Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218698.roa
File: AS218698.roa (raw, json)
Hash identifier: zgWHBzoVEk8lPe1q/Kz1e/nq2kqZDPB4zpLf1ZWCSrM=
Subject key identifier: AC:45:28:0B:BE:0A:CE:45:38:9C:F4:46:3C:12:A4:FA:5D:38:A1:3B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4238391B73ED06BF74C7AEE2DECC5B94DC9C1B84
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218698.roa
Signing time: Wed 07 Oct 2026 12:52:35 +0000
ROA not before: Wed 07 Oct 2026 12:47:35 +0000
ROA not after: Wed 06 Oct 2027 12:52:35 +0000
asID: 218698
IP address blocks: 2a14:7582:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:38:39:1b:73:ed:06:bf:74:c7:ae:e2:de:cc:5b:94:dc:9c:1b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 7 12:47:35 2026 GMT
Not After : Oct 6 12:52:35 2027 GMT
Subject: CN=AC45280BBE0ACE45389CF4463C12A4FA5D38A13B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:1a:da:1a:72:d8:df:8e:bb:e3:7d:37:49:
95:4d:d6:e1:ca:4d:d2:14:c5:0c:f3:41:20:eb:c9:
13:d6:8e:46:b1:f2:99:d2:a8:27:66:1b:14:a0:4f:
0e:02:0e:03:fb:89:8a:95:d0:02:c2:ad:2c:e9:b3:
ba:ef:a9:ce:54:a9:33:fa:6a:8c:5d:3a:8d:7c:1d:
ab:ab:fb:f6:32:ab:e9:53:fc:b8:6a:0b:3e:85:3f:
b5:1d:2c:ba:4b:75:f4:22:19:35:af:2f:69:0b:1e:
1f:6b:97:e3:12:1f:53:19:3c:75:98:45:a1:99:1e:
15:f0:f2:a7:86:f6:f1:5a:7e:f7:92:96:91:4c:b6:
01:28:cb:92:d3:37:74:1f:6e:90:65:b8:eb:58:b0:
2a:50:25:fc:0a:15:96:ee:1a:92:64:e5:87:c8:70:
7b:4c:1a:a8:21:1b:d2:a6:62:0d:84:4a:15:cf:86:
ed:0d:15:a2:63:7d:9b:4a:65:ea:e4:67:a1:3e:b7:
02:8e:41:f2:30:64:66:d9:5d:21:c5:f5:d1:0b:23:
fd:c2:68:83:d3:f3:b8:f3:17:71:0a:2c:04:84:10:
76:e4:ba:73:71:3a:a5:86:82:52:85:57:4c:67:fa:
ea:d2:9f:4f:4c:05:21:8e:6e:d7:61:0e:76:70:98:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:45:28:0B:BE:0A:CE:45:38:9C:F4:46:3C:12:A4:FA:5D:38:A1:3B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7582:b000::/36
Signature Algorithm: sha256WithRSAEncryption
2e:d9:91:5f:a2:ad:62:a7:74:9f:b0:ba:21:d3:60:8e:50:b7:
66:4e:61:44:97:71:9c:21:73:46:bd:3d:49:e8:c1:fc:5b:64:
d0:62:86:62:19:34:b6:2c:aa:ee:b3:94:42:b5:84:44:c7:ef:
59:63:29:df:4b:29:31:49:74:90:d8:0d:c9:2e:4a:a5:61:7b:
c5:b1:71:e9:08:36:7f:c7:1c:79:c8:42:aa:74:99:24:bd:65:
62:21:bc:10:ce:0e:14:5f:20:fb:eb:1c:a2:04:69:3b:21:6f:
fe:04:f4:86:a2:a1:39:dd:dd:a8:fc:e8:1c:11:8b:ef:a2:df:
87:fd:5f:8c:12:94:ae:ce:75:7b:86:49:ab:7e:b9:7a:b0:1c:
81:82:11:3b:e7:63:c4:13:64:d5:02:57:7c:f7:28:17:80:47:
dd:29:da:e7:37:4a:e5:a3:61:76:51:ab:3c:53:f7:5a:8f:14:
f0:c6:5e:4a:3a:01:dc:39:00:2b:8d:98:70:db:5b:24:0e:2e:
45:41:94:86:cb:00:e1:f3:9e:11:07:1f:db:18:41:98:6f:83:
0f:ae:ce:45:38:aa:ed:a5:24:94:bd:3f:89:2c:77:27:4f:44:
b7:75:6a:fb:9a:5e:fd:c2:09:1c:48:fe:6a:24:a4:bd:47:78:
aa:70:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:10:10 2026 by rpki-client