Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218985.roa
File: AS218985.roa (raw, json)
Hash identifier: 9j6bUCcPqj3k/rQiZMleD5FmhDaOHiKORV0WG+8VYLE=
Subject key identifier: B9:45:30:65:FC:E8:2B:48:61:34:D3:AD:1F:C9:8A:BB:52:A6:5D:79
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 07573109A47D703C6249D242771ECC884A841992
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218985.roa
Signing time: Fri 09 Oct 2026 00:25:18 +0000
ROA not before: Fri 09 Oct 2026 00:20:18 +0000
ROA not after: Fri 08 Oct 2027 00:25:18 +0000
asID: 218985
IP address blocks: 2a14:7583:e900::/48 maxlen: 48
2a14:7583:e999::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:57:31:09:a4:7d:70:3c:62:49:d2:42:77:1e:cc:88:4a:84:19:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 9 00:20:18 2026 GMT
Not After : Oct 8 00:25:18 2027 GMT
Subject: CN=B9453065FCE82B486134D3AD1FC98ABB52A65D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:73:1e:f7:f7:30:33:35:9f:c1:34:1b:da:
4d:e9:f4:f6:0c:b3:83:bc:fb:07:c0:29:fd:c9:1e:
ac:2b:82:27:3d:5b:4b:bf:1f:bc:9e:15:eb:e9:ce:
c9:5e:41:8a:be:04:00:eb:63:86:7b:72:19:68:b6:
64:e0:24:24:e6:69:28:51:6f:aa:ed:d2:a9:65:02:
af:ec:58:ca:f3:86:46:59:34:6f:23:65:d2:86:7c:
d1:3f:85:78:e9:ae:b5:3b:b1:9a:74:7c:30:77:6b:
36:63:9e:e8:c8:da:5a:bf:88:d6:65:a5:05:f3:80:
d9:a7:28:15:1f:75:ca:f2:c0:f0:62:87:41:8d:b9:
57:c4:66:51:45:c2:15:6c:b0:67:d8:62:13:75:49:
1e:6c:6e:59:a9:8a:35:1a:41:fb:32:59:02:73:c1:
64:1a:14:a6:f2:d7:d9:69:a0:aa:c0:40:b0:d9:a2:
f1:2f:b0:26:e7:c0:e7:18:f8:1d:d8:9b:7f:2d:cd:
64:2b:97:28:70:05:b6:29:9d:50:dc:dc:f5:ef:89:
3a:79:19:17:2c:8d:a1:48:5d:87:87:1c:2e:8f:11:
f7:33:e1:95:e5:97:8f:0a:b7:42:dc:92:69:a4:30:
d7:88:10:11:dd:84:38:67:13:3c:83:5a:c0:33:12:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:30:65:FC:E8:2B:48:61:34:D3:AD:1F:C9:8A:BB:52:A6:5D:79
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218985.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:e900::/48
2a14:7583:e999::/48
Signature Algorithm: sha256WithRSAEncryption
87:78:00:e4:b4:40:5e:0b:3e:e0:02:e0:7d:9d:57:05:17:90:
8b:3f:71:1c:1c:3a:30:8f:6c:87:59:59:0c:3a:f1:5f:fc:94:
56:10:35:31:4e:7d:2b:19:32:14:34:14:cd:ee:7e:6d:7d:33:
05:5c:2b:1d:d5:66:e0:3a:3f:09:53:e1:a3:c6:57:42:30:1b:
5f:c8:b2:05:7c:1a:9c:41:09:94:b7:ff:63:1d:98:7f:b8:ac:
ff:5d:c1:a1:08:4b:45:92:e6:90:5f:67:b5:66:2d:99:50:0d:
8f:51:64:e2:18:6c:11:c1:e6:30:70:5a:f4:0e:56:7d:84:6b:
aa:72:c1:cf:7d:d6:37:6c:b3:3a:ce:de:67:c0:97:ba:f3:48:
e0:3f:98:29:bb:22:fb:13:9b:24:01:bd:d1:07:4f:1d:82:c2:
91:02:1c:ec:72:06:f2:ff:7e:23:ab:ba:cc:04:53:1f:78:b8:
6e:e5:24:e5:d3:9d:64:28:62:c2:ce:7c:d0:f8:8c:0b:8d:fc:
fc:df:02:54:a9:59:ca:c5:6f:6c:80:f2:65:97:f7:6b:43:96:
ff:a4:dd:37:c9:23:fa:ea:b8:ea:df:00:13:14:98:bb:39:25:
65:5d:f2:d5:64:0f:e0:8d:57:2a:cb:82:3b:7d:f5:b5:a3:29:
96:35:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:10 2026 by rpki-client