Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218701.roa
File: AS218701.roa (raw, json)
Hash identifier: B5itVDqJgqLAeFG94y5BCtF9pBQ4Vu6dKion/4wIXhk=
Subject key identifier: 67:03:D6:DC:24:99:15:F6:83:BC:93:5F:0D:FE:15:E8:79:19:CC:C9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6F1AF29539E4D9C5ABE1628CD163B27281524655
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218701.roa
Signing time: Thu 22 Oct 2026 12:09:44 +0000
ROA not before: Thu 22 Oct 2026 12:04:44 +0000
ROA not after: Thu 21 Oct 2027 12:09:44 +0000
asID: 218701
IP address blocks: 82.38.7.0/24 maxlen: 24
82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1a:f2:95:39:e4:d9:c5:ab:e1:62:8c:d1:63:b2:72:81:52:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 22 12:04:44 2026 GMT
Not After : Oct 21 12:09:44 2027 GMT
Subject: CN=6703D6DC249915F683BC935F0DFE15E87919CCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:ab:31:e3:48:3d:ab:f7:45:45:9d:8e:61:
89:38:7d:24:0a:8e:d9:c7:fb:b7:c7:29:08:4c:16:
65:ac:b0:95:c6:74:72:0b:28:59:48:d7:9d:59:96:
c8:be:df:4c:d1:1e:f9:78:27:d1:11:dd:3f:3f:66:
5c:bc:cd:b0:08:8d:0e:c9:73:48:8c:e7:3c:7b:4e:
70:ea:30:1c:0d:55:b7:87:49:3d:81:9b:a1:b6:92:
cb:99:ed:12:21:0d:8f:57:7a:e3:62:ff:16:c8:f2:
9e:34:13:3b:16:35:c9:97:13:1b:f2:a9:2f:9e:90:
c2:94:4b:76:63:3a:f1:4c:c5:ac:0b:b5:4f:5e:4f:
a5:5a:83:69:14:fd:24:a5:62:04:81:47:20:ae:12:
a2:39:3d:ad:78:14:c3:f3:6e:46:0f:78:b5:43:ba:
4a:b5:6a:e3:30:76:14:03:80:ce:d3:c2:59:18:35:
21:91:c9:6d:38:94:85:a9:90:33:6a:15:87:87:39:
77:3f:15:83:b2:67:1e:a9:af:61:b3:d4:f6:28:d3:
32:32:4a:47:a1:67:0b:5d:92:88:81:3f:9a:a7:dc:
0b:f5:59:27:af:49:86:6c:bc:88:5b:49:e8:4a:cf:
e1:b8:18:b4:95:39:25:5f:51:07:91:51:04:db:38:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:D6:DC:24:99:15:F6:83:BC:93:5F:0D:FE:15:E8:79:19:CC:C9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218701.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.7.0/24
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
58:28:de:bc:35:95:b6:9e:dc:10:80:d2:96:3b:7b:fd:b3:51:
88:e7:b8:99:40:c5:c0:7b:8d:aa:ec:16:f8:0b:f2:0f:6a:96:
fd:0c:9b:da:50:7a:51:bf:f5:be:62:ba:de:be:78:72:b4:c2:
93:3d:d1:6a:a0:36:cd:81:0c:84:dc:d9:4b:90:4b:97:8d:8e:
d3:24:18:92:e8:a1:e0:e5:63:b0:db:51:26:de:aa:47:3a:55:
61:19:db:d3:45:49:18:15:ce:50:c6:26:c6:b0:1f:73:3b:e6:
43:00:e9:46:a2:b3:d5:5c:f7:9e:2d:eb:73:72:c1:c9:11:bb:
47:ea:c5:7f:48:97:b8:7a:94:c4:b8:83:6b:e3:13:bd:cd:e8:
a0:be:56:72:4d:51:e4:d4:03:a2:56:b0:7b:b2:96:fa:f6:c0:
39:22:a1:62:3c:d0:a7:fc:dc:fe:cc:27:0a:8d:6c:36:57:b3:
97:f3:7a:eb:ef:f4:9b:02:b5:21:1e:1f:d2:0d:72:07:fc:14:
9e:62:c7:76:f2:d5:39:e1:79:0e:c8:39:f8:5c:8c:51:97:c6:
51:09:eb:cd:aa:64:c4:88:cd:b0:f6:6e:8c:92:84:ca:16:14:
3c:3d:f6:33:36:1c:d2:47:39:85:a4:76:ab:43:0f:8a:0a:ad:
1e:a6:ec:7c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUbxrylTnk2cWr4WKM0WOycoFSRlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMjIxMjA0NDRaFw0yNzEwMjExMjA5NDRaMDMxMTAvBgNV
BAMTKDY3MDNENkRDMjQ5OTE1RjY4M0JDOTM1RjBERkUxNUU4NzkxOUNDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKR6sx40g9q/dFRZ2OYYk4fSQK
jtnH+7fHKQhMFmWssJXGdHILKFlI151Zlsi+30zRHvl4J9ER3T8/Zly8zbAIjQ7J
c0iM5zx7TnDqMBwNVbeHST2Bm6G2ksuZ7RIhDY9XeuNi/xbI8p40EzsWNcmXExvy
qS+ekMKUS3ZjOvFMxawLtU9eT6Vag2kU/SSlYgSBRyCuEqI5Pa14FMPzbkYPeLVD
ukq1auMwdhQDgM7TwlkYNSGRyW04lIWpkDNqFYeHOXc/FYOyZx6pr2Gz1PYo0zIy
SkehZwtdkoiBP5qn3Av1WSevSYZsvIhbSehKz+G4GLSVOSVfUQeRUQTbODfnAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUZwPW3CSZFfaDvJNfDf4V6HkZzMkwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE4NzAxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUiYH
AwQBUiYqAwQBUiYuAwQBUiZQAwQBslNSMA0GCSqGSIb3DQEBCwUAA4IBAQBYKN68
NZW2ntwQgNKWO3v9s1GI57iZQMXAe42q7Bb4C/IPapb9DJvaUHpRv/W+Yrrevnhy
tMKTPdFqoDbNgQyE3NlLkEuXjY7TJBiS6KHg5WOw21Em3qpHOlVhGdvTRUkYFc5Q
xibGsB9zO+ZDAOlGorPVXPeeLetzcsHJEbtH6sV/SJe4epTEuINr4xO9zeigvlZy
TVHk1AOiVrB7spb69sA5IqFiPNCn/Nz+zCcKjWw2V7OX83rr7/SbArUhHh/SDXIH
/BSeYsd28tU54XkOyDn4XIxRl8ZRCevNqmTEiM2w9m6MkoTKFhQ8PfYzNhzSRzmF
pHarQw+KCq0epux8
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:44 2026 by rpki-client