Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216182.roa
File: AS216182.roa (raw, json)
Hash identifier: FahcXMVeTkk9wWwKnkFYFvwn2E9rUnxB2OmFxwi9FjY=
Subject key identifier: 7C:16:9A:17:9B:AA:99:27:31:8E:97:40:B4:74:63:2E:B4:35:74:71
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 69459FD3D147C72B040E3E17F47CD2AFC010E859
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216182.roa
Signing time: Sun 12 Jul 2026 10:49:09 +0000
ROA not before: Sun 12 Jul 2026 10:44:09 +0000
ROA not after: Sun 11 Jul 2027 10:49:09 +0000
asID: 216182
IP address blocks: 2a13:9500:c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:45:9f:d3:d1:47:c7:2b:04:0e:3e:17:f4:7c:d2:af:c0:10:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 12 10:44:09 2026 GMT
Not After : Jul 11 10:49:09 2027 GMT
Subject: CN=7C169A179BAA9927318E9740B474632EB4357471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:b2:e3:08:e1:be:b4:a6:7f:7e:ea:79:82:
16:54:d1:5f:81:32:32:c3:f2:84:47:47:2b:b4:a2:
95:19:74:6a:d3:9d:b0:eb:91:32:c6:d9:3e:3d:f7:
e2:57:c7:14:7b:23:43:31:8e:a0:f0:07:80:1f:1c:
36:55:40:5d:db:70:64:c4:9f:8c:3d:ee:e8:ff:d7:
6e:55:ac:3c:88:e7:6c:01:bd:ff:3a:dd:f0:b0:7d:
65:17:d8:82:7f:61:ba:fe:a9:bc:c4:9c:5e:2f:2c:
59:5f:dc:d0:72:fd:5a:b7:fd:e9:27:bb:8b:49:e6:
13:b2:4a:f0:ff:b7:75:ae:d0:98:a4:18:1c:d1:62:
30:cc:1e:be:7e:88:3b:b6:fb:dc:af:9a:e6:9b:a2:
a8:f5:17:3c:99:66:3d:7a:91:1b:7d:67:53:c3:e7:
af:c7:e2:b2:5c:f6:a9:72:02:4a:2a:1e:6b:c1:d2:
94:db:ca:6d:01:16:e0:3f:ac:92:fb:7a:ad:da:1f:
12:8c:b5:a9:0b:7c:1c:96:e1:bc:d0:3c:1b:bf:6b:
7d:c4:3e:6d:e5:4d:97:07:70:62:1d:ee:d6:2d:11:
d5:a4:f1:98:03:41:3c:05:04:d5:7c:38:e6:70:6c:
e8:7a:a4:a3:2a:58:d4:32:53:1f:1c:1a:93:3a:aa:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:16:9A:17:9B:AA:99:27:31:8E:97:40:B4:74:63:2E:B4:35:74:71
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c2::/48
Signature Algorithm: sha256WithRSAEncryption
93:c2:fc:b7:10:2f:41:e5:1a:d4:16:c5:1a:04:12:f4:3d:4a:
e2:d9:6c:fe:13:6f:e9:70:91:80:0b:1d:9d:1c:80:f3:e1:49:
33:1d:55:c9:89:e6:e6:2a:f0:d1:35:96:3d:56:1c:da:9c:4f:
2f:9b:6b:3d:f7:59:32:87:ad:10:75:76:9d:94:a2:ae:55:c5:
4e:ce:64:a5:c7:d6:aa:ce:76:0d:9b:54:85:5a:c8:f4:2f:51:
db:b2:ad:55:68:de:8a:e9:48:91:92:23:da:ec:fc:95:1a:22:
70:3b:a5:43:6e:b7:9a:6c:28:8b:fe:6e:09:d6:29:a4:2f:e2:
44:b5:80:94:5e:80:aa:f7:17:14:3c:61:53:83:40:c3:e5:96:
46:6b:5f:87:4e:0f:bd:09:db:96:d4:8d:50:ab:f9:ce:9a:58:
48:68:cf:68:90:0f:53:22:eb:f1:1e:84:bf:ab:30:1c:28:7e:
06:10:b7:1f:7d:6b:0b:1b:c7:2c:16:8a:ab:a3:03:74:c7:57:
b4:63:0d:ad:a9:82:73:49:ba:ec:17:44:0e:67:ed:9d:53:f1:
d0:08:40:28:c6:01:02:bb:23:e1:cf:b9:37:26:80:1d:f3:2c:
8c:35:f5:05:4f:7e:f6:f3:a1:d0:12:63:69:d1:7a:e2:cb:b8:
38:12:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:09:39 2026 by rpki-client