Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216030.roa
File: AS216030.roa (raw, json)
Hash identifier: xBtrzSUTzWxCpPAD/0SDblOsc6pta8lO+756ry+Al30=
Subject key identifier: 37:60:42:2D:C1:5E:18:0E:BD:3A:E1:B2:4E:5D:08:F6:4E:9B:7F:07
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6B57891C836903E176D39F165095728B45AA6AB4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216030.roa
Signing time: Mon 02 Mar 2026 18:40:24 +0000
ROA not before: Mon 02 Mar 2026 18:35:24 +0000
ROA not after: Mon 01 Mar 2027 18:40:24 +0000
asID: 216030
IP address blocks: 82.22.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:57:89:1c:83:69:03:e1:76:d3:9f:16:50:95:72:8b:45:aa:6a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 2 18:35:24 2026 GMT
Not After : Mar 1 18:40:24 2027 GMT
Subject: CN=3760422DC15E180EBD3AE1B24E5D08F64E9B7F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:c6:99:4b:6b:b9:f4:ff:28:32:9d:af:93:
e4:bc:a8:39:77:3c:29:89:22:3e:36:6c:2b:bf:21:
ed:63:64:d9:c0:06:07:41:36:73:78:f1:9e:44:65:
26:41:f4:58:41:63:33:4b:56:d3:7f:43:68:68:68:
7a:15:71:d7:b4:2b:df:e7:55:87:e4:42:4f:b4:67:
35:b9:dd:9a:59:f9:27:8d:51:64:36:99:05:ab:7e:
d8:cf:29:63:41:9c:05:f3:ab:f1:5d:87:c4:62:74:
c3:4e:4b:14:40:3b:b1:09:18:4c:81:63:b8:9e:8c:
1a:90:b3:21:b8:9e:b8:70:9d:ea:fb:ec:b0:45:d2:
96:d9:4e:f4:06:79:cd:40:b9:a5:d6:c0:92:7b:8f:
93:f1:e4:df:b4:2c:0e:f2:24:d5:5a:9c:26:f6:64:
b4:b1:3d:16:d5:b5:c0:03:1f:0b:23:2d:68:de:43:
23:59:eb:3b:b2:b4:58:34:78:92:81:89:a9:b0:49:
e2:8a:64:cc:4a:4f:ca:6a:df:6c:2f:f6:38:09:80:
fb:dd:90:c5:38:7f:de:5b:2c:ef:3d:e4:45:65:ac:
d0:d8:81:5d:02:bd:a0:bb:76:be:58:1a:5a:d1:e6:
20:86:7d:7b:68:45:68:e6:cf:23:6f:97:fb:ef:ae:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:42:2D:C1:5E:18:0E:BD:3A:E1:B2:4E:5D:08:F6:4E:9B:7F:07
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ce:c9:04:90:74:c8:72:bf:6c:8d:27:a9:44:d0:1a:32:6e:
24:51:44:e6:09:a9:8f:be:7a:41:5a:da:7d:43:4c:da:24:ad:
ca:df:31:3f:33:1e:e2:a0:d7:4f:b0:d2:c5:77:41:26:90:2a:
01:b6:88:2a:79:15:f3:3e:d9:4b:df:42:81:ec:10:6c:72:51:
70:e1:10:6d:70:da:87:e6:ac:c1:c0:ef:ca:1c:ac:6a:37:0c:
ef:c5:5e:23:ee:ea:e2:20:cf:bf:c0:42:ab:1b:63:9d:bb:19:
ad:f9:6d:1f:7b:d2:25:b9:6b:68:f8:0d:06:b1:60:69:dd:1b:
a1:56:23:4e:65:9b:6b:69:0f:0a:3d:17:db:f8:c2:18:bf:73:
49:86:45:32:d5:4f:a8:90:81:e2:27:e1:96:a4:cb:96:03:e3:
22:5e:c4:75:e9:21:71:c2:8c:33:dd:e9:35:9c:79:01:8c:5b:
52:2e:75:7e:d2:1b:f2:61:41:3a:f4:4f:e4:74:00:af:9f:08:
99:85:48:27:ff:87:e0:dd:33:5d:5b:79:4e:ae:a7:b9:30:22:
41:0d:97:be:97:c9:0b:c4:58:6f:d7:1d:62:35:69:2a:d1:50:
72:52:ec:21:1b:65:a4:16:9b:3c:53:15:55:7d:a1:28:ab:2f:
74:fa:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:44 2026 by rpki-client