Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS218547.roa
File: AS218547.roa (raw, json)
Hash identifier: Bbbk1H5iPfhDq9oyO/mMr4DGWAgHrHnpIgxzrvRinKY=
Subject key identifier: 02:D1:36:A1:8C:01:AD:98:7E:FD:49:76:2E:0F:F7:00:0F:C4:DA:DE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3D71381E72F6E7EA2E8A856097174955B6A803E2
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS218547.roa
Signing time: Fri 02 Oct 2026 08:09:15 +0000
ROA not before: Fri 02 Oct 2026 08:04:15 +0000
ROA not after: Fri 01 Oct 2027 08:09:15 +0000
asID: 218547
IP address blocks: 141.11.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 03:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:71:38:1e:72:f6:e7:ea:2e:8a:85:60:97:17:49:55:b6:a8:03:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 2 08:04:15 2026 GMT
Not After : Oct 1 08:09:15 2027 GMT
Subject: CN=02D136A18C01AD987EFD49762E0FF7000FC4DADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:c9:91:49:2c:16:d3:9a:44:49:14:fa:17:
1c:f6:7e:92:2e:f0:88:e3:db:e6:84:51:b9:d3:7c:
2f:e7:3b:8e:80:9a:65:d1:0d:9b:ff:5d:a2:63:97:
7b:55:5f:8e:5b:bb:6d:99:b9:0b:23:e5:a1:a4:a4:
47:62:3f:30:f0:95:9b:89:1d:6c:14:a0:2a:36:8d:
bb:fc:d8:f1:2d:6a:aa:7e:aa:61:60:01:32:7b:ae:
51:0f:4e:c0:7e:2b:37:cc:49:8b:7d:13:be:b6:65:
61:b1:c5:0a:ce:0c:59:3d:f8:e4:55:96:02:d0:f3:
27:32:d1:59:60:8e:a0:db:7f:be:ac:59:88:84:8b:
f6:89:d4:b7:3d:aa:8b:5f:5b:5b:8a:88:97:f8:8a:
ca:c9:4b:0f:81:43:29:4e:73:2d:84:79:6c:c8:4b:
60:c7:46:31:b1:19:6b:bc:9f:ab:82:22:63:6d:3e:
98:2d:6c:56:19:63:f4:9d:17:72:32:0a:e5:77:0b:
53:fd:75:ce:06:0b:50:81:8f:e0:00:c6:05:d3:97:
3f:0c:47:46:c6:cf:5a:92:88:02:33:34:ed:64:2c:
d4:5a:aa:6c:9d:5f:bc:5d:24:d6:e5:b7:14:96:68:
d9:3c:44:2e:32:db:77:97:31:29:17:c8:8d:fc:84:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D1:36:A1:8C:01:AD:98:7E:FD:49:76:2E:0F:F7:00:0F:C4:DA:DE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS218547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.145.0/24
Signature Algorithm: sha256WithRSAEncryption
95:28:95:a9:71:35:74:af:b9:66:85:7c:08:9f:68:22:d0:61:
92:f5:78:7d:61:c1:3d:05:09:c8:35:26:45:35:fe:37:5c:91:
47:13:fa:d0:56:3d:97:69:84:9c:1a:b3:15:d3:0e:01:0d:4e:
53:7c:25:1b:99:b1:42:be:b9:0f:57:73:ee:1b:4a:aa:ee:b5:
8d:d0:4b:c3:33:71:6e:23:af:7d:44:99:c4:64:2d:33:bd:2c:
5f:e1:f3:db:41:60:ac:1c:cd:09:9b:25:b7:e9:3f:d6:5c:ca:
e3:dc:7b:3d:8d:d9:2e:e1:ef:32:94:99:91:09:e6:a6:f8:2e:
4f:85:a0:a3:27:a7:f8:96:d9:ca:c1:c5:72:34:71:66:60:a0:
fa:e1:65:a9:a6:99:bc:2c:1b:45:c5:93:63:44:bc:cc:db:7c:
75:d0:de:a7:e4:34:de:9d:bf:b6:38:c3:19:e0:8e:8f:d5:42:
56:dd:78:a4:3a:83:1c:ce:cf:91:3a:0d:53:f9:93:bc:75:fc:
f7:c0:7d:c6:05:c7:ba:23:78:4d:2f:1e:4b:a7:74:c2:ed:de:
44:b1:3a:2d:3c:b1:44:d3:f9:4b:75:5d:68:c2:be:19:94:46:
67:f7:0d:16:14:41:ff:47:74:fc:96:1f:e5:38:be:c7:ee:8e:
27:65:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:12:47 2026 by rpki-client