Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218943.roa
File: AS218943.roa (raw, json)
Hash identifier: bsftgh/F1TtjK3/0qRuc52qsTN7C4jPYFoeLNZLGjWE=
Subject key identifier: 4E:91:34:52:7B:47:6A:A4:31:C0:7F:CD:98:82:58:30:C6:9C:3E:5C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 07465B876632C3D37CB5B18D1D069A08348CFA87
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218943.roa
Signing time: Fri 21 Aug 2026 15:39:11 +0000
ROA not before: Fri 21 Aug 2026 15:34:11 +0000
ROA not after: Fri 20 Aug 2027 15:39:11 +0000
asID: 218943
IP address blocks: 82.38.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:46:5b:87:66:32:c3:d3:7c:b5:b1:8d:1d:06:9a:08:34:8c:fa:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 21 15:34:11 2026 GMT
Not After : Aug 20 15:39:11 2027 GMT
Subject: CN=4E9134527B476AA431C07FCD98825830C69C3E5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:62:17:b2:e2:07:cd:0c:c1:05:c4:a9:cc:
28:73:40:32:17:e0:13:60:f5:c8:41:50:8b:dd:9c:
5a:f5:e6:d3:ea:79:9e:bd:f6:46:9c:35:61:25:91:
ad:d8:16:4f:89:6c:30:d4:39:8b:33:5c:2f:23:96:
a3:4f:9d:ed:e1:96:5f:53:8e:24:6d:d2:48:a9:55:
b5:7a:9a:f8:07:25:d8:86:b3:c8:45:13:a7:a8:ff:
05:db:b9:89:04:3f:0a:86:12:83:01:6a:8a:ae:69:
bc:22:00:49:e0:c8:1b:96:88:41:eb:1a:76:87:03:
3a:79:46:dc:57:3b:6a:69:9e:a4:af:39:8e:27:29:
0b:2a:36:b8:56:67:6f:87:26:aa:c0:3a:4f:db:f4:
39:6e:19:4e:bf:7e:dc:67:86:25:3d:d6:2f:80:17:
0c:04:fe:57:1f:89:c5:7e:e6:56:26:97:c4:48:28:
7a:05:05:c4:f1:f2:16:6e:27:aa:0d:45:06:e4:4b:
44:7d:fd:d7:14:db:8d:93:b8:6d:96:7d:a2:af:ca:
ba:82:ed:7d:09:79:49:94:92:8f:d4:73:0e:8c:b7:
bc:20:ff:e7:5c:eb:ab:5d:7b:8f:39:d7:16:86:12:
27:72:39:be:3d:1d:e4:40:44:95:a8:4c:06:39:b4:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:34:52:7B:47:6A:A4:31:C0:7F:CD:98:82:58:30:C6:9C:3E:5C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:48:27:81:d6:25:85:9e:1d:b6:62:8b:bc:f8:5e:e8:53:05:
aa:81:73:6c:a3:3d:53:8f:81:46:56:cd:49:1d:72:9d:53:dd:
ef:a0:16:4a:b8:d3:40:28:2f:2b:51:7b:84:e6:65:96:6b:e5:
fe:61:65:91:87:74:69:fc:ec:47:79:80:0b:b4:69:1b:89:8e:
c7:1d:2b:16:0d:f9:5b:7b:06:d1:41:fd:4b:1c:00:a9:95:8f:
ae:87:d7:48:d0:3f:16:a8:fb:f1:b3:40:0c:85:95:d1:51:c0:
00:b0:3e:0b:b6:a0:2a:3f:96:bb:7d:32:77:b2:76:f9:fc:48:
1c:fe:b3:42:24:ab:85:9a:17:1c:66:45:dc:8e:2b:95:64:58:
18:35:bb:15:01:1a:3f:6b:37:52:5b:a7:45:45:c1:23:99:63:
27:44:67:80:0f:70:f5:74:b7:8c:5e:00:11:9b:eb:52:93:98:
f3:34:f5:88:c2:d2:83:d0:0d:c9:c9:ac:8a:e8:49:14:7a:e5:
83:f4:28:6b:67:2f:a8:cf:ef:77:88:b0:96:9d:1d:f3:45:03:
ae:4c:ab:8f:ed:8c:35:78:1a:c7:40:1e:43:be:5d:de:e3:8a:
21:7b:37:2a:54:ce:27:c5:b2:e3:90:7c:14:88:fd:30:3a:fb:
0b:8c:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:01:47 2026 by rpki-client