Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218170.roa
File: AS218170.roa (raw, json)
Hash identifier: zpZtIxl/j8AXDzpLwWzUld6O4aLY3ztkt2rPkr8F3Hs=
Subject key identifier: E7:20:4B:C9:95:65:C6:90:D0:13:DD:52:E6:C3:FD:04:91:DA:2E:A5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0C0F0C89A5099663AFA98122BAD94EA4888D6547
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218170.roa
Signing time: Sun 08 Nov 2026 11:56:31 +0000
ROA not before: Sun 08 Nov 2026 11:51:31 +0000
ROA not after: Sun 07 Nov 2027 11:56:31 +0000
asID: 218170
IP address blocks: 2a13:9500:201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 04:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:0f:0c:89:a5:09:96:63:af:a9:81:22:ba:d9:4e:a4:88:8d:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 8 11:51:31 2026 GMT
Not After : Nov 7 11:56:31 2027 GMT
Subject: CN=E7204BC99565C690D013DD52E6C3FD0491DA2EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:8b:aa:fd:ba:da:9b:26:34:29:51:46:95:
dd:78:83:60:3f:3f:c0:9a:3e:41:cc:8c:12:cf:b7:
2f:d8:e3:23:cc:90:49:93:c1:d4:dc:b5:d1:d8:63:
00:1d:c7:6f:f7:0b:66:77:ae:4c:9e:ed:a5:27:3a:
df:b3:df:8d:f4:19:eb:4c:62:81:6d:64:3f:8b:9d:
36:21:55:87:8a:d1:f1:aa:91:fd:b2:11:54:34:6b:
04:47:b5:92:5c:27:88:50:5f:06:21:89:c8:d2:4a:
0c:23:9c:e6:c8:2f:01:bb:9c:09:d3:60:b9:98:1b:
1b:8f:a2:d2:2e:4e:72:3d:14:1c:a9:2f:24:d7:7b:
91:84:c2:a4:dd:43:e5:f5:1e:4e:3a:ef:e0:67:33:
d6:59:35:e8:58:b1:5c:30:b7:92:0a:38:3d:af:d8:
03:e7:7d:bf:7d:75:ed:c7:53:9f:ce:bd:47:ca:2e:
e4:c4:fc:b1:08:47:c7:81:a0:56:1a:84:b7:66:a3:
04:a0:fe:ed:1a:00:04:66:81:bb:90:fa:50:28:39:
f6:f4:69:c9:c8:26:3f:3f:58:0f:45:e6:e2:2d:d4:
a6:ac:8e:af:7c:22:27:2a:27:f9:16:0a:e4:4f:02:
ff:4b:ac:d0:04:0e:75:44:8b:8b:ff:6b:1b:70:f5:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:4B:C9:95:65:C6:90:D0:13:DD:52:E6:C3:FD:04:91:DA:2E:A5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218170.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:201::/48
Signature Algorithm: sha256WithRSAEncryption
2e:6b:49:0c:19:50:9f:8f:01:dc:20:df:08:38:2d:73:d1:fc:
99:5c:ab:3d:1f:6e:cd:26:bb:ff:3f:06:41:85:ca:d9:03:a0:
63:fe:20:4e:3b:c2:b0:1e:14:0b:f4:31:86:69:79:1f:b6:30:
34:01:47:2a:32:47:3b:fb:82:17:17:56:20:ba:79:64:f4:6f:
08:3b:80:c4:87:35:4d:f2:8b:f1:33:b8:a5:3c:9b:ad:02:39:
25:c4:48:e9:c8:b8:0f:db:85:3b:fc:d1:15:2f:e9:44:ee:49:
38:e0:5d:04:5f:bc:63:74:ec:50:97:8a:fd:a5:43:dc:be:2d:
b2:f1:2f:69:3f:85:4c:5b:35:2c:d2:df:7a:30:db:b6:5c:d7:
96:b0:ec:3b:16:2c:38:bd:26:96:f7:50:0f:3d:02:cb:ff:2b:
6c:a7:14:64:27:72:77:37:e6:02:83:c3:c9:93:bf:c6:c5:d1:
af:96:6f:ae:04:8a:b4:75:be:b8:48:e7:d8:ee:ec:20:11:e2:
f6:a6:d8:2b:bb:14:f7:8e:d1:bc:3b:07:ae:82:9a:6b:b2:d6:
d5:bb:ed:bb:fa:97:dd:eb:d6:8f:77:96:9b:7c:7c:c6:cc:36:
72:91:14:63:d0:07:3d:6c:72:b3:d2:ef:db:02:b2:79:3e:9c:
4d:ce:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 12:14:09 2026 by rpki-client