Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209018.roa
File: AS209018.roa (raw, json)
Hash identifier: O8Q52KfjAaIKen7NOm2hemoKFV5/vEuWsNQ2eyqKYs8=
Subject key identifier: 40:47:0D:30:58:7C:80:09:0F:C5:9E:B9:B9:FD:99:4B:24:D8:92:2D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7A2301E976B402AAF8A3B3E1E9B5155CCDD63313
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209018.roa
Signing time: Fri 05 Jun 2026 07:04:35 +0000
ROA not before: Fri 05 Jun 2026 06:59:35 +0000
ROA not after: Fri 04 Jun 2027 07:04:35 +0000
asID: 209018
IP address blocks: 82.47.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:23:01:e9:76:b4:02:aa:f8:a3:b3:e1:e9:b5:15:5c:cd:d6:33:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 5 06:59:35 2026 GMT
Not After : Jun 4 07:04:35 2027 GMT
Subject: CN=40470D30587C80090FC59EB9B9FD994B24D8922D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:a7:5b:55:de:ea:0c:13:03:d9:97:db:0e:
1b:4e:eb:31:ca:b2:c3:24:4d:e4:94:be:ac:bb:41:
5d:33:fd:ee:80:3a:fc:24:50:35:03:c5:2c:83:4a:
3b:0b:df:5f:8c:8e:fb:12:04:03:3a:41:53:7e:b2:
c9:37:4e:c9:16:85:ca:47:63:50:b1:16:44:1e:f2:
58:0b:ee:4e:1f:b4:23:e6:2c:64:bb:ef:7b:0e:7e:
cb:b3:89:14:ef:26:80:6d:62:f8:90:7c:32:e1:04:
74:ba:26:3f:97:6b:ae:c6:c1:89:04:5c:33:ea:2c:
03:b0:af:f7:03:8f:e2:84:dc:c7:15:26:0e:f2:f0:
6c:fd:86:da:c2:01:bc:e2:8c:1d:ca:61:e7:62:37:
9d:a1:69:58:ca:fd:61:9d:a0:d7:65:03:79:96:37:
95:bc:96:88:90:05:8c:e2:0a:b7:4e:2f:c8:a7:4c:
8e:48:a6:94:b3:4e:90:8f:06:d2:72:1d:1d:e1:ba:
d2:9b:0f:86:d8:5d:cd:29:d2:58:e7:b9:93:93:4e:
e4:aa:27:44:5d:8a:a0:32:03:13:a0:7f:e7:c3:24:
ca:ba:27:33:67:53:fd:9b:aa:bc:e7:ff:e9:e9:07:
0f:97:52:ab:1a:89:81:fc:c6:fa:f5:46:c4:b7:b1:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:0D:30:58:7C:80:09:0F:C5:9E:B9:B9:FD:99:4B:24:D8:92:2D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e8:87:4e:09:12:a5:a0:19:51:8a:bb:49:47:dd:b1:45:f6:
d6:e8:3c:88:cc:23:75:a5:7f:84:3c:20:c2:cc:ae:78:f3:2d:
0a:e2:cc:57:2b:bc:11:1b:1a:b4:38:6a:cc:f8:61:16:8d:24:
3a:15:74:88:e0:d9:77:5c:ff:9f:27:7c:06:ab:ed:bd:43:d3:
be:8c:33:df:25:46:e5:57:e3:d9:ef:c1:f6:fa:71:55:72:f7:
29:cf:50:f5:34:6d:76:dd:93:3b:dc:8e:b6:07:2c:1e:f7:ca:
7a:1f:99:1b:4b:b5:a6:e5:fb:9f:22:b9:76:b8:23:fb:cd:cd:
4a:ef:64:48:b5:e0:ef:52:2f:51:1e:34:a2:3d:5b:73:5b:66:
64:0a:e0:9c:6e:05:de:f9:e9:62:a8:4e:2c:89:1c:0b:20:e4:
79:ea:4e:9d:d8:22:45:56:dd:df:de:3f:76:23:29:de:22:cd:
f5:f9:e8:00:8d:f2:dc:73:7c:00:68:ab:6a:c3:bd:11:ee:37:
71:7b:99:70:26:60:1d:73:be:48:38:9c:7d:8a:a8:d6:e8:5a:
3f:12:df:30:73:fc:80:1e:c6:9d:5b:28:6d:da:71:2f:24:b1:
6e:4e:b9:13:1a:e1:03:eb:fd:60:38:5e:19:04:0c:b2:3f:91:
2d:84:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:34 2026 by rpki-client