Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218968.roa
File: AS218968.roa (raw, json)
Hash identifier: q+We/2xORHwb4GBpg0MsJ/4LWk9WS/8Y+DosifGuTjg=
Subject key identifier: AB:58:05:F0:92:9F:33:B5:68:19:F0:B9:47:17:C2:1B:5F:6B:7E:16
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 72797C6D14C1BC7E07A4AD607CE35DCA060D7251
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218968.roa
Signing time: Mon 26 Oct 2026 10:38:26 +0000
ROA not before: Mon 26 Oct 2026 10:33:26 +0000
ROA not after: Mon 25 Oct 2027 10:38:26 +0000
asID: 218968
IP address blocks: 148.135.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:79:7c:6d:14:c1:bc:7e:07:a4:ad:60:7c:e3:5d:ca:06:0d:72:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 26 10:33:26 2026 GMT
Not After : Oct 25 10:38:26 2027 GMT
Subject: CN=AB5805F0929F33B56819F0B94717C21B5F6B7E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:07:7a:af:3d:c2:8f:32:68:c1:17:09:6e:
52:c0:2f:35:61:c9:e0:b9:2b:3a:cf:cc:54:28:5b:
55:4a:23:3e:99:97:b4:ac:92:a1:0d:e0:49:ec:c1:
bb:d8:91:a2:72:fc:68:f7:8e:c0:02:f2:4e:2a:de:
92:de:53:61:ee:82:ca:7b:1b:f1:32:3d:8a:5a:63:
dd:df:88:00:58:62:60:80:ac:ae:0c:08:b3:fc:c7:
df:ff:8d:3d:cc:ba:c8:68:5e:bf:34:79:36:38:15:
9c:cc:69:19:2c:35:57:6a:20:e0:84:e4:64:56:42:
c7:e4:95:d9:8d:2e:cb:40:ff:c0:20:2b:da:92:49:
c9:38:11:53:46:54:72:43:27:4a:33:4f:c7:f1:ef:
4c:37:23:e8:77:e0:54:f0:48:91:5d:27:41:25:bb:
37:73:f5:4c:4c:cb:64:9c:c8:63:78:83:2d:d8:77:
81:6f:74:0c:f5:c3:5b:92:a9:90:0e:c5:4f:0a:ae:
b6:ac:6e:6c:9a:28:85:44:f6:c8:84:8d:96:0f:1b:
8e:c2:09:a9:8c:62:70:29:e0:b3:b3:c4:84:f7:5b:
e5:7b:23:3a:c6:c7:ea:c9:b6:67:cd:fd:69:7f:fb:
fa:36:4b:a7:40:87:60:ef:d5:79:07:93:c5:f0:e4:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:05:F0:92:9F:33:B5:68:19:F0:B9:47:17:C2:1B:5F:6B:7E:16
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.172.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bd:8b:fd:41:47:8c:f7:e6:2d:a3:9a:f6:eb:de:30:69:3c:
c5:a7:0a:65:d4:e2:29:29:a5:7c:a6:03:05:28:b5:40:06:50:
5e:84:94:f3:0d:0f:2a:2f:57:56:79:a2:9d:5c:53:8b:c3:51:
34:15:1f:e2:75:a0:ed:bb:f5:bc:65:4f:00:2b:74:91:f4:5b:
e7:6c:23:47:55:01:d4:48:64:08:bd:3c:b8:db:5e:89:ea:de:
b6:0c:9a:c5:67:da:60:06:a1:74:b1:35:df:ff:67:d2:92:17:
3b:18:07:2c:de:17:6a:21:48:70:30:fd:92:2d:26:ad:fd:7d:
04:5c:cc:f4:18:fc:46:ad:f2:c9:fd:ea:91:57:ec:9e:7c:76:
67:66:4f:d8:37:2b:e0:f5:b4:22:95:c8:4a:40:2a:94:e6:77:
1e:c0:c6:c6:f4:1a:ac:d4:5d:a8:de:24:77:e4:5c:3e:57:74:
2d:35:93:6a:e6:a0:55:f6:89:d1:66:62:6f:44:9e:1d:6b:ea:
bc:13:75:96:f7:0e:90:4f:87:d3:4d:dd:2b:95:62:6a:f6:cc:
49:7f:d0:be:ba:53:d9:ea:9d:6a:44:81:e7:7a:9c:df:0b:82:
1d:b3:0c:6c:c0:52:4c:f3:47:bf:ec:80:48:74:a4:79:29:16:
3e:6c:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:09:42 2026 by rpki-client