Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218956.roa
File: AS218956.roa (raw, json)
Hash identifier: QeSVSpuINbhNDAcq48XKyFvTRGLCYUTqY5kEnHP1JBg=
Subject key identifier: EA:4F:45:32:81:F7:47:70:2A:73:9D:87:92:31:AD:63:61:A1:19:A6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 75C13E221A59A8977FB995E4A735F06C82F2665B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218956.roa
Signing time: Mon 31 Aug 2026 05:31:45 +0000
ROA not before: Mon 31 Aug 2026 05:26:45 +0000
ROA not after: Mon 30 Aug 2027 05:31:45 +0000
asID: 218956
IP address blocks: 2a13:9500:1cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c1:3e:22:1a:59:a8:97:7f:b9:95:e4:a7:35:f0:6c:82:f2:66:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 31 05:26:45 2026 GMT
Not After : Aug 30 05:31:45 2027 GMT
Subject: CN=EA4F453281F747702A739D879231AD6361A119A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:9e:c3:a8:56:33:1e:b5:6e:79:12:1c:82:
c5:d8:24:33:0c:29:6c:c9:5f:ee:2f:23:56:fb:01:
9a:c6:27:80:95:5c:d2:08:40:b8:3c:fe:7e:6d:21:
a4:c1:32:1d:4d:4b:7f:80:79:bf:d5:55:44:fa:91:
c7:84:3d:b5:11:2e:e4:7c:81:35:5e:98:16:88:bd:
f1:2c:e6:0f:4f:db:41:8f:54:00:d1:b9:97:28:b4:
a8:b6:cc:c7:29:a4:88:ea:34:16:68:87:0d:ae:7b:
c8:fe:7a:ad:92:a3:66:c5:09:db:55:eb:4a:b8:33:
24:4c:66:40:43:60:d4:ea:2a:51:21:0b:11:8e:c5:
27:23:2f:41:2f:9d:96:79:ad:72:5c:d0:8e:78:e9:
24:e2:01:0c:e7:bc:e4:d6:bb:ac:bb:97:2e:d5:fd:
57:e8:ed:fe:d8:0b:e4:77:32:b9:5b:b3:de:6b:9f:
98:1a:46:b3:bd:fc:94:b5:a3:e8:a1:00:4d:36:96:
e1:45:d4:d8:f1:d3:eb:9f:5e:5e:75:e9:04:ac:97:
f9:c9:ee:e7:9e:c0:76:bf:84:4f:41:f1:e5:d9:72:
a9:b4:85:76:80:5d:da:cb:a8:10:a6:c4:d0:50:a6:
85:0f:54:3b:cb:3b:bd:00:93:9a:7d:61:5b:fb:0c:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4F:45:32:81:F7:47:70:2A:73:9D:87:92:31:AD:63:61:A1:19:A6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218956.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1cc::/48
Signature Algorithm: sha256WithRSAEncryption
2d:8c:e5:9d:85:70:cf:00:b6:3f:e2:75:da:6a:dd:43:23:df:
f3:e5:6a:4c:e6:af:9b:36:93:24:fe:8c:92:e6:36:ee:62:17:
92:25:39:06:02:c7:bc:14:5a:1d:a4:eb:f5:fb:07:e2:0b:81:
03:40:8a:42:e6:60:bd:5c:18:73:41:f1:d8:f6:9c:36:aa:a2:
85:fd:8c:27:41:df:7b:6b:72:b4:63:71:12:c3:c4:3b:16:ff:
6c:27:b5:ab:70:50:f9:5d:e3:2f:25:43:31:cb:24:ad:5c:bf:
cf:4e:bd:b8:65:6f:0b:a7:64:ff:83:b0:ae:42:e5:ed:6e:58:
5d:b9:2f:ad:ca:3b:22:6c:f8:c0:0b:17:5f:6b:26:05:05:0d:
47:22:c3:46:10:0b:82:30:59:5f:73:46:b5:c0:12:ee:14:c9:
e8:8b:7e:e1:b5:c1:8e:78:bc:81:4e:ec:c1:8a:e5:09:54:6e:
88:5e:7f:17:d4:3d:bf:6e:7b:22:bb:00:3b:00:f6:eb:d1:72:
e4:04:95:2a:f1:28:34:fd:4d:55:bc:2d:e4:a7:b3:6e:75:8d:
25:e9:58:0c:28:c2:fa:3b:ea:54:39:07:45:6e:93:82:0f:d7:
51:3e:84:ec:d6:2a:f2:c7:a7:41:6e:dd:19:ed:32:62:b9:90:
a9:1c:fa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:25 2026 by rpki-client