Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218819.roa
File: AS218819.roa (raw, json)
Hash identifier: SZmKXZ1FlhqYySVa98hB4pkjB2lehU7NVIfKAi7q0bY=
Subject key identifier: 86:75:82:F7:5C:29:CA:B6:CE:C8:D8:25:FD:98:26:DD:45:82:24:F3
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1A6262384F95369F7E55B6FC253254EEE0DF205A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218819.roa
Signing time: Wed 02 Sep 2026 06:32:59 +0000
ROA not before: Wed 02 Sep 2026 06:27:59 +0000
ROA not after: Wed 01 Sep 2027 06:32:59 +0000
asID: 218819
IP address blocks: 143.20.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:62:62:38:4f:95:36:9f:7e:55:b6:fc:25:32:54:ee:e0:df:20:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 2 06:27:59 2026 GMT
Not After : Sep 1 06:32:59 2027 GMT
Subject: CN=867582F75C29CAB6CEC8D825FD9826DD458224F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:be:7b:3c:4d:8d:8f:c3:eb:b5:e1:00:e0:
48:33:75:b7:25:44:46:29:78:84:bc:da:14:68:c9:
32:e4:1f:5e:e2:d7:3d:40:94:b3:c6:e7:a0:9e:57:
eb:63:13:ad:a3:e7:23:09:b4:e3:ba:50:13:13:3d:
8d:e1:61:86:98:b4:23:c2:71:3b:d4:cc:2c:dc:46:
f4:cc:11:5a:ef:f1:a5:91:01:2b:2b:7b:09:7f:aa:
65:97:2c:3b:98:eb:4c:02:7d:e7:a9:69:88:27:26:
b2:18:b4:fe:95:02:7c:7d:8b:26:9d:b5:72:f7:b8:
f1:40:1c:75:58:0c:9d:bc:ee:67:16:06:f2:2c:7a:
e2:65:cd:70:00:74:4b:57:e0:01:1d:72:ea:e5:b4:
28:fb:4e:95:b6:ce:14:bb:43:c8:95:72:fe:5f:6a:
6f:cf:99:cc:d9:10:50:48:bd:84:bb:7d:ab:dc:8a:
1c:d8:1f:48:9f:f4:f1:94:04:db:72:d4:db:03:f1:
7a:7b:12:76:ff:f1:57:41:22:2e:f3:a3:dd:b9:e8:
1c:56:c7:02:ec:70:15:f3:12:e2:7c:93:4c:8f:45:
61:9d:04:7d:c2:ad:d9:d0:4c:78:a7:5a:17:35:33:
0d:f0:eb:60:91:87:ef:4b:a1:f3:6c:d8:4a:bc:59:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:82:F7:5C:29:CA:B6:CE:C8:D8:25:FD:98:26:DD:45:82:24:F3
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.251.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:c3:15:7f:1c:51:d5:e2:e0:56:c3:ce:7f:8a:e9:01:54:7e:
4f:c7:32:a9:61:b4:52:2b:23:81:53:80:85:ad:cf:eb:1c:27:
22:e2:b9:a3:d5:b9:a1:a7:9e:20:07:54:51:d5:18:0b:fd:ab:
0a:e9:fc:d2:8f:37:01:0b:3f:a2:fe:35:d6:4f:5c:d0:b9:7d:
87:63:36:64:88:7a:a8:15:06:95:5c:d4:b9:fa:00:40:c5:ff:
58:9b:19:b6:e2:8f:61:01:d8:c9:72:b5:cc:61:e1:d5:63:5c:
70:da:f7:36:2b:11:f9:42:a0:a3:68:8a:e3:78:96:61:49:00:
8a:7b:8c:72:72:16:64:e7:c3:e9:90:b3:9e:75:98:13:7e:44:
df:f9:1a:21:26:70:24:4a:30:d7:53:31:2c:6e:ae:9f:c1:1b:
e8:2c:95:a3:8f:a3:92:f4:5a:73:7d:f1:2d:25:f9:33:77:b4:
ca:47:14:c9:6c:f0:d3:98:4d:f2:67:03:0a:bf:07:22:0f:f9:
fe:4c:13:4c:02:31:58:b8:58:6e:52:7e:bc:f6:cf:62:3a:fe:
d1:50:90:2f:d4:1e:56:2a:bf:9f:82:98:86:84:56:81:e0:66:
8a:11:7c:61:c0:de:93:5a:27:47:dd:c7:1e:2c:bd:16:a7:b2:
54:8b:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 07:46:21 2026 by rpki-client