Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218758.roa
File: AS218758.roa (raw, json)
Hash identifier: LIvMo9oWDPYFerAPziClJswi3I7z7qZN6BTYAwAzugk=
Subject key identifier: BE:E8:1E:95:A9:A6:B1:C0:D7:3F:82:22:FC:F1:9B:81:92:26:57:88
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 733CC09D3FEF53AB9E959935AA51A66269A07C57
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218758.roa
Signing time: Fri 04 Sep 2026 12:00:40 +0000
ROA not before: Fri 04 Sep 2026 11:55:40 +0000
ROA not after: Fri 03 Sep 2027 12:00:40 +0000
asID: 218758
IP address blocks: 2a14:7581:9f6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3c:c0:9d:3f:ef:53:ab:9e:95:99:35:aa:51:a6:62:69:a0:7c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 4 11:55:40 2026 GMT
Not After : Sep 3 12:00:40 2027 GMT
Subject: CN=BEE81E95A9A6B1C0D73F8222FCF19B8192265788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:b8:48:36:72:52:78:7d:f7:f3:24:af:c5:
d7:f2:fe:7f:d7:aa:60:34:a8:2f:0a:62:27:81:6d:
06:27:5c:a2:64:af:29:61:7f:c6:9a:ed:27:87:e4:
8f:71:39:e0:9e:e4:19:8d:1e:72:f7:12:49:f1:4b:
79:c5:40:83:df:c9:47:22:51:1f:18:91:09:92:dd:
59:ba:f8:27:31:c0:8d:eb:3c:4b:7a:5b:38:57:dd:
0a:83:86:26:2e:6b:f0:70:35:8d:73:e0:f3:c8:ea:
b1:f1:4e:d2:ab:c2:bb:f1:af:a4:68:02:4c:d2:c8:
e9:ad:6f:d4:fd:ff:87:07:73:fc:12:70:57:f2:83:
77:ee:50:ed:fd:7c:7d:25:99:83:73:c1:67:65:74:
12:5e:c9:15:65:a7:06:01:aa:29:a7:fd:f7:ee:b8:
4c:53:43:b7:44:85:45:9b:6c:e1:12:eb:b6:e9:6d:
70:cf:51:8c:a7:4e:8c:88:0c:c7:55:72:59:90:25:
2e:a2:d3:a0:8b:05:0e:cd:59:6c:32:67:d5:68:70:
ca:27:cf:e7:34:4b:cb:84:65:2f:3b:db:07:a5:2e:
2b:79:e8:02:9f:37:e1:d4:0b:d8:36:63:1b:b9:79:
69:b1:2b:f3:80:88:37:a0:61:b9:ff:a3:f1:f6:ad:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E8:1E:95:A9:A6:B1:C0:D7:3F:82:22:FC:F1:9B:81:92:26:57:88
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f6f::/48
Signature Algorithm: sha256WithRSAEncryption
19:1e:80:df:9e:d6:fa:25:17:83:d1:26:a4:cd:ba:89:e3:b8:
28:1a:b4:d2:79:e6:a6:48:f0:95:f3:d2:9e:23:35:43:3b:5b:
60:dd:da:eb:2c:0d:f7:3e:2d:2d:b1:62:85:6c:b3:be:0e:f6:
f4:34:1c:c9:de:78:fd:cf:ca:2d:24:c4:75:39:2d:9f:d5:67:
f2:68:d7:3d:66:19:ef:41:a6:52:65:c8:45:99:4c:fe:a5:a0:
1e:81:da:7f:ec:95:91:3e:d5:58:f9:fc:78:8b:3d:55:99:5a:
ec:c9:d5:a4:7e:16:0d:0b:8f:1c:e7:e6:10:52:84:be:72:51:
e7:d8:a7:e0:45:f1:22:7d:da:1a:f7:48:7a:db:a1:43:00:74:
8f:74:19:b6:08:81:b9:cb:68:d5:12:ec:04:e7:83:96:91:48:
a6:ab:9b:43:7f:c0:d6:b1:99:9c:2f:35:64:7a:20:e4:d0:e8:
b6:00:1e:f4:ca:6d:28:b3:7c:90:da:18:a8:1c:1d:32:48:6b:
76:64:6e:3c:6f:80:46:37:52:64:df:48:58:f1:2c:7b:68:d5:
9d:62:d3:d7:c0:62:b0:4e:c6:f2:18:7d:03:ec:8f:98:d9:7b:
c1:15:ce:82:4a:78:f3:fc:9d:34:4e:ba:ee:e9:31:d2:13:88:
60:4e:53:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUczzAnT/vU6uelZk1qlGmYmmgfFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA5MDQxMTU1NDBaFw0yNzA5MDMxMjAwNDBaMDMxMTAvBgNV
BAMTKEJFRTgxRTk1QTlBNkIxQzBENzNGODIyMkZDRjE5QjgxOTIyNjU3ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwz7hINnJSeH338ySvxdfy/n/X
qmA0qC8KYieBbQYnXKJkrylhf8aa7SeH5I9xOeCe5BmNHnL3EknxS3nFQIPfyUci
UR8YkQmS3Vm6+CcxwI3rPEt6WzhX3QqDhiYua/BwNY1z4PPI6rHxTtKrwrvxr6Ro
AkzSyOmtb9T9/4cHc/wScFfyg3fuUO39fH0lmYNzwWdldBJeyRVlpwYBqimn/ffu
uExTQ7dEhUWbbOES67bpbXDPUYynToyIDMdVclmQJS6i06CLBQ7NWWwyZ9VocMon
z+c0S8uEZS872welLit56AKfN+HUC9g2Yxu5eWmxK/OAiDegYbn/o/H2rdT5AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUvugelammscDXP4Ii/PGbgZImV4gwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE4NzU4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
gZ9vMA0GCSqGSIb3DQEBCwUAA4IBAQAZHoDfntb6JReD0SakzbqJ47goGrTSeeam
SPCV89KeIzVDO1tg3drrLA33Pi0tsWKFbLO+Dvb0NBzJ3nj9z8otJMR1OS2f1Wfy
aNc9ZhnvQaZSZchFmUz+paAegdp/7JWRPtVY+fx4iz1VmVrsydWkfhYNC48c5+YQ
UoS+clHn2KfgRfEifdoa90h626FDAHSPdBm2CIG5y2jVEuwE54OWkUimq5tDf8DW
sZmcLzVkeiDk0Oi2AB70ym0os3yQ2hioHB0ySGt2ZG48b4BGN1Jk30hY8Sx7aNWd
YtPXwGKwTsbyGH0D7I+Y2XvBFc6CSnjz/J00Trru6THSE4hgTlO/
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:27 2026 by rpki-client