Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218589.roa
File: AS218589.roa (raw, json)
Hash identifier: XvmgFBN97Hfub6tDgtiXOYAeyy5PWfgij3w0a2ebAj4=
Subject key identifier: B7:CD:D1:00:73:49:E2:81:89:E4:86:C9:55:F0:DA:52:19:7A:31:0E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5A8D93D74631761C5713F2793070F1057B158D4F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218589.roa
Signing time: Thu 24 Sep 2026 13:48:01 +0000
ROA not before: Thu 24 Sep 2026 13:43:01 +0000
ROA not after: Thu 23 Sep 2027 13:48:01 +0000
asID: 218589
IP address blocks: 2a14:7581:3700::/40 maxlen: 48
2a14:7583:ea00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8d:93:d7:46:31:76:1c:57:13:f2:79:30:70:f1:05:7b:15:8d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 24 13:43:01 2026 GMT
Not After : Sep 23 13:48:01 2027 GMT
Subject: CN=B7CDD1007349E28189E486C955F0DA52197A310E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:e5:85:e1:78:24:74:3f:6b:4a:15:ce:2b:
b4:4a:1b:a7:2e:ce:80:73:68:5b:a7:c8:7d:e0:2d:
fa:64:dc:72:78:e3:bd:35:98:26:d5:f8:d9:fa:44:
78:6c:b3:1c:c6:03:6a:7e:06:98:dc:ab:26:32:04:
1c:c5:d0:e4:87:0a:61:ff:cf:6b:83:32:ff:5e:39:
fc:57:3f:51:dd:24:7c:1b:38:7f:da:c7:ed:3c:53:
69:36:56:a3:e9:e5:8b:39:fb:fd:2c:89:de:29:a1:
20:5d:7e:d7:9d:43:63:ca:96:70:f1:bc:4d:cf:a0:
86:eb:89:48:4c:4c:de:d9:4b:f1:e1:10:58:21:77:
53:16:90:38:8c:f2:2f:4a:4e:5e:1b:38:e9:47:b9:
c1:b8:b7:a9:cd:30:f6:da:64:06:fc:d0:58:f9:5d:
b4:03:ad:5a:36:9e:32:14:e2:86:ec:ae:23:af:d3:
5e:c3:16:ca:ee:b6:0c:67:9d:d7:14:30:c1:35:96:
ea:2d:25:19:69:17:86:dc:dd:ca:3e:b0:f7:78:c5:
3a:6a:9c:21:1d:0d:b4:0e:df:31:c1:23:67:eb:cc:
ed:8c:5c:70:88:db:3a:7a:08:cd:6e:ab:d8:77:b6:
32:f9:e8:7c:50:1e:9e:e2:b1:87:d8:11:f7:7c:96:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CD:D1:00:73:49:E2:81:89:E4:86:C9:55:F0:DA:52:19:7A:31:0E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3700::/40
2a14:7583:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
35:19:b1:f2:dc:a9:f2:cd:0c:74:9d:88:9c:88:1c:c6:79:01:
26:f1:48:6e:db:03:a5:eb:fa:4f:bd:b9:8c:da:a8:f4:c6:7f:
b2:0a:44:b1:a8:64:3f:2f:26:07:fe:0e:db:7c:fc:8a:d7:17:
6d:24:7a:dd:b3:ca:e9:8d:1d:f5:b5:6a:7e:94:0c:1e:8b:28:
82:d3:85:c4:dd:d1:df:6a:3b:a6:c9:a6:58:40:a8:d7:be:f7:
40:2b:08:d0:0b:17:6b:71:e9:f8:5b:a9:46:43:b4:be:5b:f0:
48:d6:d0:37:24:9a:3c:e6:23:02:81:af:49:5c:d4:7a:ad:4e:
ff:99:a3:2c:23:ad:c9:8c:83:08:fb:ab:f1:be:0e:24:b9:de:
66:75:2b:77:72:f7:95:9f:37:3a:9e:b9:c9:33:11:c0:f8:88:
51:81:c6:84:20:ef:26:b5:a7:fc:2f:7f:89:bd:cf:81:73:77:
ff:b9:a5:67:7a:e7:99:b2:e2:a4:3d:30:49:b5:0f:30:bd:41:
bc:1e:ea:63:c4:d9:a8:53:0f:9c:e0:05:66:b3:fd:b3:b7:61:
fa:1a:89:39:39:f6:3c:45:8b:63:76:3d:17:7c:b1:ef:0b:42:
d0:90:e9:4e:16:05:82:19:85:bb:55:9a:4a:26:10:78:56:79:
91:dd:3f:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:52:33 2026 by rpki-client