Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: 3+0Y1xTPckUiR6WMP/zWJ3pXQjPR7n9+8Um586QURJE=
Subject key identifier: 40:F1:63:60:1D:CC:4A:77:5D:19:67:B2:F1:DF:DC:55:96:DD:46:DB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 10343AC1AB5028784C5AA8E11ABCE14DCB322F40
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218965.roa
Signing time: Thu 03 Sep 2026 12:11:52 +0000
ROA not before: Thu 03 Sep 2026 12:06:52 +0000
ROA not after: Thu 02 Sep 2027 12:11:52 +0000
asID: 218965
IP address blocks: 143.14.186.0/24 maxlen: 24
155.117.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:34:3a:c1:ab:50:28:78:4c:5a:a8:e1:1a:bc:e1:4d:cb:32:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 3 12:06:52 2026 GMT
Not After : Sep 2 12:11:52 2027 GMT
Subject: CN=40F163601DCC4A775D1967B2F1DFDC5596DD46DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:88:24:e5:20:19:04:78:97:c0:f5:0a:a1:
42:98:e9:11:6e:6b:13:1c:80:55:25:8e:02:8e:77:
ab:a7:38:af:08:9f:78:39:65:eb:37:38:87:ee:4c:
e2:dc:86:fa:fb:c4:0d:b0:6e:17:68:a3:7c:94:df:
08:85:00:c5:25:0a:ca:97:f6:4b:f9:b4:59:4b:ac:
ab:6e:57:74:e1:f2:17:c7:bd:eb:fb:f4:24:52:09:
8f:98:2d:25:bf:66:65:a0:6f:d2:ad:7c:ab:10:5a:
15:7a:39:d2:2e:6a:37:96:ee:3c:13:8c:54:ca:f8:
1d:dd:26:c2:fa:0f:c0:5e:a1:01:d9:e4:80:08:c8:
71:74:33:cf:37:1f:27:ec:97:34:69:e3:c2:3d:8d:
1a:ff:39:0c:0d:5e:36:b8:8a:90:28:c4:9b:cb:58:
6c:2b:f5:66:6c:5f:78:09:ce:0c:a9:58:78:77:d2:
93:cb:2c:ef:8f:e5:a6:65:e8:83:3a:78:71:0b:e7:
9b:e4:19:90:75:c9:19:a9:72:fb:a7:cb:06:e4:a6:
20:cc:dd:5e:b0:11:49:13:2b:cf:a4:c4:1f:0d:e8:
6b:ea:60:34:03:de:7b:0c:25:fb:0d:39:0e:1b:13:
1f:18:f7:ec:64:76:5d:a6:df:84:43:25:3b:70:51:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F1:63:60:1D:CC:4A:77:5D:19:67:B2:F1:DF:DC:55:96:DD:46:DB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.186.0/24
155.117.184.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ff:cd:de:cb:e8:18:81:21:77:4b:2a:8a:dc:ab:d5:88:0a:
04:89:e7:14:9e:4a:67:e7:1e:91:ba:13:a1:b8:40:94:08:da:
9a:52:99:af:fd:d8:80:ff:40:42:f9:42:23:be:34:f2:eb:07:
50:f4:b5:0e:72:8d:d7:68:7c:62:d1:3c:7c:8a:09:06:9d:06:
2e:ec:26:24:13:2f:5f:b5:5d:89:ad:0b:1c:35:39:0f:35:76:
64:2f:b3:99:ac:47:e9:f7:60:e5:bd:57:38:f2:e6:76:6f:f5:
15:43:5a:07:51:66:ce:97:f5:b2:83:ef:2d:b4:a7:fa:44:d3:
a0:32:7d:5f:ca:46:04:e5:77:c9:5b:a3:da:dc:24:5e:48:e9:
fe:20:e6:7d:ed:0b:68:3a:cc:5a:01:2f:39:1d:1f:11:5c:34:
22:7a:1f:48:ee:b2:f8:a7:bd:11:b0:1d:3c:15:92:10:2f:08:
2b:ea:e7:d6:3a:43:e6:56:68:4a:87:8b:a9:1a:36:9b:32:07:
ac:e2:2f:c9:80:03:fe:73:a7:c1:0a:a7:ec:ed:95:49:38:09:
8f:54:40:63:b5:97:41:4b:d6:27:96:08:2c:94:1f:55:b1:c6:
13:96:0f:e9:ed:d9:c7:51:f9:2c:47:79:87:5d:3c:ca:54:1f:
23:63:74:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:07 2026 by rpki-client