Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218885.roa
File: AS218885.roa (raw, json)
Hash identifier: FdegvmPbkq4TsNpygtWU7lv89ISp1ZSCDvEfVgNowGw=
Subject key identifier: EC:2C:20:9E:87:A0:CD:1D:C0:E6:64:C7:98:6B:53:62:41:69:FB:ED
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 48139B28BA48377945BDAA9DC09204C8C6DA1F6C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218885.roa
Signing time: Thu 27 Aug 2026 18:13:35 +0000
ROA not before: Thu 27 Aug 2026 18:08:35 +0000
ROA not after: Thu 26 Aug 2027 18:13:35 +0000
asID: 218885
IP address blocks: 2a13:9500:1c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:13:9b:28:ba:48:37:79:45:bd:aa:9d:c0:92:04:c8:c6:da:1f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 27 18:08:35 2026 GMT
Not After : Aug 26 18:13:35 2027 GMT
Subject: CN=EC2C209E87A0CD1DC0E664C7986B53624169FBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:38:9b:55:7b:d7:70:d0:de:58:41:c7:ff:
ef:d9:7b:52:2f:3e:49:6b:f7:4b:75:98:42:c3:75:
27:99:76:9d:7b:2b:86:15:ac:0f:dd:bb:00:34:07:
87:39:cc:75:ef:ca:04:42:b4:e9:cc:c0:7a:fa:49:
9e:34:58:29:a8:5f:07:24:9a:3a:58:fa:31:63:9d:
1a:f8:74:7f:6f:91:63:2d:5e:8e:e4:b8:0b:4c:51:
05:73:a9:65:f4:69:79:b0:22:aa:1d:b1:f2:81:7d:
90:68:f9:1b:cd:66:7e:4b:e2:bd:81:96:85:66:dc:
89:dc:1b:3b:e6:cb:02:88:2a:32:97:9a:b1:71:a9:
7b:3b:06:8b:a3:d1:d7:62:27:cb:ae:62:21:88:00:
b0:cf:83:c9:4a:09:ef:2f:9a:36:c6:41:99:4f:4a:
28:23:a5:a0:08:e2:0e:a1:66:b7:bc:f1:a2:d7:a1:
4a:7b:80:ae:5a:e6:a8:c4:8c:bc:9e:49:5a:ef:3c:
a0:a2:9e:e7:32:29:15:4e:92:36:98:79:1f:ff:a9:
ac:4b:f7:11:d5:e7:a3:9b:89:34:56:84:fc:39:05:
4c:7e:f4:9f:75:dc:5d:8f:c1:cd:ed:b8:12:85:d9:
a1:29:4e:27:62:37:5c:54:34:96:e3:e3:ac:f2:3a:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:20:9E:87:A0:CD:1D:C0:E6:64:C7:98:6B:53:62:41:69:FB:ED
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1c8::/48
Signature Algorithm: sha256WithRSAEncryption
7a:51:2f:91:01:91:26:2f:4e:7c:20:12:47:e8:da:f3:e6:74:
2f:76:1f:d0:99:40:53:96:2a:df:d0:a7:56:5c:02:02:b3:fa:
5d:f3:c4:96:f3:07:9d:fd:1f:70:0b:37:30:c5:5a:50:22:92:
97:3b:02:eb:9a:9a:8b:ac:0d:aa:d0:07:51:c1:d2:69:a0:30:
a0:9f:ab:c4:91:ea:e0:39:07:2f:1a:bc:13:a3:cc:2b:22:c5:
f7:23:f9:de:d8:45:bb:72:dc:99:c0:45:ef:75:ed:1f:f8:b2:
73:b7:d6:16:26:50:bc:19:21:aa:42:c5:24:e5:bf:85:70:c4:
6e:c9:9c:17:47:66:49:1f:98:89:5c:8e:92:66:9b:8a:f4:90:
68:24:80:e9:62:2d:78:b1:ea:53:43:59:e9:0e:a2:42:c6:30:
a1:1f:23:ed:5d:d4:9c:93:36:fd:2e:fc:13:df:26:80:f3:c9:
47:c1:55:1d:6a:4a:9e:4d:08:b2:2d:de:88:36:c7:0b:7a:8e:
37:26:ae:b6:dc:34:f9:a8:5c:fc:29:9b:e6:a7:84:49:6b:fd:
b6:00:f1:1c:92:b8:68:01:96:b3:72:0d:4a:14:14:dc:64:c8:
98:68:2e:b5:6d:c7:2f:d2:35:16:98:54:9d:6a:b4:5f:09:db:
16:32:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:21 2026 by rpki-client