Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218995.roa
File: AS218995.roa (raw, json)
Hash identifier: E9+1meSXIdW/TJgEFSWZk0ZLXEf8IdWZ0D4f1qeHRfE=
Subject key identifier: 17:22:00:C6:8A:2F:8D:9E:11:A6:68:E8:1A:C8:84:0D:39:B0:FE:E2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4EA112561340B57FBF4F14DF8E641AE77A4B5BB4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218995.roa
Signing time: Tue 25 Aug 2026 05:42:27 +0000
ROA not before: Tue 25 Aug 2026 05:37:27 +0000
ROA not after: Tue 24 Aug 2027 05:42:27 +0000
asID: 218995
IP address blocks: 2a13:9500:1c7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a1:12:56:13:40:b5:7f:bf:4f:14:df:8e:64:1a:e7:7a:4b:5b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 25 05:37:27 2026 GMT
Not After : Aug 24 05:42:27 2027 GMT
Subject: CN=172200C68A2F8D9E11A668E81AC8840D39B0FEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:6b:4c:3c:5f:54:24:78:48:a2:3d:4c:45:
c4:87:1d:66:ca:34:2f:a4:71:1b:1d:cd:17:13:65:
68:f3:13:17:7f:ee:c1:4d:fc:64:8d:cb:6a:ba:53:
92:7e:81:8b:70:c8:4a:28:c3:d0:22:d6:d8:d8:a1:
ea:98:ca:9f:25:97:ec:72:fa:51:59:ff:e1:79:10:
33:5a:cc:f0:8d:bd:27:49:e9:f5:79:ad:11:69:8c:
b7:e7:d5:d6:53:02:52:53:23:af:1b:5b:90:b8:18:
b5:7b:2a:70:da:2e:a5:78:f9:08:fd:ca:92:2e:49:
a6:51:f0:2f:6a:18:30:20:7b:73:7b:bd:a4:a4:c5:
10:29:f2:ce:5a:05:c5:fb:4f:4c:08:d9:fc:59:0c:
ef:1c:c8:dc:6f:d0:69:3c:d6:09:3a:3d:b9:19:34:
1e:c3:49:3e:c6:ac:cb:d5:00:e9:1a:88:44:25:7e:
e5:1a:07:62:d1:27:2d:82:30:4b:46:61:66:ac:06:
2b:0c:14:a7:f7:be:ea:84:15:8a:f3:fd:ac:b7:e6:
d1:8a:cb:99:e6:8b:96:69:8a:0f:05:9f:b0:ec:2b:
54:97:27:95:86:4a:92:11:38:b5:ee:ee:c8:28:9f:
63:57:29:ee:12:3b:72:16:ee:bf:17:98:18:37:da:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:00:C6:8A:2F:8D:9E:11:A6:68:E8:1A:C8:84:0D:39:B0:FE:E2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1c7::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ff:8b:3a:ae:6e:51:eb:56:f4:28:31:70:c6:26:f1:08:c3:
09:93:12:db:38:ce:25:46:e4:c0:d6:5d:3b:ee:06:b3:30:7e:
22:36:c5:61:33:74:28:4c:47:59:5e:2b:e0:04:2e:4d:32:19:
b0:4d:61:11:3b:10:2e:50:ed:37:b5:83:10:33:ba:ed:cb:69:
a8:45:6f:7c:31:9f:40:12:59:c6:7b:4d:05:9b:76:ba:92:cf:
88:c4:d3:d5:80:31:fa:1b:36:6c:69:35:d6:85:c1:f2:66:56:
11:38:94:e2:13:34:1a:c3:c7:81:5c:c6:9d:41:4a:07:26:29:
f5:85:83:1a:a9:17:58:e1:6a:e0:05:b5:c4:5d:c2:cb:63:11:
ff:4f:be:d9:20:98:77:95:1c:f1:8c:26:a2:50:82:1e:06:f5:
2b:61:2b:11:70:17:9f:72:5f:87:4a:4a:75:dc:49:b1:da:db:
50:87:bb:7b:53:46:cd:7d:05:f7:a0:6b:4d:4c:4c:40:3b:f6:
87:27:b5:74:3d:f6:d0:45:a3:68:09:ba:94:84:43:86:70:14:
33:02:6f:68:69:4a:49:39:13:46:2c:b6:d5:af:60:e6:ef:ff:
43:98:01:2c:b3:f5:41:a7:b7:9d:bb:d0:ac:6b:f0:69:86:80:
18:03:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:19 2026 by rpki-client