Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS218686.roa
File: AS218686.roa (raw, json)
Hash identifier: l82IxwhEYY9HbqroAv3NAfexLkqkf06uCoBA7NfzWSU=
Subject key identifier: D2:2C:06:36:95:80:80:63:31:A2:A9:DF:AC:D6:AE:21:24:60:83:56
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7962A5F7029903A6AB5B73981D4ABAA4858FB391
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS218686.roa
Signing time: Thu 01 Oct 2026 00:16:27 +0000
ROA not before: Thu 01 Oct 2026 00:11:27 +0000
ROA not after: Thu 30 Sep 2027 00:16:27 +0000
asID: 218686
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:62:a5:f7:02:99:03:a6:ab:5b:73:98:1d:4a:ba:a4:85:8f:b3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 1 00:11:27 2026 GMT
Not After : Sep 30 00:16:27 2027 GMT
Subject: CN=D22C06369580806331A2A9DFACD6AE2124608356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:ce:2d:09:2e:1e:0d:02:36:0b:e2:4d:86:
d7:0f:e4:18:24:02:fb:db:9a:56:ce:e9:9d:b2:0b:
6f:75:e6:51:c3:f6:0f:9f:28:7c:50:ae:64:ab:cf:
38:ee:9a:f7:d5:b9:8f:c7:a2:54:fa:62:ea:60:d0:
66:be:d8:68:69:ab:55:18:9b:f0:f9:da:e8:e4:2d:
3a:a2:6a:b5:e5:0b:78:b3:cb:3e:49:a3:67:ce:ff:
b0:b9:e1:46:92:97:89:a8:39:54:8a:9c:81:a9:ae:
20:c0:18:1e:f7:88:bc:25:e5:cb:26:68:24:d3:39:
5e:57:9a:d4:e5:d9:29:4c:de:6a:ed:13:00:23:a1:
35:3d:04:de:b4:2e:32:45:f2:6f:d2:82:cb:ab:c6:
c8:7a:ba:2c:84:78:38:ed:ca:84:c8:6a:16:6e:aa:
cc:1b:2c:9f:d0:bf:92:5c:db:d6:0a:47:05:26:49:
23:88:62:90:26:e6:58:16:07:35:7e:d8:20:dd:a0:
4b:06:66:f8:fa:95:87:ef:b9:cb:de:00:2f:2f:b0:
aa:44:83:d9:82:c5:64:a3:44:6b:9f:2a:8a:1f:83:
c9:81:93:4c:d8:16:bf:1d:d1:45:c5:b7:dc:05:39:
f6:a4:7d:18:a4:c7:98:61:18:67:9f:2c:d3:83:fd:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:06:36:95:80:80:63:31:A2:A9:DF:AC:D6:AE:21:24:60:83:56
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS218686.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
35:97:a5:84:10:3e:59:24:00:02:09:f8:d4:62:54:8e:10:5d:
a2:46:2b:42:8a:9a:7e:68:2c:db:60:30:6a:9f:16:e0:c9:21:
84:2a:6b:40:02:f5:ff:4a:ba:8d:c9:a5:b1:de:f9:9d:7c:b5:
24:b2:79:9c:e0:9b:5f:66:f3:a9:8b:8e:9f:e7:22:22:48:f9:
58:2d:6d:d5:eb:e8:37:ec:41:f9:06:97:bb:90:35:96:0f:c5:
9b:73:ef:3c:a6:35:90:f7:29:00:c3:6a:84:6c:52:5a:05:a8:
2d:d6:f8:2d:ed:45:82:a3:96:01:f2:2c:32:97:fb:63:e5:3f:
df:4b:e3:4c:07:2b:19:09:1a:b2:35:c4:4c:8e:a4:68:2c:87:
dd:03:38:61:4b:48:48:50:ba:7c:24:fe:2f:b7:e1:55:c6:67:
27:44:a2:6b:e8:0e:02:7c:ee:5a:f0:bb:f8:ad:bf:a3:39:7c:
f3:6b:4f:ba:31:71:e2:6e:fb:5e:c2:4a:cb:80:ee:59:1f:e9:
e2:57:a1:ee:cf:bc:13:83:f4:e4:2f:47:0c:f0:89:23:67:6d:
e1:d6:40:e7:05:74:da:24:59:be:82:bf:ff:45:ad:7c:78:3e:
d4:2f:62:e3:e7:e5:00:62:fd:51:0e:ff:fa:b7:54:f7:b2:0f:
b3:fc:89:64
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeWKl9wKZA6arW3OYHUq6pIWPs5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjEwMDEwMDExMjdaFw0yNzA5MzAwMDE2MjdaMDMxMTAvBgNV
BAMTKEQyMkMwNjM2OTU4MDgwNjMzMUEyQTlERkFDRDZBRTIxMjQ2MDgzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgs4tCS4eDQI2C+JNhtcP5Bgk
AvvbmlbO6Z2yC2915lHD9g+fKHxQrmSrzzjumvfVuY/HolT6Yupg0Ga+2Ghpq1UY
m/D52ujkLTqiarXlC3izyz5Jo2fO/7C54UaSl4moOVSKnIGpriDAGB73iLwl5csm
aCTTOV5XmtTl2SlM3mrtEwAjoTU9BN60LjJF8m/Sgsurxsh6uiyEeDjtyoTIahZu
qswbLJ/Qv5Jc29YKRwUmSSOIYpAm5lgWBzV+2CDdoEsGZvj6lYfvucveAC8vsKpE
g9mCxWSjRGufKoofg8mBk0zYFr8d0UXFt9wFOfakfRikx5hhGGefLNOD/U/hAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU0iwGNpWAgGMxoqnfrNauISRgg1YwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE4Njg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvw
MA0GCSqGSIb3DQEBCwUAA4IBAQA1l6WEED5ZJAACCfjUYlSOEF2iRitCipp+aCzb
YDBqnxbgySGEKmtAAvX/SrqNyaWx3vmdfLUksnmc4JtfZvOpi46f5yIiSPlYLW3V
6+g37EH5Bpe7kDWWD8Wbc+88pjWQ9ykAw2qEbFJaBagt1vgt7UWCo5YB8iwyl/tj
5T/fS+NMBysZCRqyNcRMjqRoLIfdAzhhS0hIULp8JP4vt+FVxmcnRKJr6A4CfO5a
8Lv4rb+jOXzza0+6MXHibvtewkrLgO5ZH+niV6Huz7wTg/TkL0cM8IkjZ23h1kDn
BXTaJFm+gr//Ra18eD7UL2Lj5+UAYv1RDv/6t1T3sg+z/Ilk
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:20 2026 by rpki-client