Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218507.roa
File: AS218507.roa (raw, json)
Hash identifier: TCwwlnrPVayg5Zu36FPSetKSlTR/LcIqKoYPx+rd2GI=
Subject key identifier: 30:98:BE:63:39:39:C6:B4:38:C8:3B:60:AF:9D:9F:67:0F:C6:F1:15
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 100EADB4D23211235871F6BD7739734C9FABFCC4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218507.roa
Signing time: Mon 05 Oct 2026 23:16:59 +0000
ROA not before: Mon 05 Oct 2026 23:11:59 +0000
ROA not after: Mon 04 Oct 2027 23:16:59 +0000
asID: 218507
IP address blocks: 2a14:7581:ff5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0e:ad:b4:d2:32:11:23:58:71:f6:bd:77:39:73:4c:9f:ab:fc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 5 23:11:59 2026 GMT
Not After : Oct 4 23:16:59 2027 GMT
Subject: CN=3098BE633939C6B438C83B60AF9D9F670FC6F115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:28:d8:a3:27:f4:bf:02:96:10:86:52:3a:
e9:a0:6a:74:c9:97:c6:e2:58:20:78:b6:24:9d:15:
9d:45:84:ea:c9:64:cc:07:6b:c3:dd:bc:e2:c1:ce:
31:ad:96:18:df:88:91:57:cd:af:ed:65:6b:74:68:
77:fb:f5:44:81:b9:c7:82:cc:44:80:40:79:10:49:
89:cd:c4:c7:78:eb:32:53:ad:2e:35:7f:14:20:89:
31:3d:e7:d2:17:92:61:09:54:3e:2e:57:f0:3d:fc:
cd:52:23:3e:ef:0e:6b:ce:82:60:f1:8f:4e:c9:d0:
58:2c:f3:e7:9d:cf:f8:12:27:fc:f7:e8:26:59:88:
6d:e3:2e:80:c5:aa:26:84:26:9e:e0:18:00:1f:aa:
c6:bd:49:75:f2:43:57:99:a9:16:9a:35:1c:06:c2:
be:b9:08:40:b6:2e:d6:33:c6:6d:a6:45:14:a3:fb:
40:85:38:40:ea:79:5e:85:2a:40:a1:c1:fa:0e:e2:
56:9e:bf:38:1b:02:0e:5f:a4:39:92:a5:f9:66:19:
c5:6f:19:18:bf:60:46:55:ff:65:cb:2f:1a:a0:3e:
64:6f:eb:1e:88:6f:59:d5:b7:47:61:72:33:ea:d3:
15:6a:9b:20:00:4d:1f:b6:fd:fb:b0:f7:c9:4f:c6:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:98:BE:63:39:39:C6:B4:38:C8:3B:60:AF:9D:9F:67:0F:C6:F1:15
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ff5::/48
Signature Algorithm: sha256WithRSAEncryption
65:cd:a6:90:99:36:9d:ee:84:13:23:98:05:7f:c8:41:2b:32:
d5:df:ec:c6:6e:0c:bd:51:46:bd:42:e1:86:5c:15:09:2f:d7:
e5:3e:0f:e1:02:68:b2:57:79:66:bb:f8:c9:13:4b:ce:13:3a:
fd:25:3d:89:de:91:15:72:53:3f:a6:f7:0b:f4:26:5f:9c:dc:
c9:b6:7a:1a:88:a3:f2:7f:bd:c6:eb:11:c6:8e:ee:b1:25:4f:
07:02:95:9f:c0:6f:f7:02:83:0f:60:d3:03:ca:a9:ad:60:2d:
46:5d:46:3c:61:b4:20:39:38:e0:9d:23:8b:85:92:36:16:55:
f0:c3:1e:1f:59:d7:0a:49:32:53:3e:15:f3:76:07:b6:d9:21:
fe:10:b1:8c:6d:0a:14:94:91:7f:55:f1:de:10:a3:87:54:6e:
0c:87:e7:f5:13:3d:3a:c4:4e:99:ef:88:2c:00:d5:77:b3:25:
e5:63:2f:4f:8d:c7:48:81:72:4f:63:29:5f:96:2d:1e:49:3d:
52:49:2b:e1:82:b3:3e:8a:78:87:da:54:a3:6d:b4:fc:7e:f7:
e2:b4:40:47:87:f8:28:95:78:46:e4:3f:39:8a:6a:ed:75:2f:
74:6c:42:eb:52:eb:a0:f5:98:02:68:c9:50:82:b6:e7:86:97:
68:5b:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:13:19 2026 by rpki-client