Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218322.roa
File: AS218322.roa (raw, json)
Hash identifier: wX8fHlgwlwVG05zAK62dznwGpODqpPgUPWIPs6S+6Zk=
Subject key identifier: 80:64:86:0B:36:E7:F9:48:E4:C3:DE:D2:FE:AB:76:9F:30:E4:E9:AF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5443C5FE43D702B710FBE8117BF98738DA01B73A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218322.roa
Signing time: Mon 26 Oct 2026 12:12:13 +0000
ROA not before: Mon 26 Oct 2026 12:07:13 +0000
ROA not after: Mon 25 Oct 2027 12:12:13 +0000
asID: 218322
IP address blocks: 82.38.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:43:c5:fe:43:d7:02:b7:10:fb:e8:11:7b:f9:87:38:da:01:b7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 26 12:07:13 2026 GMT
Not After : Oct 25 12:12:13 2027 GMT
Subject: CN=8064860B36E7F948E4C3DED2FEAB769F30E4E9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:75:50:04:bf:a0:b9:8b:98:f5:0f:b1:83:
90:04:3c:3d:38:44:1d:59:be:24:e7:12:42:72:f2:
cd:b9:2a:31:36:3e:2b:7f:96:11:61:a6:65:93:53:
1e:8a:aa:87:a0:6c:ad:54:6d:ff:06:2b:97:db:86:
41:e2:40:6f:ec:69:39:e2:3e:cb:55:5e:0e:39:8b:
86:48:c1:45:e1:36:9b:2a:92:f8:ae:89:b1:36:c3:
53:1e:76:f0:9a:51:60:e1:51:c8:bd:01:dd:17:3c:
e2:38:0c:d6:e4:51:b5:7b:ef:35:9d:d6:55:83:6e:
0f:54:48:f0:cc:e5:2f:b9:43:20:89:91:3c:59:9c:
62:1f:1b:94:23:05:08:b8:28:01:56:5e:de:67:f7:
bf:3e:df:00:53:b3:97:9f:ca:44:eb:0b:bf:1d:54:
d9:e5:81:ea:cb:5c:2c:46:f8:2c:8c:7e:b5:ad:7a:
5a:04:c6:58:12:de:ea:56:65:7d:f4:a4:d5:28:c3:
a8:eb:99:34:4b:11:70:ac:d2:58:7e:a0:d4:8f:27:
b5:4c:2b:c2:94:71:f7:e8:b7:4e:82:32:bd:7d:55:
53:ca:08:da:64:cf:f7:c8:5f:1e:60:19:f7:f7:2c:
74:42:b2:74:2d:6e:ec:00:e7:0b:8e:44:66:e9:9d:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:86:0B:36:E7:F9:48:E4:C3:DE:D2:FE:AB:76:9F:30:E4:E9:AF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:cb:cc:7b:2c:82:56:ae:c2:79:8f:c9:26:84:45:c5:f3:53:
92:57:27:82:73:d2:ec:0b:33:1b:af:68:da:22:c9:75:7a:79:
51:b2:aa:4b:12:90:0e:82:cd:63:64:ca:a1:ec:63:c2:fd:19:
3e:2d:6d:48:56:51:09:5b:d7:27:bd:1d:72:72:d7:f4:28:01:
7d:71:2f:41:1e:a4:0e:98:06:f9:83:8c:a1:b4:51:dc:4a:d3:
2b:8f:70:fe:60:01:e2:84:79:55:2d:01:cf:ea:5f:a7:4f:21:
9c:98:ed:48:b2:0b:0a:03:2b:67:9d:2c:46:e0:bf:7e:ea:ec:
73:6c:64:0f:85:3b:51:13:3e:82:21:ff:f3:df:cf:bf:36:0e:
fc:29:54:49:e1:0d:4c:79:33:37:2c:6b:25:25:f3:ce:eb:44:
67:1f:c2:1e:92:a6:fa:7d:e3:d9:dc:9a:9b:c4:85:e8:10:ab:
8f:a1:0b:1d:69:da:54:2b:06:c8:5c:bc:a4:10:fc:4c:48:ff:
f3:a4:44:56:23:1d:7a:bc:a2:b8:a6:96:85:00:12:9e:54:11:
50:8a:d2:2e:79:ea:1e:09:44:9a:0f:c8:37:28:ab:b3:c0:af:
e1:09:77:d5:95:4e:e2:a6:39:fa:dd:ff:b4:db:ed:ae:33:cb:
28:65:e3:a9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVEPF/kPXArcQ++gRe/mHONoBtzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMjYxMjA3MTNaFw0yNzEwMjUxMjEyMTNaMDMxMTAvBgNV
BAMTKDgwNjQ4NjBCMzZFN0Y5NDhFNEMzREVEMkZFQUI3NjlGMzBFNEU5QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSynVQBL+guYuY9Q+xg5AEPD04
RB1ZviTnEkJy8s25KjE2Pit/lhFhpmWTUx6KqoegbK1Ubf8GK5fbhkHiQG/saTni
PstVXg45i4ZIwUXhNpsqkviuibE2w1MedvCaUWDhUci9Ad0XPOI4DNbkUbV77zWd
1lWDbg9USPDM5S+5QyCJkTxZnGIfG5QjBQi4KAFWXt5n978+3wBTs5efykTrC78d
VNnlgerLXCxG+CyMfrWteloExlgS3upWZX30pNUow6jrmTRLEXCs0lh+oNSPJ7VM
K8KUcffot06CMr19VVPKCNpkz/fIXx5gGff3LHRCsnQtbuwA5wuORGbpnXVjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUgGSGCzbn+Ujkw97S/qt2nzDk6a8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE4MzIyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiYU
MA0GCSqGSIb3DQEBCwUAA4IBAQA8y8x7LIJWrsJ5j8kmhEXF81OSVyeCc9LsCzMb
r2jaIsl1enlRsqpLEpAOgs1jZMqh7GPC/Rk+LW1IVlEJW9cnvR1yctf0KAF9cS9B
HqQOmAb5g4yhtFHcStMrj3D+YAHihHlVLQHP6l+nTyGcmO1IsgsKAytnnSxG4L9+
6uxzbGQPhTtREz6CIf/z38+/Ng78KVRJ4Q1MeTM3LGslJfPO60RnH8Iekqb6fePZ
3JqbxIXoEKuPoQsdadpUKwbIXLykEPxMSP/zpERWIx16vKK4ppaFABKeVBFQitIu
eeoeCUSaD8g3KKuzwK/hCXfVlU7ipjn63f+02+2uM8soZeOp
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:45:11 2026 by rpki-client