Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218911.roa
File: AS218911.roa (raw, json)
Hash identifier: TwvzUYuSDiDNuhzKQEOSS3yYo+VdfLTr0baJH8Bky4Q=
Subject key identifier: 53:E6:0E:E2:86:19:88:45:7C:2A:46:6E:7F:E7:1C:A3:25:DB:11:C0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1708F2E7E18D22ED3498F3CC73580B6F36DA1523
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218911.roa
Signing time: Fri 23 Oct 2026 09:25:29 +0000
ROA not before: Fri 23 Oct 2026 09:20:29 +0000
ROA not after: Fri 22 Oct 2027 09:25:29 +0000
asID: 218911
IP address blocks: 178.83.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:08:f2:e7:e1:8d:22:ed:34:98:f3:cc:73:58:0b:6f:36:da:15:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 23 09:20:29 2026 GMT
Not After : Oct 22 09:25:29 2027 GMT
Subject: CN=53E60EE2861988457C2A466E7FE71CA325DB11C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:95:70:72:e9:d5:d5:77:25:3e:fe:ba:da:
a1:86:c1:95:a9:1b:80:11:f2:c7:df:07:f1:3e:eb:
b5:9c:6d:f2:fc:c6:1c:61:ce:2e:32:6a:c9:c9:c9:
09:58:ad:af:46:ae:97:1f:7f:cd:31:59:2e:54:1d:
fb:93:5b:39:7c:ac:b2:c4:58:ea:0a:2e:0d:28:47:
e7:0b:3b:4d:75:ec:58:4a:98:06:bd:83:3e:bb:5f:
c1:e6:31:03:c0:1f:6e:be:e2:79:6c:92:63:41:e4:
f0:42:16:79:07:00:6b:d9:5a:f5:04:a7:1f:71:79:
17:f6:25:f7:71:b1:df:c9:7e:69:d7:e3:03:b3:62:
c4:b3:28:71:6a:ae:33:ed:48:cd:84:9f:24:e8:38:
7d:45:1f:03:f0:04:d8:c4:52:3b:b7:70:70:3f:43:
84:16:16:ed:0e:43:68:a3:0a:8c:bc:b1:ed:c6:07:
43:6e:a6:13:29:e0:21:84:ba:fc:e4:55:cf:8b:80:
e7:30:3c:42:a3:95:d0:4c:c0:13:a2:5f:f6:ac:89:
e1:0c:ac:1a:c4:0a:5e:69:6d:18:5b:94:4d:de:69:
db:de:15:93:88:ef:86:62:13:b3:00:06:76:24:2d:
23:f7:a1:40:cf:bf:95:e1:7e:20:a8:75:2c:57:35:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:0E:E2:86:19:88:45:7C:2A:46:6E:7F:E7:1C:A3:25:DB:11:C0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:05:f3:4f:57:e6:60:f8:3a:bd:d9:1a:a2:23:74:62:d9:50:
59:d1:c4:b7:d2:a0:e4:4a:65:93:f9:34:fe:b8:58:2c:cc:08:
8c:03:ca:0e:44:69:1c:de:23:1b:6e:d0:24:08:b2:35:69:6f:
47:96:00:0c:1a:b1:c7:e6:c5:78:3a:20:7d:c2:e5:f0:ac:dd:
0e:b7:40:f4:09:a6:40:83:6d:cc:ed:e3:9a:36:56:4e:62:52:
43:ec:ee:aa:c3:d7:66:21:d5:07:61:e0:88:81:c0:d3:7b:83:
9b:a7:b9:11:8e:06:4c:df:7b:ee:e4:39:93:5d:39:bf:4e:5e:
80:9a:8c:b4:af:f1:c5:f4:b1:9e:16:0c:f5:e5:f1:40:97:5a:
ec:8e:a5:51:67:de:a7:c9:91:b6:68:bb:f4:43:25:53:36:65:
ad:31:65:98:18:89:b1:a8:db:32:0e:1a:d8:dc:1e:05:0a:01:
e6:b7:14:28:de:ca:f8:1f:0e:af:db:63:6d:34:b7:32:7f:f4:
bf:1e:b5:7c:a0:85:c2:a8:63:c8:50:64:31:26:17:00:bd:7b:
27:d4:58:e1:e7:25:44:2a:e0:63:1a:79:e2:27:f4:be:44:8d:
fb:b4:40:2d:de:0b:66:23:d3:88:e8:4d:fe:61:13:d3:b3:9a:
0e:77:98:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:24 2026 by rpki-client