSXJDNp4M8qPWbc44s4DTVIEZosgzW/rFJQKn9boBA+sBkP
6dREkwjnTU2M5WcpmZKZqEuERKbvTCYyuvEgFjZ9Tuffn11/f46W
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:31 2026 by rpki-client