Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216224.roa
File: AS216224.roa (raw, json)
Hash identifier: XFWRI7WSDl7SV8FjRl6g4UKhf29qMVKuDbcj9LQ3430=
Subject key identifier: D0:6B:E0:1B:B4:71:CB:F0:86:31:6D:04:57:05:9B:7E:C2:02:07:2E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0DFD3903DE47EA05E0E599F16C9E0322CF5242AC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216224.roa
Signing time: Mon 13 Jul 2026 09:21:40 +0000
ROA not before: Mon 13 Jul 2026 09:16:40 +0000
ROA not after: Mon 12 Jul 2027 09:21:40 +0000
asID: 216224
IP address blocks: 82.21.50.0/24 maxlen: 24
82.39.172.0/24 maxlen: 24
178.83.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:fd:39:03:de:47:ea:05:e0:e5:99:f1:6c:9e:03:22:cf:52:42:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 13 09:16:40 2026 GMT
Not After : Jul 12 09:21:40 2027 GMT
Subject: CN=D06BE01BB471CBF086316D0457059B7EC202072E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:46:25:cc:ec:01:f6:5e:68:30:e9:5c:8b:
11:bd:57:50:11:ed:32:8e:3a:67:57:51:b5:6a:41:
9d:4b:1b:b4:7e:ba:9a:1d:9c:59:44:f4:67:f0:26:
fb:58:50:78:ce:7f:df:76:bb:f3:26:0c:02:cc:15:
05:eb:2a:88:ef:f1:72:45:90:b3:07:f9:18:aa:96:
2a:b7:26:ec:b9:45:95:29:a0:ab:c3:8a:ce:73:1a:
1f:63:14:2f:d6:de:e6:33:6d:24:bb:c2:6c:f7:27:
17:aa:5c:4a:0b:a5:ec:45:9d:a9:29:c5:e5:40:59:
49:43:f0:71:70:a7:b7:53:a0:a7:c5:9c:0a:e2:1d:
45:4f:6c:fa:86:8d:e8:20:e1:04:2b:81:09:88:61:
15:04:93:b3:21:92:59:eb:eb:b6:e1:8b:c0:ab:d0:
b4:7b:19:88:46:c1:ac:80:ca:2f:d8:6c:6a:3c:0c:
59:32:64:8e:7c:a1:37:d5:ce:df:47:1e:e1:c8:96:
4b:81:57:8c:56:c2:56:2b:ff:7c:dd:3c:98:69:fe:
1d:c1:0a:3e:d5:50:63:ec:1c:1b:83:d0:95:f0:f9:
d9:34:3d:09:5a:f4:91:5d:ff:34:41:1f:70:f9:57:
de:00:b0:f1:b8:44:18:87:bd:94:53:94:73:f7:8d:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6B:E0:1B:B4:71:CB:F0:86:31:6D:04:57:05:9B:7E:C2:02:07:2E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.50.0/24
82.39.172.0/24
178.83.109.0/24
Signature Algorithm: sha256WithRSAEncryption
33:89:80:8a:85:71:b1:fe:c0:91:dc:85:ea:4e:1f:5a:60:92:
b8:f8:aa:93:16:f0:9e:8f:a6:af:ce:32:bc:ac:85:2a:4e:f8:
6d:51:b5:99:a8:ac:bb:20:8b:9b:0a:7a:bd:e2:64:0b:8c:88:
ed:19:ab:e6:6e:7f:c8:b8:e0:dc:cf:2b:76:24:f9:65:f9:53:
37:d8:a0:7b:1d:74:b2:4c:1e:76:6a:29:45:a3:0f:cf:2e:99:
cd:72:d6:3a:28:14:9d:c2:3d:61:bf:e3:bf:76:72:7c:a9:ef:
45:9d:6d:cc:4e:a8:ad:45:d5:b5:59:49:92:4e:57:b5:88:b7:
54:2a:6b:3f:fa:ed:e6:8c:34:eb:b4:82:b1:f2:da:d2:b6:dd:
e0:2b:9f:82:4a:d5:53:62:c4:78:a9:e2:49:be:97:e4:8e:e0:
a7:12:e0:fd:bf:4d:d7:ff:7a:5b:9c:05:3e:6b:64:98:ba:42:
96:38:4e:2f:f8:d1:fc:2f:79:7f:bb:2e:b3:22:c0:e6:bf:3e:
74:ec:22:9a:ad:a2:f7:28:83:f3:62:24:92:25:8a:0a:13:a6:
df:c5:2f:af:c0:23:03:4e:0c:87:a6:0d:3a:79:65:8b:a9:ab:
93:ce:17:fb:52:f9:5a:18:6c:4d:40:0d:4d:4c:1f:09:0c:97:
67:93:25:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:09:37 2026 by rpki-client