Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218428.roa
File: AS218428.roa (raw, json)
Hash identifier: yHH/riGpOMXSaqDMBBkEzg8pbw0sNTCK+xTyd/fOpeY=
Subject key identifier: 77:3F:9D:00:9E:3A:A8:5C:2A:DD:02:17:29:06:45:08:8F:AC:AF:C9
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1BAAED0640B09F6A9381C575543EF88A1964F771
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218428.roa
Signing time: Wed 14 Oct 2026 14:44:49 +0000
ROA not before: Wed 14 Oct 2026 14:39:49 +0000
ROA not after: Wed 13 Oct 2027 14:44:49 +0000
asID: 218428
IP address blocks: 2a14:7581:9f00::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:aa:ed:06:40:b0:9f:6a:93:81:c5:75:54:3e:f8:8a:19:64:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 14 14:39:49 2026 GMT
Not After : Oct 13 14:44:49 2027 GMT
Subject: CN=773F9D009E3AA85C2ADD0217290645088FACAFC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:f3:92:ac:3e:f3:9e:fd:56:56:17:6f:39:
56:7f:bc:89:25:cf:06:3e:0e:b9:bc:7c:49:98:1f:
b2:96:5a:97:f6:b9:b8:97:d8:29:a7:91:70:c2:4f:
65:df:6b:43:20:0a:a3:6b:b4:7d:20:da:89:2a:c8:
33:a6:8e:fd:dd:20:a4:67:70:1a:98:72:03:ea:17:
4a:7b:0d:68:1a:60:68:b1:5c:8d:83:75:76:43:f7:
9b:05:7f:04:79:7f:a0:83:22:20:cb:e2:69:4e:ab:
48:43:a1:e0:9f:7c:68:aa:c1:35:77:3c:cb:77:5a:
e6:9e:47:a4:b9:14:05:c4:6d:ee:d6:23:80:96:56:
0e:ff:e1:74:6e:9d:ea:27:3e:35:72:91:58:8d:c8:
ed:ae:e2:ea:06:28:0b:86:9a:58:7b:95:87:5d:14:
d9:c0:3e:27:dd:06:16:eb:2e:f9:a1:76:63:db:c7:
d3:ef:51:b8:96:da:14:b3:a0:a8:7a:bc:a6:8c:d6:
aa:98:61:62:03:f0:a8:9a:e4:cd:09:fe:71:70:38:
a8:f8:3e:57:a7:dd:a6:04:dc:63:a0:43:52:f9:46:
87:d8:c3:f3:74:6c:9c:eb:34:8c:f4:30:12:73:64:
d2:f6:c5:6e:6d:a4:3d:9d:0a:1d:58:20:88:9b:2a:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3F:9D:00:9E:3A:A8:5C:2A:DD:02:17:29:06:45:08:8F:AC:AF:C9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218428.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f00::/44
Signature Algorithm: sha256WithRSAEncryption
49:27:08:7d:bc:f3:63:bf:bb:e5:94:60:7d:17:63:aa:60:8b:
8b:c8:8f:fd:ee:44:98:a7:c4:33:ac:3a:76:0a:9e:a2:1a:53:
09:f0:5b:97:42:fb:78:0f:d7:48:03:29:7e:1d:56:f1:95:78:
89:a4:aa:0b:0e:d6:89:8f:7f:7f:18:19:40:0a:d9:3a:2f:cc:
7a:17:47:52:2a:c2:7c:96:41:0d:12:35:f7:88:92:2d:aa:69:
31:a0:03:93:bb:bc:56:59:3e:ce:9d:be:71:07:17:81:16:d6:
a2:b6:97:b9:86:ac:6a:b5:4a:67:9b:dc:e0:70:6f:6e:67:ba:
34:5b:f1:b6:52:b0:e1:b3:e3:6c:da:42:27:f6:b8:d4:cc:98:
3f:27:83:f5:d3:cc:a9:c7:7e:3a:f0:4e:33:b4:28:73:a5:27:
7c:b2:83:87:60:d7:1d:78:c4:d2:41:df:19:a6:53:8d:af:e7:
6c:35:3a:c2:32:3b:81:65:c3:7a:66:ed:ad:d1:d5:7b:f9:c3:
f6:fc:00:c2:2f:d2:da:bf:44:4d:e3:74:1b:25:ad:a1:e3:84:
18:76:e7:67:6b:39:26:d1:f1:18:af:fb:e2:1e:c5:fc:25:b3:
f6:74:8f:94:93:2d:b6:5e:14:bc:67:30:bd:f7:a5:1f:22:56:
ce:7f:c8:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUG6rtBkCwn2qTgcV1VD74ihlk93EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjEwMTQxNDM5NDlaFw0yNzEwMTMxNDQ0NDlaMDMxMTAvBgNV
BAMTKDc3M0Y5RDAwOUUzQUE4NUMyQUREMDIxNzI5MDY0NTA4OEZBQ0FGQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEfOSrD7znv1WVhdvOVZ/vIkl
zwY+Drm8fEmYH7KWWpf2ubiX2CmnkXDCT2Xfa0MgCqNrtH0g2okqyDOmjv3dIKRn
cBqYcgPqF0p7DWgaYGixXI2DdXZD95sFfwR5f6CDIiDL4mlOq0hDoeCffGiqwTV3
PMt3WuaeR6S5FAXEbe7WI4CWVg7/4XRuneonPjVykViNyO2u4uoGKAuGmlh7lYdd
FNnAPifdBhbrLvmhdmPbx9PvUbiW2hSzoKh6vKaM1qqYYWID8Kia5M0J/nFwOKj4
Plen3aYE3GOgQ1L5RofYw/N0bJzrNIz0MBJzZNL2xW5tpD2dCh1YIIibKuiRAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUdz+dAJ46qFwq3QIXKQZFCI+sr8kwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE4NDI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1
gZ8AMA0GCSqGSIb3DQEBCwUAA4IBAQBJJwh9vPNjv7vllGB9F2OqYIuLyI/97kSY
p8QzrDp2Cp6iGlMJ8FuXQvt4D9dIAyl+HVbxlXiJpKoLDtaJj39/GBlACtk6L8x6
F0dSKsJ8lkENEjX3iJItqmkxoAOTu7xWWT7Onb5xBxeBFtaitpe5hqxqtUpnm9zg
cG9uZ7o0W/G2UrDhs+Ns2kIn9rjUzJg/J4P108ypx3468E4ztChzpSd8soOHYNcd
eMTSQd8ZplONr+dsNTrCMjuBZcN6Zu2t0dV7+cP2/ADCL9Lav0RN43QbJa2h44QY
dudnazkm0fEYr/viHsX8JbP2dI+Uky22XhS8ZzC996UfIlbOf8iM
-----END CERTIFICATE-----
Generated at Wed Oct 21 17:10:08 2026 by rpki-client