Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218904.roa
File: AS218904.roa (raw, json)
Hash identifier: sxavYMuo/u5g+WPffry79IOVx58pQdZSrWC2DZ2DQMk=
Subject key identifier: BA:AC:46:A4:69:9B:37:CC:E2:C9:4B:DA:D8:8B:58:90:87:BE:AD:79
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6F596AD27CC326F8977D926FBF99620F84EAAFD9
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218904.roa
Signing time: Sun 30 Aug 2026 01:29:54 +0000
ROA not before: Sun 30 Aug 2026 01:24:54 +0000
ROA not after: Sun 29 Aug 2027 01:29:54 +0000
asID: 218904
IP address blocks: 2a14:7584:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:59:6a:d2:7c:c3:26:f8:97:7d:92:6f:bf:99:62:0f:84:ea:af:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 30 01:24:54 2026 GMT
Not After : Aug 29 01:29:54 2027 GMT
Subject: CN=BAAC46A4699B37CCE2C94BDAD88B589087BEAD79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:87:21:30:ec:4b:51:24:97:d9:43:39:11:
4e:93:ca:af:db:0c:90:dc:7e:0f:55:be:79:97:0d:
0c:4d:12:0b:63:32:86:ad:26:85:d2:b7:c9:37:d6:
ff:e1:64:85:f3:ae:49:46:76:00:3e:03:20:43:95:
04:70:15:b6:3e:78:a5:2e:f2:39:d9:e4:9d:b5:e0:
28:14:92:21:a8:02:18:4c:e8:97:dd:ea:c5:f1:19:
ae:76:47:42:ba:12:52:83:08:5d:62:64:b1:86:65:
b1:b3:79:a1:08:27:e4:97:fa:c0:49:4d:53:18:4b:
96:c6:86:ce:e4:c7:b2:31:65:10:22:1c:00:d7:e8:
26:e7:b3:11:b7:30:0c:e5:1f:f6:0d:a8:ce:94:29:
39:c9:57:96:30:82:12:05:9f:97:9a:10:3d:ca:87:
75:d0:cf:31:d4:78:b0:d0:fa:d0:d9:34:e4:de:0f:
2d:fe:cd:ac:05:ae:7a:fd:fd:01:64:09:f0:77:6c:
8c:c6:c2:69:9d:cd:f8:03:2c:9a:65:bd:41:42:fd:
45:48:9f:b8:ca:8e:af:77:33:8c:f9:4f:aa:43:d1:
a5:fe:73:6f:bd:54:78:3d:79:58:6c:57:46:9f:c1:
2a:17:b8:5c:8b:d5:61:bc:bd:ed:be:e8:a5:e0:71:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AC:46:A4:69:9B:37:CC:E2:C9:4B:DA:D8:8B:58:90:87:BE:AD:79
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218904.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:3000::/36
Signature Algorithm: sha256WithRSAEncryption
1b:60:a0:0f:75:f3:01:92:df:9c:13:ce:4b:85:a7:9d:9f:a5:
84:96:de:98:44:c2:c7:d0:13:2a:74:4b:37:00:59:0a:13:27:
7b:e2:82:d6:4a:de:fa:fe:95:7b:5e:07:08:95:9a:26:12:d4:
25:c3:9e:c7:ae:5e:07:bf:be:9f:b1:00:c9:8f:27:fd:3f:10:
5c:16:12:40:ed:8c:9d:a8:c5:d0:52:75:26:47:11:b1:c0:af:
98:6c:78:17:26:b9:47:61:5b:95:e0:76:fa:09:b1:33:fc:cc:
11:06:fa:e8:e7:b0:b6:45:50:7f:dd:8d:63:88:89:2a:bf:a7:
87:0f:eb:29:b9:f3:d4:d5:f2:ec:e1:14:de:ba:c3:d9:89:5f:
c5:25:ce:17:d6:cc:86:5b:01:ab:41:68:54:03:09:3f:b3:5c:
e2:55:f5:54:48:f7:58:7f:67:98:f2:f3:80:f0:95:6a:2d:ae:
0f:88:07:17:ba:6b:b8:e0:5f:2a:7f:8e:08:59:b4:e5:a5:63:
cd:ba:5a:26:6e:74:10:d4:ac:2d:93:39:4c:a4:6e:92:c4:1c:
af:ef:b5:89:c1:b8:eb:8c:22:45:6f:79:c8:fa:dc:11:4c:ea:
49:2e:99:f6:35:29:c2:05:43:19:b1:3e:a2:c2:ea:75:d7:43:
f7:bb:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:14 2026 by rpki-client