Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218797.roa
File: AS218797.roa (raw, json)
Hash identifier: IbcFf7WuNhf8xSBhNqxw94jmk1xhgdnTE18KGBhjsDk=
Subject key identifier: EB:41:2E:07:7A:85:70:21:2C:0B:4F:8C:43:EB:7F:CF:D6:1B:49:0F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2D9B1D5F651886AFABBADD91759DA5171BD273BF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218797.roa
Signing time: Sat 24 Oct 2026 10:22:21 +0000
ROA not before: Sat 24 Oct 2026 10:17:21 +0000
ROA not after: Sat 23 Oct 2027 10:22:21 +0000
asID: 218797
IP address blocks: 82.40.52.0/24 maxlen: 24
82.40.53.0/24 maxlen: 24
82.40.54.0/24 maxlen: 24
82.47.184.0/24 maxlen: 24
82.47.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9b:1d:5f:65:18:86:af:ab:ba:dd:91:75:9d:a5:17:1b:d2:73:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 24 10:17:21 2026 GMT
Not After : Oct 23 10:22:21 2027 GMT
Subject: CN=EB412E077A8570212C0B4F8C43EB7FCFD61B490F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:4c:67:14:c1:02:01:98:3c:85:a2:5f:8a:
58:ed:8e:b8:7a:95:00:54:40:d8:6d:ea:08:90:9c:
18:32:a4:76:14:cb:0e:ca:1b:be:72:45:d4:99:f3:
34:56:aa:dc:80:d8:4a:3d:d1:de:9f:ba:11:04:f4:
d2:ba:2a:5f:e5:97:45:a0:ac:5b:8e:22:d4:3e:6d:
60:c8:f2:86:12:17:29:be:53:30:cf:4e:58:06:13:
3f:9f:47:bf:13:6b:09:e3:4f:05:59:36:33:66:9b:
5e:75:00:3d:10:40:52:c7:72:c1:99:b4:59:8d:5d:
9e:5c:ac:b3:fc:40:45:3c:96:f6:5c:39:b9:be:04:
c3:e4:1e:a4:5b:c4:a2:ae:68:c7:a4:f9:51:a5:24:
bf:61:a2:ea:d8:eb:c9:10:77:3c:91:9f:86:9e:14:
c2:78:2d:7f:fa:95:6c:34:27:f5:9e:f4:cd:51:84:
e9:4a:d9:ef:b1:31:75:42:a9:f9:6b:64:3a:be:17:
b7:10:dc:cf:2a:47:93:95:92:0c:0b:88:c5:9b:f5:
ab:0d:29:6e:a1:d8:54:3f:20:5c:b0:e6:f2:b3:fb:
77:69:3b:5b:f6:46:af:68:c1:bf:85:9b:dd:e6:3a:
36:ca:d8:c6:e9:b0:d9:a7:b1:21:b0:78:39:c0:90:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:41:2E:07:7A:85:70:21:2C:0B:4F:8C:43:EB:7F:CF:D6:1B:49:0F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218797.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.52.0-82.40.54.255
82.47.184.0/24
82.47.206.0/24
Signature Algorithm: sha256WithRSAEncryption
02:85:e4:c8:c0:d3:db:6d:4e:0b:a9:83:e6:4d:77:b5:82:66:
38:31:ce:59:3f:c7:66:bd:ef:79:d3:21:a0:d0:e9:57:3e:3d:
c4:a5:86:1d:d0:6c:7a:46:18:d0:3c:55:54:7f:54:e0:a0:6d:
39:86:bc:e3:1a:29:1f:02:b7:32:55:7f:04:37:b6:83:be:41:
52:7d:ef:d8:b8:21:0b:a6:cf:79:62:8f:14:f0:f1:91:4f:bf:
09:f5:2e:3d:ac:3c:b3:5d:70:f2:21:ce:bf:92:3e:8b:ef:ac:
5c:69:ba:20:4b:9d:43:d1:29:71:6b:81:6b:64:98:3e:68:c3:
71:71:d0:b7:4c:70:50:fb:72:0b:7b:cc:95:26:ae:87:72:43:
ef:b2:a1:03:53:12:7b:07:74:bd:96:f2:6d:57:38:36:7f:0f:
65:c6:0c:7a:ee:81:69:ef:84:a2:87:ea:46:4e:35:bc:17:4a:
ea:11:b1:2e:42:c7:6e:de:8f:aa:fa:d8:1d:5f:7c:85:5d:25:
05:5d:5f:e1:6f:5e:1c:92:c4:e9:5a:ff:3c:28:47:61:12:8b:
68:b1:c9:d7:aa:0c:b6:ad:9d:30:fc:a5:d2:b5:00:db:40:ad:
d1:3c:03:3d:7c:be:35:dc:67:14:46:c8:80:41:b0:84:df:aa:
6b:11:78:f1
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIULZsdX2UYhq+rut2RdZ2lFxvSc78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMjQxMDE3MjFaFw0yNzEwMjMxMDIyMjFaMDMxMTAvBgNV
BAMTKEVCNDEyRTA3N0E4NTcwMjEyQzBCNEY4QzQzRUI3RkNGRDYxQjQ5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMUxnFMECAZg8haJfiljtjrh6
lQBUQNht6giQnBgypHYUyw7KG75yRdSZ8zRWqtyA2Eo90d6fuhEE9NK6Kl/ll0Wg
rFuOItQ+bWDI8oYSFym+UzDPTlgGEz+fR78TawnjTwVZNjNmm151AD0QQFLHcsGZ
tFmNXZ5crLP8QEU8lvZcObm+BMPkHqRbxKKuaMek+VGlJL9hourY68kQdzyRn4ae
FMJ4LX/6lWw0J/We9M1RhOlK2e+xMXVCqflrZDq+F7cQ3M8qR5OVkgwLiMWb9asN
KW6h2FQ/IFyw5vKz+3dpO1v2Rq9owb+Fm93mOjbK2MbpsNmnsSGweDnAkO6pAgMB
AAGjggIeMIICGjAdBgNVHQ4EFgQU60EuB3qFcCEsC0+MQ+t/z9YbSQ8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE4Nzk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAJS
KDQDBABSKDYDBABSL7gDBABSL84wDQYJKoZIhvcNAQELBQADggEBAAKF5MjA09tt
Tgupg+ZNd7WCZjgxzlk/x2a973nTIaDQ6Vc+PcSlhh3QbHpGGNA8VVR/VOCgbTmG
vOMaKR8CtzJVfwQ3toO+QVJ979i4IQumz3lijxTw8ZFPvwn1Lj2sPLNdcPIhzr+S
PovvrFxpuiBLnUPRKXFrgWtkmD5ow3Fx0LdMcFD7cgt7zJUmrodyQ++yoQNTEnsH
dL2W8m1XODZ/D2XGDHrugWnvhKKH6kZONbwXSuoRsS5Cx27ej6r62B1ffIVdJQVd
X+FvXhySxOla/zwoR2ESi2ixydeqDLatnTD8pdK1ANtArdE8Az18vjXcZxRGyIBB
sITfqmsRePE=
-----END CERTIFICATE-----
Generated at Wed Nov 4 18:53:29 2026 by rpki-client