Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218410.roa
File:                     AS218410.roa (raw, json)
Hash identifier:          xSgsGiClXvcBtRMlY6nbuCl6/+L7IEk0iiLJHxR+/t0=
Subject key identifier:   2A:12:8F:2E:32:F2:8B:0A:4F:5F:CE:85:65:F6:65:4C:9C:3A:16:DC
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       75C795C4048CA73C0CDAE99C62B97B650F619020
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218410.roa
Signing time:             Wed 14 Oct 2026 13:14:15 +0000
ROA not before:           Wed 14 Oct 2026 13:09:15 +0000
ROA not after:            Wed 13 Oct 2027 13:14:15 +0000
asID:                     218410
IP address blocks:        2a14:7583:efc2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c7:95:c4:04:8c:a7:3c:0c:da:e9:9c:62:b9:7b:65:0f:61:90:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Oct 14 13:09:15 2026 GMT
            Not After : Oct 13 13:14:15 2027 GMT
        Subject: CN=2A128F2E32F28B0A4F5FCE8565F6654C9C3A16DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:6c:10:a0:ad:a1:f3:a9:3e:cc:00:10:46:
                    cc:cc:6e:1e:b7:b2:6b:41:80:38:46:eb:62:41:7c:
                    1d:f0:69:ad:c5:be:9b:b3:85:7c:aa:71:a2:f0:eb:
                    95:fc:b2:d8:5c:c5:d8:14:4e:7d:93:d4:51:e0:fd:
                    3d:32:e5:d5:11:72:c9:52:c4:18:2a:07:a1:7f:a6:
                    2a:3e:b1:d9:63:7a:c1:bc:25:c6:63:65:44:dd:a1:
                    d4:4a:f5:02:50:fe:09:99:fc:8e:92:e6:ed:01:47:
                    d3:0b:5e:6b:cb:09:b6:d5:49:dd:21:7e:15:ea:eb:
                    07:d6:b3:a5:50:f1:1c:99:83:e3:74:0a:5d:e3:87:
                    35:fb:cc:ef:6b:99:f6:e7:10:b3:4a:04:04:0a:ae:
                    6f:34:ff:a8:f8:63:e2:ed:d8:79:b8:48:25:a1:e2:
                    da:6a:af:1c:64:9b:48:94:aa:5d:0c:19:f5:57:36:
                    44:69:f0:5c:97:c8:7d:1c:31:6f:e4:7f:52:11:9c:
                    ef:0a:9f:52:d5:f7:34:df:72:d0:26:ea:41:c2:26:
                    4c:df:61:07:3e:37:43:b0:38:f1:64:c7:71:b0:9b:
                    1e:0e:c7:b3:0c:86:49:69:9e:73:fb:5a:55:3d:a8:
                    50:33:9e:ca:b8:45:c4:a6:e0:55:46:48:5d:38:ef:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:12:8F:2E:32:F2:8B:0A:4F:5F:CE:85:65:F6:65:4C:9C:3A:16:DC
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218410.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:efc2::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:9d:a4:ae:09:73:e0:02:01:a7:cc:53:62:dd:d7:db:0a:6c:
         5a:a5:88:77:02:be:f6:a5:53:01:a2:33:f5:df:b5:f0:1e:3e:
         8a:38:99:f4:eb:51:e4:9f:9b:37:75:18:9b:4c:99:f3:64:bb:
         60:7c:83:04:b2:74:f8:25:a5:e7:57:6f:25:a6:fc:2f:26:7c:
         30:c1:0e:f3:92:50:4b:cb:08:d2:87:45:48:42:12:f6:11:f6:
         45:11:ce:63:0c:49:43:66:19:9f:d0:02:53:f7:94:ac:eb:f8:
         4d:7b:da:02:35:70:3d:29:48:41:de:f4:35:02:0b:7a:fe:c2:
         ae:d1:86:40:dd:33:3b:50:f8:30:5c:d2:f2:71:cd:a0:12:01:
         28:52:57:5b:b3:b3:b7:56:1b:da:13:f7:6c:a3:c4:52:22:a8:
         09:a0:3b:4a:b2:a7:39:a0:8c:4f:5e:d3:0e:fd:3f:0c:f1:0b:
         f1:13:b6:86:2a:54:5e:72:7e:47:e7:73:c2:4d:4c:03:8e:b8:
         e2:bb:4e:c9:c4:c2:3c:f3:2a:9c:0b:ed:3f:f2:5f:a3:9a:2b:
         53:b0:4c:4b:b1:46:5a:c3:80:aa:73:9e:48:c4:59:f9:83:ad:
         89:8c:3d:46:0d:a8:9f:6c:3d:fb:26:cd:dd:a4:0a:45:c6:16:
         ce:54:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----