Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218322.roa
File: AS218322.roa (raw, json)
Hash identifier: gQ4EWiqUi70Qcr6CCMgQgjaNK5XbzLD9YQCr/WxvelQ=
Subject key identifier: 61:A7:DA:25:01:B0:2A:DA:E2:C1:3A:E7:78:71:1F:45:E8:3C:75:56
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 164285C29B5314428EA6E155C5C62BC39CDF862E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218322.roa
Signing time: Mon 26 Oct 2026 12:12:46 +0000
ROA not before: Mon 26 Oct 2026 12:07:46 +0000
ROA not after: Mon 25 Oct 2027 12:12:46 +0000
asID: 218322
IP address blocks: 143.20.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:42:85:c2:9b:53:14:42:8e:a6:e1:55:c5:c6:2b:c3:9c:df:86:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 26 12:07:46 2026 GMT
Not After : Oct 25 12:12:46 2027 GMT
Subject: CN=61A7DA2501B02ADAE2C13AE778711F45E83C7556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:18:4b:27:55:cd:b0:1f:00:6b:71:18:40:
6c:c5:16:10:0e:e2:1a:a6:44:ea:14:3b:2e:21:b3:
17:22:38:e9:9d:2a:f0:67:78:4b:0d:80:4c:29:d4:
be:c8:80:06:ed:5a:47:3f:7d:cf:1d:9e:41:22:e7:
18:06:83:96:cf:4f:2a:17:d7:3c:8c:7b:98:3d:4b:
10:7c:4a:7b:bd:ad:22:ba:f6:eb:5d:12:62:f6:85:
80:ad:2d:0a:c8:07:1f:04:cc:c9:f7:d1:ba:5b:8e:
3f:43:89:0a:ac:c2:63:95:d0:6b:e3:2a:b1:1d:82:
59:27:b1:db:3b:cd:ad:70:82:9e:59:2f:38:c4:e6:
ec:4d:a0:d1:3c:ba:f5:61:d4:2b:49:fc:97:d8:f3:
45:20:6e:53:42:db:72:b0:41:9a:59:24:2e:05:e7:
57:33:bc:21:03:b7:c4:1a:fd:e0:d8:65:ea:c8:3d:
e8:9a:74:33:9c:20:c5:d9:d9:9a:ee:b2:cd:c1:16:
09:23:36:43:25:c9:a0:a0:68:1a:e7:97:cd:21:27:
ab:4b:66:ae:82:a0:28:6b:f9:2a:47:f4:ac:f3:cb:
2c:58:f1:cc:3a:f9:62:c5:66:78:93:68:4e:c6:e8:
59:e1:1a:be:44:db:54:03:3c:2c:e5:bb:9c:95:77:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A7:DA:25:01:B0:2A:DA:E2:C1:3A:E7:78:71:1F:45:E8:3C:75:56
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.244.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:6b:d1:11:84:c2:71:d4:14:20:d3:8d:35:e9:7e:ed:c8:e0:
44:23:ee:21:73:8e:7c:74:73:f6:73:bf:80:4f:93:75:83:82:
a3:89:d5:ba:73:2a:86:7d:e9:6a:68:d2:ca:79:5b:bf:00:64:
d7:a7:81:ec:0e:fa:de:94:4b:e0:92:2a:79:9a:5a:80:01:c3:
16:f8:1f:14:aa:65:18:54:cc:05:72:eb:f9:dc:d9:dc:11:80:
97:b8:13:f8:71:33:83:2d:ae:ba:d9:9b:e5:97:48:21:dd:33:
ce:6e:93:e5:ff:26:a0:4f:4e:ec:95:2b:c4:88:29:54:82:10:
4c:bb:83:a5:78:cd:db:e5:ba:7e:bc:b0:fb:54:7b:54:65:0e:
f7:8b:56:c5:2e:b7:d3:1e:c4:b8:a4:38:0f:39:32:49:83:90:
b1:e6:45:53:df:49:b5:8a:20:1c:5e:9c:c5:34:ec:7c:87:e4:
50:b1:ce:7b:7f:48:8a:65:9c:ab:58:78:a9:46:d4:19:77:fc:
22:98:19:f9:c0:b3:5b:63:ad:3c:c3:73:3c:b3:7b:4a:8e:0c:
d3:f7:bc:4d:57:86:ac:08:5e:f9:23:9e:b0:2e:91:ec:00:b5:
c3:7d:1a:1d:0c:55:22:fd:ef:55:45:a9:12:16:75:c4:92:da:
b7:f8:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:56:14 2026 by rpki-client