Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218420.roa
File: AS218420.roa (raw, json)
Hash identifier: 4GVL2+sQBWHpa/Utr0t6VadrKl3X3KoEPz8raTt3vu8=
Subject key identifier: 16:B2:DC:3A:27:DE:E0:DD:97:6C:CA:7F:4F:8C:C8:17:D9:05:42:E0
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 775F8A76DEF9FB5E61CC335919D1BD8899AF8DBF
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218420.roa
Signing time: Thu 15 Oct 2026 05:21:51 +0000
ROA not before: Thu 15 Oct 2026 05:16:51 +0000
ROA not after: Thu 14 Oct 2027 05:21:51 +0000
asID: 218420
IP address blocks: 2a14:7583:efc1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5f:8a:76:de:f9:fb:5e:61:cc:33:59:19:d1:bd:88:99:af:8d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 15 05:16:51 2026 GMT
Not After : Oct 14 05:21:51 2027 GMT
Subject: CN=16B2DC3A27DEE0DD976CCA7F4F8CC817D90542E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:ca:d8:27:7b:6e:6a:66:8e:89:1c:b2:58:
c1:bf:5e:15:ff:a0:42:32:29:14:df:50:ad:73:de:
80:f7:b0:80:a2:92:e4:ea:d8:a4:d0:30:ef:23:03:
35:ab:01:0f:87:93:eb:9d:03:4c:0e:27:85:ff:2b:
ea:0d:fa:fe:83:5f:6b:33:90:97:a7:90:7d:61:2a:
51:08:c7:d4:96:8c:e6:8b:59:6c:1c:f2:1d:26:78:
42:c8:a2:e1:75:a4:30:71:0b:3f:2e:d2:3b:0e:7b:
96:06:44:4b:33:71:50:1b:64:db:2e:ba:bb:0a:a4:
e4:54:9b:01:0a:f7:82:dc:34:c5:6d:51:03:51:d4:
d4:40:3c:a3:2b:58:7a:b9:ad:3b:16:1f:56:ab:e0:
45:ba:ee:47:2d:fc:3d:8b:63:2c:7b:df:f2:d6:7a:
68:69:c4:f6:c6:7d:0b:90:41:d4:08:5e:50:82:2b:
7b:8f:84:ae:1a:0e:c8:85:d1:ca:33:34:fe:c8:3e:
1b:57:67:5c:d5:53:cd:a8:bc:c9:f8:23:1e:33:78:
00:89:dc:91:a7:d0:d6:e0:e8:4b:2f:d9:b3:8d:bd:
5a:d5:4d:35:b6:bf:2e:0e:8c:37:a5:ab:10:c7:50:
c2:f3:3b:62:c0:5a:f8:6b:c5:12:c5:06:2f:9c:f3:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B2:DC:3A:27:DE:E0:DD:97:6C:CA:7F:4F:8C:C8:17:D9:05:42:E0
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efc1::/48
Signature Algorithm: sha256WithRSAEncryption
1c:0b:36:64:54:44:85:e1:d5:4f:9b:29:81:49:71:07:27:bd:
68:2e:db:54:4f:b5:69:57:19:f1:26:4f:52:27:5d:98:a4:f0:
07:ca:d4:fc:3a:59:64:23:2c:b5:ce:fe:ed:64:4e:df:7a:29:
dc:f6:a8:78:46:bc:96:bf:3a:7b:ac:06:65:20:da:06:07:91:
a0:cc:77:49:38:59:a6:7b:6d:f6:63:68:b2:4f:0b:b1:4e:11:
bc:4e:c8:66:1e:3d:fb:3a:7a:6c:b1:c9:f4:5e:2c:63:39:1e:
a3:ce:92:57:95:a6:50:1c:7f:3d:6a:01:a3:a4:d8:24:37:2a:
68:0e:db:ab:74:5c:b3:ed:76:85:31:44:d4:c0:cf:57:37:e5:
8d:78:be:c5:3b:0f:72:bc:a6:1d:a5:cf:a2:cb:d0:3f:95:59:
3b:2e:5c:31:79:0a:77:47:de:57:25:14:a2:e1:a9:23:de:01:
5b:5b:a6:a4:c3:34:d5:4c:d5:51:53:1d:ef:c6:b9:ca:7d:30:
54:f5:c3:93:91:12:60:d6:90:3a:78:bd:a8:eb:7f:c9:b3:f1:
4e:61:a2:80:a3:e5:ea:7f:20:99:e9:dc:f1:e0:55:48:91:ce:
1e:68:25:44:dd:3d:65:e8:e4:fd:8f:e5:2a:17:30:cf:dc:92:
6e:79:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:10:12 2026 by rpki-client