Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218781.roa
File: AS218781.roa (raw, json)
Hash identifier: JDdtJmuv7plYpulgFM2JuIuIT8/UWgOThXnogmDsgDY=
Subject key identifier: 11:B2:A8:3A:0C:FE:E2:3B:DB:F6:8E:25:7F:C2:8E:98:7C:77:DB:BC
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0570B49A355B67703D2E5D285324CF55653E91B1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218781.roa
Signing time: Thu 03 Sep 2026 10:38:48 +0000
ROA not before: Thu 03 Sep 2026 10:33:48 +0000
ROA not after: Thu 02 Sep 2027 10:38:48 +0000
asID: 218781
IP address blocks: 2a14:7583:efd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:70:b4:9a:35:5b:67:70:3d:2e:5d:28:53:24:cf:55:65:3e:91:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 3 10:33:48 2026 GMT
Not After : Sep 2 10:38:48 2027 GMT
Subject: CN=11B2A83A0CFEE23BDBF68E257FC28E987C77DBBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:a1:d0:74:1e:3b:8a:d1:0a:17:eb:7d:7e:
de:c2:25:0f:53:11:80:0d:79:15:30:6c:98:df:f0:
60:5a:3c:34:7b:76:6e:61:37:07:73:d8:9d:f3:a2:
72:4d:b7:c1:4b:47:0f:3b:aa:d5:d1:49:ab:e7:87:
99:2a:c6:f9:43:60:2e:99:ae:7f:75:cb:63:7b:11:
7d:b6:dd:88:01:46:d3:1a:5d:8a:3f:cc:21:64:28:
46:38:26:4f:d8:a8:c3:a3:1d:4a:99:90:64:36:74:
1d:3a:03:46:97:3d:ca:bd:87:5b:98:7b:d6:33:31:
bc:75:20:ad:02:4d:d0:19:0e:d3:9f:e1:65:f1:ee:
a2:01:5b:e1:7c:8d:79:5e:e5:a9:8c:a8:58:f7:a5:
31:ec:1c:40:ed:69:91:e5:61:95:85:77:4b:e3:00:
2d:12:dd:81:cf:5b:d3:35:58:fb:5a:7b:12:2d:a8:
a1:ab:ec:0d:5c:b3:df:1f:77:a5:b8:35:25:f6:2a:
e0:3e:7b:b9:5a:6e:00:f1:ff:2c:e9:1d:1f:3b:ff:
80:0f:b4:a8:b3:b5:79:cc:6e:a2:5f:5b:02:20:65:
d8:54:b6:26:d3:45:76:24:11:38:f1:ac:4c:30:2b:
22:66:84:77:b0:ba:02:1e:f0:d7:c3:88:ce:df:b6:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B2:A8:3A:0C:FE:E2:3B:DB:F6:8E:25:7F:C2:8E:98:7C:77:DB:BC
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efd0::/48
Signature Algorithm: sha256WithRSAEncryption
67:a0:05:fb:90:b1:36:1c:85:f5:d6:b8:83:41:56:49:6b:16:
d6:a5:1d:d2:cd:ca:a3:ae:26:46:28:9e:0e:d1:b9:be:d7:7c:
53:57:3c:04:70:0e:ae:bc:4c:7a:a8:ab:e0:88:7b:d4:71:3c:
c1:53:34:20:73:22:fe:29:6d:b5:b8:66:8e:fd:ab:db:6a:97:
c9:55:bb:6d:7f:ae:47:cd:c7:3a:60:8d:5c:40:4c:af:42:c2:
78:39:3d:04:9d:79:f1:26:42:66:60:ae:90:2d:69:75:f1:9d:
aa:66:17:21:79:6b:20:7a:dc:0e:38:75:fd:17:6e:61:37:00:
94:d2:16:4c:de:65:31:fe:c7:05:64:03:44:61:4d:0d:6f:3e:
74:8d:c6:9c:83:34:d9:44:56:54:3c:4f:54:66:52:5d:ce:0a:
78:7f:60:8b:86:be:02:e1:f2:15:9c:d5:98:6d:07:53:2d:be:
ac:60:41:6a:43:23:a2:f0:b7:50:d9:75:9b:86:53:80:68:ae:
e7:42:1d:3d:f5:f0:6c:fe:0e:b9:af:8b:d9:cc:e1:e5:6b:e2:
4d:94:71:f4:2b:1e:19:5c:33:56:e6:87:e4:dd:93:ce:1f:da:
52:44:81:0d:39:a7:43:03:d6:2e:84:33:ee:e9:65:cd:21:99:
de:86:47:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUBXC0mjVbZ3A9Ll0oUyTPVWU+kbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA5MDMxMDMzNDhaFw0yNzA5MDIxMDM4NDhaMDMxMTAvBgNV
BAMTKDExQjJBODNBMENGRUUyM0JEQkY2OEUyNTdGQzI4RTk4N0M3N0RCQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hqHQdB47itEKF+t9ft7CJQ9T
EYANeRUwbJjf8GBaPDR7dm5hNwdz2J3zonJNt8FLRw87qtXRSavnh5kqxvlDYC6Z
rn91y2N7EX223YgBRtMaXYo/zCFkKEY4Jk/YqMOjHUqZkGQ2dB06A0aXPcq9h1uY
e9YzMbx1IK0CTdAZDtOf4WXx7qIBW+F8jXle5amMqFj3pTHsHEDtaZHlYZWFd0vj
AC0S3YHPW9M1WPtaexItqKGr7A1cs98fd6W4NSX2KuA+e7labgDx/yzpHR87/4AP
tKiztXnMbqJfWwIgZdhUtibTRXYkETjxrEwwKyJmhHewugIe8NfDiM7ftkPPAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUEbKoOgz+4jvb9o4lf8KOmHx327wwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE4NzgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
g+/QMA0GCSqGSIb3DQEBCwUAA4IBAQBnoAX7kLE2HIX11riDQVZJaxbWpR3Szcqj
riZGKJ4O0bm+13xTVzwEcA6uvEx6qKvgiHvUcTzBUzQgcyL+KW21uGaO/avbapfJ
Vbttf65Hzcc6YI1cQEyvQsJ4OT0EnXnxJkJmYK6QLWl18Z2qZhcheWsgetwOOHX9
F25hNwCU0hZM3mUx/scFZANEYU0Nbz50jcacgzTZRFZUPE9UZlJdzgp4f2CLhr4C
4fIVnNWYbQdTLb6sYEFqQyOi8LdQ2XWbhlOAaK7nQh099fBs/g65r4vZzOHla+JN
lHH0Kx4ZXDNW5ofk3ZPOH9pSRIENOadDA9YuhDPu6WXNIZnehkcm
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:28 2026 by rpki-client