Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: ibKX/r8/sSRVfuWYZU3ZFFBknhB39gPqQTbRoh6r4Ew=
Subject key identifier: 39:99:55:D8:4C:5B:F1:45:1F:AE:40:2F:0A:34:36:C3:27:FC:3F:6A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 403C5944DBD703F342D0A578E3D7060BF295638A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218965.roa
Signing time: Sat 03 Oct 2026 11:23:51 +0000
ROA not before: Sat 03 Oct 2026 11:18:51 +0000
ROA not after: Sat 02 Oct 2027 11:23:51 +0000
asID: 218965
IP address blocks: 82.24.101.0/24 maxlen: 24
82.39.245.0/24 maxlen: 24
84.75.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:3c:59:44:db:d7:03:f3:42:d0:a5:78:e3:d7:06:0b:f2:95:63:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 3 11:18:51 2026 GMT
Not After : Oct 2 11:23:51 2027 GMT
Subject: CN=399955D84C5BF1451FAE402F0A3436C327FC3F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:40:33:7a:16:d6:ff:36:ec:f5:eb:05:4a:
58:1b:7f:7c:25:69:43:f0:04:0d:e5:8e:6e:c9:ea:
7d:80:fc:df:26:1c:60:e0:18:b8:78:3b:2a:d2:67:
01:ae:19:d7:26:a0:4e:2c:61:8b:8d:58:3f:07:29:
04:86:f7:af:8f:d7:93:0b:62:1d:e8:1e:74:05:63:
05:31:9d:68:42:8c:96:12:b1:14:bf:54:34:fc:a2:
1e:83:b7:40:7b:7e:93:a2:fa:c2:fd:78:c5:66:8e:
ff:3d:b5:b5:fb:5e:73:b9:0c:3d:8a:a4:fc:5c:b9:
c2:ea:1a:fa:5b:25:ea:f7:1b:ae:71:a4:c0:d1:44:
ec:d8:1c:7c:60:82:dc:c0:4c:5b:22:44:b7:37:77:
c0:14:25:1e:82:90:51:b3:87:2b:15:5d:53:e6:93:
5d:1c:f9:eb:2c:c7:85:bf:7a:e7:ff:97:57:57:9c:
6e:9c:d5:d0:8e:77:96:35:9b:9d:a3:32:02:e1:13:
13:46:ae:0d:0a:b4:d3:b6:5e:39:33:01:c5:c3:0b:
75:1c:65:77:29:ec:3a:3f:bf:33:66:e5:ca:1d:61:
e8:99:99:4d:ec:41:19:b2:56:5b:8f:d8:61:18:57:
88:eb:80:fa:09:5a:4a:1f:e9:7d:86:db:2b:2f:59:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:99:55:D8:4C:5B:F1:45:1F:AE:40:2F:0A:34:36:C3:27:FC:3F:6A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.101.0/24
82.39.245.0/24
84.75.211.0/24
Signature Algorithm: sha256WithRSAEncryption
38:08:09:5a:0c:68:38:bc:c2:59:27:30:cb:e4:70:82:9e:3e:
50:0d:ce:90:5d:0a:af:bb:0e:fb:bd:dc:47:64:b9:bc:ce:0f:
13:5b:f5:b2:cc:71:9e:6a:8a:48:4c:c2:d1:4f:ab:70:29:50:
ce:ff:bf:64:f2:8a:4c:47:81:ee:16:c0:57:9f:f4:a0:b5:e4:
04:7a:ba:19:7d:c9:5f:c3:27:c6:c3:80:ec:bf:87:eb:a7:63:
20:35:22:13:75:60:0e:64:75:39:1f:3c:d7:5a:d0:49:61:32:
9c:30:78:45:50:88:c3:fb:18:0a:fe:41:a2:9d:aa:fe:75:b3:
5c:84:36:99:fc:78:25:9f:fc:d5:77:31:88:11:a5:0f:78:da:
c8:b2:01:cf:a6:77:ca:54:2a:23:06:77:03:58:23:fd:53:f4:
a8:4c:94:83:04:d5:28:9f:87:d8:71:83:e3:6c:a2:94:db:6a:
f6:65:de:cc:b5:c5:db:64:77:d5:73:72:c9:7b:b4:11:23:ca:
f0:aa:a8:26:84:41:6f:e5:79:b5:dd:84:f9:40:a8:f9:c7:fa:
7a:f1:23:d0:bc:a6:f1:26:e6:61:2f:99:2b:2f:55:dd:d0:6b:
d9:d4:dc:b9:04:ef:30:1f:f3:da:12:77:88:e8:f3:58:ba:2f:
33:17:df:19
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUQDxZRNvXA/NC0KV449cGC/KVY4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMDMxMTE4NTFaFw0yNzEwMDIxMTIzNTFaMDMxMTAvBgNV
BAMTKDM5OTk1NUQ4NEM1QkYxNDUxRkFFNDAyRjBBMzQzNkMzMjdGQzNGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mUAzehbW/zbs9esFSlgbf3wl
aUPwBA3ljm7J6n2A/N8mHGDgGLh4OyrSZwGuGdcmoE4sYYuNWD8HKQSG96+P15ML
Yh3oHnQFYwUxnWhCjJYSsRS/VDT8oh6Dt0B7fpOi+sL9eMVmjv89tbX7XnO5DD2K
pPxcucLqGvpbJer3G65xpMDRROzYHHxggtzATFsiRLc3d8AUJR6CkFGzhysVXVPm
k10c+essx4W/euf/l1dXnG6c1dCOd5Y1m52jMgLhExNGrg0KtNO2XjkzAcXDC3Uc
ZXcp7Do/vzNm5codYeiZmU3sQRmyVluP2GEYV4jrgPoJWkof6X2G2ysvWU1/AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUOZlV2Exb8UUfrkAvCjQ2wyf8P2owHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE4OTY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhhl
AwQAUif1AwQAVEvTMA0GCSqGSIb3DQEBCwUAA4IBAQA4CAlaDGg4vMJZJzDL5HCC
nj5QDc6QXQqvuw77vdxHZLm8zg8TW/WyzHGeaopITMLRT6twKVDO/79k8opMR4Hu
FsBXn/SgteQEeroZfclfwyfGw4Dsv4frp2MgNSITdWAOZHU5HzzXWtBJYTKcMHhF
UIjD+xgK/kGinar+dbNchDaZ/Hgln/zVdzGIEaUPeNrIsgHPpnfKVCojBncDWCP9
U/SoTJSDBNUon4fYcYPjbKKU22r2Zd7MtcXbZHfVc3LJe7QRI8rwqqgmhEFv5Xm1
3YT5QKj5x/p68SPQvKbxJuZhL5krL1Xd0GvZ1Ny5BO8wH/PaEneI6PNYui8zF98Z
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:21:08 2026 by rpki-client