Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218991.roa
File: AS218991.roa (raw, json)
Hash identifier: kegXbVLHssnj4hRsyK/H7c23TorpYRzqj8sMFeW2bcM=
Subject key identifier: FF:9E:19:62:AB:35:17:55:A2:55:B2:64:59:78:C8:92:3E:4A:DA:0B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5CE8EAE5BDECC5C1A71414E2738DF992D572CFE1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218991.roa
Signing time: Wed 19 Aug 2026 12:14:26 +0000
ROA not before: Wed 19 Aug 2026 12:09:26 +0000
ROA not after: Wed 18 Aug 2027 12:14:26 +0000
asID: 218991
IP address blocks: 2a13:9500:1c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e8:ea:e5:bd:ec:c5:c1:a7:14:14:e2:73:8d:f9:92:d5:72:cf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 19 12:09:26 2026 GMT
Not After : Aug 18 12:14:26 2027 GMT
Subject: CN=FF9E1962AB351755A255B2645978C8923E4ADA0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:59:f6:55:9f:0c:33:e1:7a:ed:bf:e9:b9:
be:84:62:7d:9a:47:1c:40:01:16:6c:00:4a:32:ef:
5a:d5:22:62:87:a0:66:59:2f:aa:8c:ef:d2:fd:65:
e3:e3:2f:40:fa:40:c9:c3:89:22:b8:b1:23:bb:67:
1d:0b:3a:6c:eb:af:4f:9a:3e:03:53:5b:56:f2:c3:
64:e9:e2:b5:06:b4:e8:0c:93:a9:12:42:f2:5f:e1:
ee:89:d4:2a:ee:9a:44:0f:5e:f3:38:a4:24:7f:ce:
04:a9:cb:ed:31:dd:0f:04:79:25:9a:a4:36:6e:ce:
1e:cb:28:86:aa:bd:36:7d:76:05:e2:43:b5:0b:f1:
75:d2:14:e8:4c:d5:2c:d6:bd:69:71:e3:d6:ed:f7:
09:0d:d9:23:1a:35:2e:2b:76:6f:a5:e3:ca:20:37:
a2:5b:8e:a5:a1:1e:79:33:21:68:45:97:76:20:cb:
67:29:f0:db:0f:44:db:0e:50:4e:41:b3:66:19:da:
9b:ed:0e:76:01:e7:3a:21:ac:03:ce:26:d5:c8:f9:
c0:30:43:3e:4f:d1:99:3a:6c:a2:6f:21:46:a4:a3:
63:c1:5e:7d:cd:01:86:d8:ff:79:85:13:41:0e:a0:
51:d1:70:17:7f:05:27:ec:ec:4c:1f:3c:61:db:50:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:19:62:AB:35:17:55:A2:55:B2:64:59:78:C8:92:3E:4A:DA:0B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218991.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1c0::/48
Signature Algorithm: sha256WithRSAEncryption
31:99:84:9e:dc:b3:f1:66:24:91:cc:05:98:31:03:2f:9a:f0:
6c:a5:0e:65:57:90:6d:00:35:7f:47:05:cb:1c:67:32:35:55:
b7:13:0f:97:b6:ef:2e:6e:e2:eb:e3:09:be:66:77:6d:0b:f9:
0d:92:7e:df:b3:a7:83:2f:16:e8:07:a7:4a:d0:71:b5:7c:af:
fb:3c:f3:05:be:25:51:dc:d8:3a:47:32:51:ed:85:a6:e6:b7:
22:51:8c:3e:37:b5:c2:24:a6:92:ba:77:a0:12:1b:c3:29:10:
47:87:74:e8:a1:af:e1:8e:8c:4b:99:e7:df:a9:42:d2:4b:04:
3a:1e:36:a0:44:67:fc:ea:3a:fb:7d:ec:66:c1:6a:d4:3f:7a:
1f:d2:a2:9b:f7:81:64:04:05:da:e0:d5:91:18:8d:d5:97:8a:
67:98:64:72:f8:91:58:b7:aa:2a:8c:48:b1:5a:54:ac:cb:f8:
5f:66:9c:dd:5f:fd:e2:d1:2c:19:26:f4:ee:b9:5b:03:b7:39:
af:e8:18:c3:40:05:c4:8d:7a:d7:8e:d8:30:05:af:73:4b:e9:
82:59:0a:bc:95:7f:83:d8:ed:3e:14:ab:78:ab:bb:2a:98:55:
fc:d3:3e:ef:59:86:91:35:7b:77:65:50:75:a3:b0:a5:12:36:
45:5e:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:21 2026 by rpki-client