Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218879.roa
File: AS218879.roa (raw, json)
Hash identifier: 37fwTnWoFXj0cBVbvLvmcqRlENSUCeBWbg/IGw+3XzI=
Subject key identifier: 52:1E:DA:2C:08:C2:07:6D:3F:9E:F4:2E:4C:01:91:A6:AD:62:82:42
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2881134B92D71BABC15B96469F342FDEF3B20DD3
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218879.roa
Signing time: Sun 30 Aug 2026 17:26:09 +0000
ROA not before: Sun 30 Aug 2026 17:21:09 +0000
ROA not after: Sun 29 Aug 2027 17:26:09 +0000
asID: 218879
IP address blocks: 143.20.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:81:13:4b:92:d7:1b:ab:c1:5b:96:46:9f:34:2f:de:f3:b2:0d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 30 17:21:09 2026 GMT
Not After : Aug 29 17:26:09 2027 GMT
Subject: CN=521EDA2C08C2076D3F9EF42E4C0191A6AD628242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:33:17:f4:b6:64:0a:66:dc:ee:28:09:fb:
2b:dd:b2:52:f7:37:43:86:64:2e:1a:37:f5:ca:c5:
b8:e5:95:71:f0:86:85:ec:28:24:fc:20:9a:28:fe:
a7:11:37:7b:c4:91:12:6b:67:81:a0:85:4c:4d:73:
7d:d1:28:00:9f:cc:c7:1e:4e:d1:9e:46:dc:86:2d:
e6:3c:c8:73:fb:23:83:a2:b0:fd:0c:0b:4d:ed:62:
ef:4e:b5:2c:a4:34:71:04:55:a1:f3:85:58:2e:92:
94:63:3b:53:fe:6c:17:49:66:53:4e:82:f3:48:59:
e8:c7:49:a6:83:b5:06:60:6c:db:5e:7d:e5:f2:fb:
b9:49:64:78:d4:a5:c1:b1:d8:4a:a2:50:50:0c:ca:
00:12:66:c7:c2:40:0a:bc:43:c2:6c:b4:5b:d4:cc:
3d:7b:cb:03:53:66:34:65:c9:e5:66:66:65:97:26:
c5:3f:ce:e7:41:5a:53:ac:43:4e:c3:6f:2a:f7:df:
09:ef:a9:84:80:79:a9:6c:2c:d1:1c:e5:fa:40:25:
93:92:6a:3e:11:27:7a:81:a0:ad:6e:59:b9:11:aa:
ef:51:b4:14:24:f7:75:fa:f9:11:da:a2:cf:d3:3f:
7f:4b:97:8d:15:9d:43:c5:99:cd:3a:cf:7c:b3:fa:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:DA:2C:08:C2:07:6D:3F:9E:F4:2E:4C:01:91:A6:AD:62:82:42
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218879.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.16.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0d:db:7a:56:ac:b1:22:75:c9:28:18:2a:83:4b:56:60:70:
df:24:3e:45:e9:bb:e3:c8:2c:61:8a:63:fc:74:15:1f:00:ed:
cd:7c:c8:03:21:2c:00:05:8b:69:15:92:de:f7:f6:16:14:58:
27:29:79:d9:e2:0c:a1:be:8c:36:5a:36:0f:cd:66:f9:aa:e5:
47:30:20:c6:cf:3d:dd:99:c9:a0:ee:10:f1:02:67:c1:7a:70:
09:45:d7:66:45:4a:ae:5b:13:a1:91:ed:a7:4f:2b:98:e1:69:
c7:83:a1:b0:90:b3:ba:0b:02:56:36:f0:5a:4b:31:44:b2:8f:
21:80:0e:8b:4a:f2:5c:ef:0c:53:ce:10:2e:59:78:23:91:c4:
9d:3a:2d:30:dd:a5:70:59:5b:56:db:07:e1:3b:e8:4d:3a:73:
d6:a6:68:e6:64:64:1f:ac:2f:9c:99:d0:25:e9:6b:ff:2b:10:
fd:58:7e:59:8f:2c:98:79:50:d9:0d:d8:f2:35:56:7a:36:5d:
4e:2d:67:b4:65:9e:0c:54:d2:dc:5e:1b:de:4f:3d:76:7a:ec:
3d:e2:48:f8:9d:6e:08:02:51:8d:40:94:10:4e:19:d9:03:e9:
89:9b:c2:c7:eb:81:f8:b5:90:7a:b6:40:bf:b5:7c:d2:b2:c2:
c6:b3:26:46
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKIETS5LXG6vBW5ZGnzQv3vOyDdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA4MzAxNzIxMDlaFw0yNzA4MjkxNzI2MDlaMDMxMTAvBgNV
BAMTKDUyMUVEQTJDMDhDMjA3NkQzRjlFRjQyRTRDMDE5MUE2QUQ2MjgyNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRojMX9LZkCmbc7igJ+yvdslL3
N0OGZC4aN/XKxbjllXHwhoXsKCT8IJoo/qcRN3vEkRJrZ4GghUxNc33RKACfzMce
TtGeRtyGLeY8yHP7I4OisP0MC03tYu9OtSykNHEEVaHzhVgukpRjO1P+bBdJZlNO
gvNIWejHSaaDtQZgbNtefeXy+7lJZHjUpcGx2EqiUFAMygASZsfCQAq8Q8JstFvU
zD17ywNTZjRlyeVmZmWXJsU/zudBWlOsQ07Dbyr33wnvqYSAealsLNEc5fpAJZOS
aj4RJ3qBoK1uWbkRqu9RtBQk93X6+RHaos/TP39Ll40VnUPFmc06z3yz+tF/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUUh7aLAjCB20/nvQuTAGRpq1igkIwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE4ODc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBIDdt6VqyxInXJKBgqg0tWYHDfJD5F6bvjyCxh
imP8dBUfAO3NfMgDISwABYtpFZLe9/YWFFgnKXnZ4gyhvow2WjYPzWb5quVHMCDG
zz3dmcmg7hDxAmfBenAJRddmRUquWxOhke2nTyuY4WnHg6GwkLO6CwJWNvBaSzFE
so8hgA6LSvJc7wxTzhAuWXgjkcSdOi0w3aVwWVtW2wfhO+hNOnPWpmjmZGQfrC+c
mdAl6Wv/KxD9WH5ZjyyYeVDZDdjyNVZ6Nl1OLWe0ZZ4MVNLcXhveTz12euw94kj4
nW4IAlGNQJQQThnZA+mJm8LH64H4tZB6tkC/tXzSssLGsyZG
-----END CERTIFICATE-----
Generated at Fri Sep 4 05:38:56 2026 by rpki-client