Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218435.roa
File: AS218435.roa (raw, json)
Hash identifier: kC4PhKWNaTuIT+PsROo4BfH6pEKTMZd+aBmesOkX/HY=
Subject key identifier: 43:EA:51:0B:CD:E1:9F:4B:47:E0:C9:F6:A8:4B:79:C0:08:B9:C7:E5
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 02A4EAFAC6F4DC1698D5DA4A9388E0094F4DF2FA
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218435.roa
Signing time: Mon 12 Oct 2026 07:47:00 +0000
ROA not before: Mon 12 Oct 2026 07:42:00 +0000
ROA not after: Mon 11 Oct 2027 07:47:00 +0000
asID: 218435
IP address blocks: 2a14:7583:efc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a4:ea:fa:c6:f4:dc:16:98:d5:da:4a:93:88:e0:09:4f:4d:f2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 12 07:42:00 2026 GMT
Not After : Oct 11 07:47:00 2027 GMT
Subject: CN=43EA510BCDE19F4B47E0C9F6A84B79C008B9C7E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:d8:80:74:c4:8d:63:58:38:ac:30:ca:4a:
a0:4b:01:c5:66:7f:07:80:ba:53:8b:e4:02:a9:bb:
29:98:0b:53:91:de:90:8a:3c:75:eb:3e:79:15:04:
99:24:75:6e:ff:aa:34:c2:24:00:ff:c7:5e:75:70:
0e:66:a7:04:fa:bc:1d:73:0e:e4:ad:54:7f:58:02:
f4:87:a1:5f:d4:d8:14:34:13:d3:65:5f:d4:a2:c2:
db:45:db:bf:81:c4:e3:77:69:54:58:50:f2:31:6a:
c4:04:d1:ff:fe:03:cd:10:67:4d:0f:ee:65:f8:22:
1a:76:12:4f:80:49:c8:bd:30:30:96:b0:93:3d:da:
74:ab:c0:b1:fa:e1:5b:65:57:0f:09:4b:8c:74:d0:
45:db:8b:4b:b9:43:fd:c0:55:22:d1:ca:c8:7f:fc:
2d:c3:a5:bd:4e:58:7d:13:ba:76:5b:79:9a:6f:f4:
ed:ce:e0:5b:8e:ea:f3:1b:d2:0c:04:dd:67:2c:bf:
d2:dd:4b:a9:e1:aa:b9:78:37:87:94:ce:c5:08:81:
96:de:c6:3a:49:e1:cd:49:99:f9:bd:d8:b3:63:6a:
63:f5:af:e5:72:52:b5:f8:09:c2:11:7b:e7:63:bc:
3c:25:be:f0:67:16:98:1e:07:43:02:bd:1f:1b:83:
32:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EA:51:0B:CD:E1:9F:4B:47:E0:C9:F6:A8:4B:79:C0:08:B9:C7:E5
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
43:30:5d:06:4f:ca:84:60:2a:0c:46:c9:28:d6:b2:bf:89:22:
f0:cf:6f:d0:98:18:3a:16:d0:54:cb:b7:02:54:ac:4c:ca:2f:
2a:6f:8a:c5:45:84:17:c8:50:9b:a9:da:89:c7:7d:e1:e0:d6:
9f:64:ff:4a:52:25:fc:9c:41:bf:68:29:fd:b7:b6:8b:8b:04:
c1:4e:6e:80:ab:11:43:e9:5d:f9:36:f4:10:2a:a4:3a:b3:99:
af:5e:1c:dd:09:5a:a2:fe:3b:44:05:33:a1:e1:6a:6f:18:61:
1e:d2:12:40:8d:ac:39:48:b7:93:30:8e:ba:24:44:49:df:85:
7c:95:1c:6d:76:aa:a4:35:a3:ab:56:e0:c3:33:f6:03:d3:4a:
bb:5d:a2:a0:39:e6:ad:01:22:84:f4:1d:e2:e3:1e:97:04:b4:
76:9b:3b:90:5f:a8:4a:1a:48:a4:59:93:43:0e:d5:f9:a0:4f:
2c:5a:20:4b:64:51:6a:9f:51:df:b8:b5:3a:55:ea:8a:ed:74:
b8:a8:5a:15:c6:c8:e5:a5:09:1f:38:3f:0f:e7:07:ff:a9:0a:
63:7b:5e:df:73:9c:75:aa:92:c1:53:98:8b:2c:57:51:ff:5e:
9e:32:4e:47:56:f8:23:a1:ff:c3:47:3f:ca:0d:92:70:bb:03:
ff:46:b3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:10:10 2026 by rpki-client