Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218799.roa
File: AS218799.roa (raw, json)
Hash identifier: A9sMGrNTxtQf6OMeHAV0CCReAuBqYTC/iUgtugun//Y=
Subject key identifier: 90:E0:EC:3F:78:0E:79:EC:31:62:74:2B:62:05:F4:9D:A3:FB:F8:31
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3C07961B98517EF0644E001F20F381D9D80DFD5D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218799.roa
Signing time: Fri 11 Sep 2026 13:44:23 +0000
ROA not before: Fri 11 Sep 2026 13:39:23 +0000
ROA not after: Fri 10 Sep 2027 13:44:23 +0000
asID: 218799
IP address blocks: 167.148.90.0/24 maxlen: 24
167.148.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:07:96:1b:98:51:7e:f0:64:4e:00:1f:20:f3:81:d9:d8:0d:fd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 11 13:39:23 2026 GMT
Not After : Sep 10 13:44:23 2027 GMT
Subject: CN=90E0EC3F780E79EC3162742B6205F49DA3FBF831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:07:4d:de:64:fb:38:b4:c5:18:4e:47:4e:
47:3f:79:98:bf:47:bb:57:84:f2:44:88:9f:22:24:
7a:3d:b3:89:83:4b:47:41:5e:a1:d0:70:d8:fe:aa:
be:c4:24:c8:b1:f0:c4:4c:0c:e8:77:d4:bc:ee:00:
b9:ab:fe:41:3c:c0:35:a9:f9:bc:fa:d7:05:23:fd:
c8:d5:17:76:19:3e:ca:b1:fe:b1:ae:dc:c7:94:ba:
f9:6d:17:9b:75:94:d8:63:82:80:81:8a:2d:cc:85:
d1:ba:11:3f:7c:b5:be:45:84:cf:b5:0e:43:f3:d0:
30:10:a8:ce:c4:7c:d6:4a:5d:1d:30:13:24:6b:41:
ce:f6:42:7d:fd:b4:77:5e:b4:19:e4:ee:a8:1e:42:
63:5c:6c:ca:97:05:4d:c5:7e:88:e0:90:f1:c3:6b:
a1:37:44:3b:80:ff:bd:c8:6d:90:d4:ce:8e:d6:ea:
21:f5:e1:ae:ea:3e:b5:6c:bb:58:55:c4:ac:42:01:
6a:82:cf:35:ba:2f:62:e3:ff:c5:8b:46:57:4d:ee:
fc:36:eb:36:4f:91:b6:a1:21:07:21:bb:1f:8b:da:
a0:14:e6:dd:73:f2:a1:98:de:9a:c0:0a:a6:bb:6d:
a4:0e:fd:7b:9e:18:75:ae:44:85:38:74:86:aa:cd:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E0:EC:3F:78:0E:79:EC:31:62:74:2B:62:05:F4:9D:A3:FB:F8:31
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.90.0/24
167.148.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d5:f0:6c:b7:93:09:b2:2a:52:d2:fa:5a:a8:e8:0d:ab:25:
bd:58:23:e7:2e:83:8e:fc:7e:fe:3a:22:4a:1b:4e:d1:93:3a:
1e:17:b6:e6:95:29:4b:3a:4c:1e:3d:27:6b:80:c6:11:e9:85:
21:6a:5b:ee:57:d4:f8:05:f7:60:b9:06:91:13:6b:04:d2:61:
67:47:87:59:60:e3:14:06:82:19:3b:d4:49:04:c9:eb:69:97:
d4:6d:70:19:65:91:06:9e:45:aa:00:3d:3e:fe:47:36:04:6b:
63:ff:f5:b0:4e:00:ac:40:e8:5a:4c:1b:e7:63:37:ee:a3:eb:
a0:96:c3:7f:08:cc:25:7d:8d:d3:39:31:c2:05:9e:0d:40:a4:
29:60:75:0d:30:ab:aa:b7:32:11:91:3c:3f:99:c0:5d:67:8e:
bd:5e:0d:70:20:7d:b5:2d:c8:8c:b3:36:4b:21:a7:05:4c:8e:
fd:14:28:b6:6d:c3:5e:c9:73:40:ff:04:ed:b1:ba:dc:2a:10:
bc:a9:a0:25:8e:c1:c6:83:bf:ed:2b:27:42:3f:8e:4b:92:19:
0c:63:e0:ad:4b:29:0d:c4:25:07:c8:d5:53:57:bd:1a:6a:7b:
59:36:2a:14:cd:f3:da:13:45:13:72:08:82:e1:08:62:8d:33:
4c:7c:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:34 2026 by rpki-client