Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218714.roa
File: AS218714.roa (raw, json)
Hash identifier: EwZ42DhkxjLb5Ux2UBOpZa6q7SQK2gstjeD4JGaD2xg=
Subject key identifier: 20:87:B5:39:0D:97:53:07:1A:63:59:B2:23:25:24:2A:5B:6E:FA:71
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 12F9FC1C9AD6AFC27B599F7D52F0BFB3B1888E5B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218714.roa
Signing time: Thu 17 Sep 2026 14:07:11 +0000
ROA not before: Thu 17 Sep 2026 14:02:11 +0000
ROA not after: Thu 16 Sep 2027 14:07:11 +0000
asID: 218714
IP address blocks: 155.117.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f9:fc:1c:9a:d6:af:c2:7b:59:9f:7d:52:f0:bf:b3:b1:88:8e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 17 14:02:11 2026 GMT
Not After : Sep 16 14:07:11 2027 GMT
Subject: CN=2087B5390D9753071A6359B22325242A5B6EFA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:49:af:ff:02:92:9e:51:db:f4:f7:4c:b1:
19:44:73:8e:61:3b:a1:b5:c6:a4:a3:55:80:97:1c:
9b:e0:22:97:b7:9d:e9:a1:21:9c:63:50:1f:87:5f:
a6:88:eb:fe:2b:30:29:ea:03:2c:33:61:3a:c5:2a:
c0:92:34:ad:ec:ce:44:75:96:3c:57:15:f7:a9:a6:
e5:18:5d:69:36:ba:fb:23:c8:1c:cf:c8:3a:32:0d:
d8:fc:b3:a3:ff:57:7d:f9:ac:7a:67:d8:67:47:0e:
27:00:fa:c8:32:d0:a6:76:06:f9:22:3f:cb:21:a5:
fd:8e:fa:26:35:c3:b7:ea:85:5d:1c:65:5d:fa:67:
13:28:63:e7:84:a2:4c:dc:ca:e2:b4:6d:af:cd:6f:
32:e0:a6:d0:8c:fb:14:2e:cc:c4:9c:35:fa:b0:9a:
9a:ed:cb:b9:0e:f7:42:3c:5b:22:68:61:e8:a6:99:
e1:6a:53:cf:83:33:78:19:1c:f5:57:87:b1:0b:0f:
8d:99:a0:eb:68:1b:ee:28:d7:d9:63:45:d8:be:48:
e0:9d:16:9e:87:99:73:47:4c:29:66:4c:bd:17:de:
f1:54:e1:4c:63:e1:3c:e1:e2:87:5b:7e:e1:9a:21:
91:d1:46:e0:b5:59:c3:59:7d:dc:86:80:0e:bc:48:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:87:B5:39:0D:97:53:07:1A:63:59:B2:23:25:24:2A:5B:6E:FA:71
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218714.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.145.0/24
Signature Algorithm: sha256WithRSAEncryption
89:82:4e:32:3e:13:78:fc:68:99:1c:37:c3:43:15:63:d9:7c:
7b:a2:69:0a:f3:10:32:bb:ed:d4:97:55:a4:cd:d2:23:b9:b5:
93:9c:b0:b1:05:49:dc:7c:31:a5:1a:be:dd:d4:ef:3e:90:1d:
66:36:79:41:dd:a2:46:87:5a:67:5a:9a:64:da:ae:22:e4:fa:
32:2f:40:49:d4:a6:2b:0f:9a:98:4c:69:42:32:fe:52:8c:9c:
a5:7e:0f:d0:4c:fe:00:a5:a2:f9:b9:25:02:a1:16:67:43:c2:
35:79:ba:8b:d1:6c:88:00:65:5c:09:33:45:ea:ae:a9:17:82:
3b:0d:8d:a8:4d:a7:a3:b1:41:f1:14:4d:3a:de:83:63:e1:69:
30:fd:06:5a:e2:90:09:9e:c6:ba:91:fd:56:ce:14:8d:a6:8e:
e5:a8:5b:b8:fe:8e:52:cd:af:fb:31:1e:14:a3:e5:97:c4:b5:
8b:ff:a7:86:c3:83:ac:e4:af:e7:34:53:24:cc:a8:1e:2c:7a:
ff:a4:25:32:f1:31:7e:64:9c:1c:c8:44:88:4c:07:c9:94:91:
4e:3c:3d:df:27:f0:86:5b:45:e0:9b:5e:b0:62:59:c9:0c:41:
c4:47:25:17:0d:4c:a2:18:de:d3:fc:b5:54:0d:68:5a:f2:5b:
31:0c:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:29 2026 by rpki-client