Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218780.roa
File: AS218780.roa (raw, json)
Hash identifier: /ih0k0uGr1AAVh8zCgysXM2gtz1gVHXqGCpt8Dtv4sM=
Subject key identifier: 8B:5C:21:9C:74:C2:E2:A3:E7:26:89:49:F2:84:02:47:C4:43:C0:B4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7C6F3E5DD2C9BCA573AEFA2179980BEC20A85C1D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218780.roa
Signing time: Fri 30 Oct 2026 17:07:30 +0000
ROA not before: Fri 30 Oct 2026 17:02:30 +0000
ROA not after: Fri 29 Oct 2027 17:07:30 +0000
asID: 218780
IP address blocks: 143.14.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6f:3e:5d:d2:c9:bc:a5:73:ae:fa:21:79:98:0b:ec:20:a8:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 30 17:02:30 2026 GMT
Not After : Oct 29 17:07:30 2027 GMT
Subject: CN=8B5C219C74C2E2A3E7268949F2840247C443C0B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:c9:2c:d4:7f:d9:0b:11:a8:d6:57:0a:24:
cc:8f:e6:67:d3:8f:8f:51:4f:39:0b:09:f3:f7:2d:
eb:2c:0d:be:c2:3a:d7:16:23:99:a5:c7:bf:09:12:
d8:8d:62:8f:4c:ca:8c:b3:1f:3f:f4:3d:a7:05:19:
e8:df:10:33:22:57:b7:b7:9f:96:01:37:32:4a:99:
99:3d:ce:0f:9b:68:79:33:0a:c0:22:62:fc:ce:b4:
3d:30:71:fb:76:96:f0:6b:9c:bf:fd:7b:99:44:13:
27:30:fb:a7:16:c8:b3:19:2d:e5:b8:4e:26:da:0c:
c6:8c:63:32:f2:17:7a:8b:ed:5d:1a:54:7c:47:b2:
9e:2b:ba:6a:36:31:e0:a0:c6:3c:08:be:b2:38:cf:
62:39:39:17:30:d6:0c:6c:54:99:5c:a0:09:9c:7a:
2e:f6:91:59:e2:18:a0:c6:d8:67:87:49:61:ee:da:
20:64:bb:c8:b9:5b:81:5c:8e:ce:41:2f:ed:5a:f8:
1d:d8:36:9d:37:d7:77:0e:f3:20:48:16:a9:34:31:
04:fc:ef:66:ae:e4:a2:2f:fa:e4:1a:d3:50:4f:33:
e4:f6:85:89:d4:fb:cf:e8:55:7b:09:88:72:2e:17:
8f:94:a5:72:e7:53:9b:6d:cf:00:5b:9b:92:57:6f:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:21:9C:74:C2:E2:A3:E7:26:89:49:F2:84:02:47:C4:43:C0:B4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:cd:ce:8a:55:78:04:cc:05:ca:7d:f1:50:60:e0:34:71:3c:
e3:bb:d1:1f:d8:1f:8c:a0:6a:5c:9b:c5:5e:f8:aa:ac:02:ff:
da:32:e2:51:1d:67:23:df:1f:70:e2:64:46:1c:9a:65:38:ea:
6f:fb:07:b6:60:84:46:6d:31:0f:83:9a:fb:19:c1:6a:a5:77:
2e:4b:62:e4:bc:25:f1:fd:e6:a6:63:82:fa:30:65:05:8f:f8:
14:69:31:38:76:f6:d8:03:7b:22:71:27:68:d2:d0:1f:d5:df:
f4:14:63:3e:0d:30:9a:a2:1b:ff:a4:03:27:af:b0:8c:cc:b1:
b4:48:eb:47:c3:86:84:8a:be:10:00:0b:9e:5c:7d:98:9c:a7:
fa:33:42:cb:b6:e2:b4:38:ea:0f:b9:02:62:42:46:db:67:65:
01:a8:39:9c:21:bf:e0:cf:25:6d:be:5c:65:8b:63:90:a3:e2:
35:ba:4a:69:b5:d4:f5:8a:40:6b:0f:6c:d8:ba:8e:ef:cc:84:
0b:9d:74:a1:f8:cb:47:2e:eb:8f:af:7e:32:1a:78:d3:b0:9f:
9e:e4:41:69:cb:b6:6c:ce:bf:9c:fd:90:a9:c0:7f:92:62:8e:
80:fa:b0:01:13:d9:f9:0e:9b:93:f9:34:f8:c6:a5:c8:a6:f5:
b0:1d:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:54:57 2026 by rpki-client