Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218853.roa
File: AS218853.roa (raw, json)
Hash identifier: 8bNNrjFJTbtEN1Jy3Mh1DTw2nYP8p1YKIb9uNUZDwoA=
Subject key identifier: 78:61:BD:6F:CB:7E:23:9E:5A:E6:8F:4A:82:0D:01:C8:67:6A:62:47
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 260E429453C2C3EF727FE471774459C1A7EB82F5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218853.roa
Signing time: Tue 20 Oct 2026 10:39:29 +0000
ROA not before: Tue 20 Oct 2026 10:34:29 +0000
ROA not after: Tue 19 Oct 2027 10:39:29 +0000
asID: 218853
IP address blocks: 178.83.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:0e:42:94:53:c2:c3:ef:72:7f:e4:71:77:44:59:c1:a7:eb:82:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 20 10:34:29 2026 GMT
Not After : Oct 19 10:39:29 2027 GMT
Subject: CN=7861BD6FCB7E239E5AE68F4A820D01C8676A6247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:cd:e3:a3:7a:d3:b5:3a:46:c7:52:c5:01:
ef:73:cd:be:91:3b:36:c7:f4:1f:90:2f:cf:05:28:
54:06:50:25:f2:1b:ea:ef:ee:82:ff:3b:9a:4d:19:
7c:ca:21:3b:51:bc:ca:69:b9:2c:2a:36:d7:0a:94:
22:99:8c:41:14:f2:3f:24:64:e6:01:e9:01:c9:fa:
23:0a:57:e9:b7:e2:14:3d:12:48:4f:68:21:51:76:
89:35:92:a5:2b:ea:af:1c:97:99:6e:bc:8b:42:e6:
a2:b3:b8:2a:89:00:46:4c:e7:7c:bc:85:a0:28:8f:
35:d3:ca:49:2a:a3:69:ed:d8:df:43:11:2f:7d:50:
3e:6c:2d:a2:66:7f:b6:80:8d:f9:64:b7:ff:e6:98:
10:27:74:61:63:47:a3:ce:4f:5f:b8:28:10:54:d6:
8f:7c:6f:77:70:9b:bc:6f:0f:6e:6c:f1:a3:c9:a4:
5c:3a:1f:68:44:54:dc:66:7a:6b:9e:da:8b:db:41:
75:d4:06:75:88:ef:6c:52:50:3a:db:5e:1c:c0:8b:
0c:95:12:4f:a0:ab:c0:02:dd:d2:09:13:14:e4:dd:
e9:a3:27:b1:6e:34:1c:56:6c:4e:d5:75:80:2e:b9:
a5:c3:f1:89:e9:a9:ab:5a:da:1d:c1:bd:ac:9a:ae:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:61:BD:6F:CB:7E:23:9E:5A:E6:8F:4A:82:0D:01:C8:67:6A:62:47
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218853.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.152.0/24
Signature Algorithm: sha256WithRSAEncryption
19:79:c2:20:aa:95:15:43:d7:15:57:d1:11:46:dc:22:26:92:
a2:40:54:3f:73:17:3c:91:9e:3d:34:c9:24:47:60:69:d3:ee:
7e:62:c5:e9:20:55:9a:85:cd:e1:6f:c4:d3:fe:13:e4:e8:65:
23:d3:c9:f7:62:00:89:0b:7c:3a:08:90:e5:d5:ab:0a:1e:e4:
3e:04:ba:6e:6b:b1:84:60:dc:67:56:ec:43:aa:97:4c:0b:6d:
df:1d:2f:9f:d6:32:03:f0:01:bf:81:6d:3f:a8:8e:d0:3e:40:
52:61:4c:12:32:8d:3d:05:fc:26:84:69:af:6b:37:a1:1a:93:
2a:d1:91:1d:54:5e:1b:8e:a2:42:91:68:1e:3f:94:19:ea:16:
c0:6b:60:fc:7c:6a:a7:1a:4e:53:2a:c2:c6:44:2d:c1:8b:ae:
db:b4:1d:c9:ca:75:79:2e:e0:34:96:ef:b6:95:be:ae:b7:67:
15:34:1c:92:8e:dc:ac:f4:9d:c0:d4:34:7b:da:c7:6a:61:17:
25:7c:fa:c2:3a:6f:2b:c7:36:14:a6:85:07:27:0d:20:89:6b:
41:1c:07:43:5d:73:ca:5a:98:a0:e5:de:f4:9b:30:43:11:c2:
56:99:0a:a5:d9:bd:1d:74:e9:eb:d8:9f:1a:b5:5e:3d:06:d6:
ba:38:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:39:47 2026 by rpki-client