Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218429.roa
File: AS218429.roa (raw, json)
Hash identifier: Duo2pzQKFSqEEfFarpAhDCOoNVKbHhV2Fp627KkaSF4=
Subject key identifier: A4:35:2D:D4:03:45:FA:5B:AC:10:3B:F2:64:48:C8:95:BB:37:FF:A3
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6CC5443E8344E676FFA9DCF06B4C3C589316D333
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218429.roa
Signing time: Mon 12 Oct 2026 14:54:49 +0000
ROA not before: Mon 12 Oct 2026 14:49:49 +0000
ROA not after: Mon 11 Oct 2027 14:54:49 +0000
asID: 218429
IP address blocks: 2a14:7580:fff8::/48 maxlen: 48
2a14:7583:8200::/40 maxlen: 40
2a14:7583:8300::/40 maxlen: 40
2a14:7583:8400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c5:44:3e:83:44:e6:76:ff:a9:dc:f0:6b:4c:3c:58:93:16:d3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 12 14:49:49 2026 GMT
Not After : Oct 11 14:54:49 2027 GMT
Subject: CN=A4352DD40345FA5BAC103BF26448C895BB37FFA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:0b:5b:54:50:0e:44:e3:36:49:04:50:1a:
69:08:4c:82:69:80:d2:87:23:bb:b0:62:84:06:2e:
01:f2:ac:4f:d8:f2:6e:65:fd:a9:aa:d8:dd:9e:62:
05:92:64:a3:7d:6a:26:73:2d:ca:5f:4e:81:48:1c:
2e:4f:be:dc:3c:1a:8b:8c:3b:cf:98:24:48:1d:15:
ed:ba:9a:70:1f:db:7b:c6:a2:ad:6b:00:0f:58:0f:
cc:52:3f:b3:c9:78:55:5b:e4:fe:6d:8b:57:86:0b:
b4:19:e2:02:34:8d:cc:74:58:06:19:ed:ef:fc:1d:
6c:1a:b4:03:87:73:5f:1f:16:fe:e6:4d:ca:87:da:
1c:82:13:11:6d:46:96:a7:26:09:80:54:2c:6f:5e:
13:5c:94:1a:9b:b2:36:5c:66:e1:1a:df:ac:fc:f0:
5b:27:12:f0:9b:24:6d:24:c2:46:ec:70:fc:f2:8d:
e8:ec:02:ed:4c:3f:d6:ae:42:b4:41:29:bd:46:ad:
77:97:54:23:17:b5:d3:1d:93:8c:50:02:10:47:1d:
24:4c:85:e9:d0:dd:47:34:17:b0:b3:65:ab:03:08:
0c:fc:ca:fc:f5:3f:8f:f7:30:07:12:fd:af:b8:6c:
17:23:ee:b2:fd:a3:45:a3:02:90:5f:df:4e:a4:28:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:35:2D:D4:03:45:FA:5B:AC:10:3B:F2:64:48:C8:95:BB:37:FF:A3
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff8::/48
2a14:7583:8200::-2a14:7583:84ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
45:f7:fe:a8:f2:89:a4:28:00:32:ee:d7:32:76:42:d1:d3:61:
54:00:1b:9f:33:d0:53:f2:5f:e4:dd:cd:76:4b:29:9d:c0:ff:
cf:27:dd:77:a2:32:9f:64:92:36:28:e6:34:b2:ee:0f:24:e8:
09:5f:4e:3f:e7:a6:7f:0d:e8:22:23:a7:6d:d0:ef:de:1f:ff:
11:c8:a6:d5:99:10:e2:14:fe:f6:51:02:c0:52:2b:97:46:cd:
f2:36:89:21:35:0e:a6:57:07:cd:ec:c8:8c:97:29:15:c9:05:
67:06:ad:e4:05:8b:03:89:52:bf:44:63:27:e5:ac:78:57:18:
df:6e:4e:34:f4:4d:ac:99:bb:7b:f1:8f:be:1e:e0:21:6c:64:
9f:e3:d0:f0:ee:95:90:f0:d7:e3:d8:9f:cf:51:9b:3b:9a:2e:
ed:0d:a9:42:62:a0:3d:53:ae:ba:f4:ae:04:13:27:35:16:2d:
1f:5d:df:36:33:37:f0:a0:4f:40:d9:82:4f:16:21:e5:76:ef:
02:d6:49:93:28:48:e9:14:0e:e4:33:59:90:01:55:62:57:ef:
42:0e:df:a2:5f:1e:c1:2f:55:df:e5:b8:b8:d9:80:2c:4e:34:
5f:05:a0:27:6f:65:eb:7b:3d:4d:f1:8d:42:f9:2c:8a:4f:c8:
26:31:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:13:21 2026 by rpki-client