Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218943.roa
File: AS218943.roa (raw, json)
Hash identifier: jQhEqXmnrrznntz7XMgGCu6VmS9PoyOa81ZH0yBMOIk=
Subject key identifier: 18:FE:F2:20:3D:18:01:51:6D:28:D2:79:79:30:D9:0D:8D:AC:27:7D
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1AED9CA96FD7FB40B99CB310A9E0A38912230998
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218943.roa
Signing time: Mon 24 Aug 2026 05:24:08 +0000
ROA not before: Mon 24 Aug 2026 05:19:08 +0000
ROA not after: Mon 23 Aug 2027 05:24:08 +0000
asID: 218943
IP address blocks: 143.20.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ed:9c:a9:6f:d7:fb:40:b9:9c:b3:10:a9:e0:a3:89:12:23:09:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 24 05:19:08 2026 GMT
Not After : Aug 23 05:24:08 2027 GMT
Subject: CN=18FEF2203D1801516D28D2797930D90D8DAC277D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:50:72:7c:85:06:09:c0:7d:ef:52:28:16:
3f:fb:de:b3:bb:26:64:e4:9e:1a:b6:ee:ef:5f:40:
70:e7:da:b5:07:28:2e:03:4a:eb:fb:a6:4d:c3:3d:
6d:d8:90:32:2a:30:86:7c:ed:59:63:0e:85:d6:08:
ad:40:34:2e:f8:1a:25:75:bd:f7:63:ef:a7:50:bd:
a8:7d:86:ed:46:55:2b:ed:97:53:f2:11:e1:9f:d6:
d5:5b:ae:a2:fb:65:33:3f:ca:46:73:c5:24:32:5b:
7d:10:42:22:fe:3e:0a:d5:c9:6b:26:a3:b1:89:7c:
de:1b:8a:10:43:86:17:63:dc:8f:fd:65:7b:e0:d3:
77:c5:29:48:2e:76:e5:91:89:d6:d6:9c:9b:6b:09:
f5:98:a5:d7:42:39:40:07:65:68:b6:ce:8d:da:41:
d0:bb:bc:54:1e:05:f0:1a:e7:09:f2:59:ac:44:95:
44:18:c7:58:76:39:b6:82:eb:df:be:dc:10:ae:a8:
01:f4:58:ec:9b:2e:43:0d:17:4e:26:60:1a:27:55:
fd:e0:b8:4d:50:b7:8f:69:c7:1d:f4:15:ed:43:fe:
a6:75:8b:18:6e:7e:c7:49:65:4a:97:d5:37:03:d6:
48:fb:4e:a5:58:38:c9:09:2d:4c:e1:29:4e:12:03:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FE:F2:20:3D:18:01:51:6D:28:D2:79:79:30:D9:0D:8D:AC:27:7D
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.178.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d7:90:f3:63:5c:ab:a1:9d:94:ff:01:4f:64:d0:72:22:74:
a6:7c:6e:b1:9a:dd:c6:4d:dd:30:7a:a1:1d:dd:c8:74:da:e2:
f3:06:a5:ac:3a:18:86:0b:f3:cd:7e:9d:45:cb:99:cb:17:2b:
43:41:75:fc:10:08:2a:5d:d9:ce:75:81:45:6a:4b:81:85:56:
4d:54:0c:b2:33:72:79:51:b3:20:1a:52:00:bf:fe:e1:84:3b:
85:77:4f:c7:36:bf:03:07:34:b5:cc:59:16:a2:50:06:d0:2d:
d8:4d:74:b1:35:79:b2:7d:4c:3c:d8:37:86:9b:cb:aa:25:03:
2c:61:1e:f5:68:e0:df:1f:dc:15:82:5a:91:2b:e0:24:5d:f3:
c5:9b:12:e8:32:be:2b:47:37:02:00:cc:8a:36:d8:cf:a0:e9:
f4:17:4e:15:b7:4f:4b:af:fb:1d:2e:b4:f2:df:2d:cc:08:bd:
db:a2:4b:44:9f:f0:1a:e4:e6:7a:da:c9:90:96:ab:26:06:10:
ae:cb:91:82:9e:0d:d0:46:2f:f1:16:65:3e:ee:48:25:3b:64:
26:a5:25:bc:1d:3e:20:e2:38:e6:d1:0f:87:8f:f4:0b:6d:e7:
a2:ed:6d:46:58:8a:2b:5d:3b:48:11:3c:40:6e:5c:04:21:fe:
27:43:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:49:20 2026 by rpki-client