Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218834.roa
File: AS218834.roa (raw, json)
Hash identifier: Q+/0vMsYN/fxtVaZV7wKccA4awMh0MBbMfzxslhR5Mo=
Subject key identifier: F6:9C:EA:D3:AF:00:C3:56:FA:E6:F3:00:C3:DD:F2:58:01:6D:44:D5
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7E9682DEC62F87F0F9508ED80787EB2566E6B547
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218834.roa
Signing time: Fri 28 Aug 2026 10:09:59 +0000
ROA not before: Fri 28 Aug 2026 10:04:59 +0000
ROA not after: Fri 27 Aug 2027 10:09:59 +0000
asID: 218834
IP address blocks: 2a14:7583:efef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:96:82:de:c6:2f:87:f0:f9:50:8e:d8:07:87:eb:25:66:e6:b5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 28 10:04:59 2026 GMT
Not After : Aug 27 10:09:59 2027 GMT
Subject: CN=F69CEAD3AF00C356FAE6F300C3DDF258016D44D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:84:c0:cf:38:3c:8f:78:9a:15:5e:99:19:
a6:58:0c:62:65:3b:cb:75:8b:2b:0c:76:f6:47:11:
b4:f8:80:81:06:13:09:06:46:0c:85:76:f5:5d:4d:
ac:e8:66:2b:59:54:2c:12:62:27:c0:3b:75:f2:4b:
02:fb:ff:7e:76:11:ed:ab:75:2c:57:2d:f5:3b:c8:
9e:8c:e9:93:41:81:71:e2:1b:16:af:04:36:db:11:
26:c7:97:38:aa:c5:fa:7a:b4:eb:70:72:d8:b7:90:
dc:e3:f1:c1:83:11:6b:c7:19:34:c9:26:a7:4a:2b:
fd:cc:52:13:ad:38:98:1d:33:99:e5:49:86:db:c8:
15:bd:89:dc:71:fa:48:f9:27:ff:a1:df:97:8d:4a:
b1:ef:70:90:69:d8:ac:ad:1d:12:db:18:e7:0c:61:
44:a8:37:c3:67:85:fb:fa:87:de:c9:5c:71:6a:01:
60:69:ab:47:9b:8e:ad:d8:f0:ad:80:67:55:a4:bd:
fe:ff:39:12:fa:88:f2:b7:20:4b:dd:71:2e:43:5b:
8d:f4:a6:04:50:1c:e9:2b:39:e3:4e:e4:a4:87:b5:
c5:3b:57:31:71:a1:ee:ba:fe:4e:e0:d8:96:b2:c6:
a4:80:1f:92:81:07:b6:2e:ad:b9:b0:26:cc:0a:ae:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:EA:D3:AF:00:C3:56:FA:E6:F3:00:C3:DD:F2:58:01:6D:44:D5
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efef::/48
Signature Algorithm: sha256WithRSAEncryption
05:32:d3:23:38:4f:f1:1f:75:ad:0d:13:d6:d3:62:6c:62:a9:
36:21:25:ef:a5:29:69:da:69:d7:1c:79:e0:ff:63:52:b6:1c:
b0:49:27:d6:cf:ab:76:b8:a6:8a:39:01:ef:32:cb:89:91:ba:
25:83:5a:7e:cd:77:46:6f:ff:28:05:18:f2:eb:75:6d:5d:d5:
be:1b:c0:c6:32:89:13:f9:eb:b8:c1:8d:cb:d7:6b:ee:a3:87:
25:3e:62:82:99:14:07:d5:f4:8d:eb:48:d9:db:c8:27:8e:94:
fb:d3:a2:94:49:0c:ba:11:97:5b:d1:3b:16:7c:2a:06:a0:bf:
71:a0:09:81:ca:c9:9f:33:1f:3b:6f:2b:d1:14:c8:a6:61:37:
d9:fe:6d:95:f2:7c:20:d5:a1:14:52:26:55:8e:5f:2d:67:3c:
4f:4f:d4:e7:0b:f2:d7:1e:bc:4d:94:a0:85:98:3d:1c:c2:08:
a6:54:dd:5f:70:7e:21:bb:82:ab:2b:e8:cb:94:f8:3b:ad:ff:
48:2a:56:51:93:b5:12:55:e0:8b:35:ad:f0:1b:3b:58:db:4e:
7e:0f:cc:90:25:f0:d2:19:88:20:ab:d9:dc:6e:c5:65:18:c7:
55:31:95:ff:da:bf:07:01:5e:14:e2:fe:49:33:62:2b:a5:b1:
9a:67:6b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:17 2026 by rpki-client