Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218797.roa
File: AS218797.roa (raw, json)
Hash identifier: K+j2c4LL30FCXc18dsvBpeJ1QLDyAQ56VLtP+P9AHkw=
Subject key identifier: 89:10:27:C0:A2:01:C4:7E:3B:63:DE:E7:9C:C1:D4:1B:D7:57:DF:6B
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6C31478E425029BCF141C16895560155F4F5C109
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218797.roa
Signing time: Wed 16 Sep 2026 08:28:00 +0000
ROA not before: Wed 16 Sep 2026 08:23:00 +0000
ROA not after: Wed 15 Sep 2027 08:28:00 +0000
asID: 218797
IP address blocks: 5.199.18.0/24 maxlen: 24
5.199.29.0/24 maxlen: 24
5.199.51.0/24 maxlen: 24
5.199.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:31:47:8e:42:50:29:bc:f1:41:c1:68:95:56:01:55:f4:f5:c1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 08:23:00 2026 GMT
Not After : Sep 15 08:28:00 2027 GMT
Subject: CN=891027C0A201C47E3B63DEE79CC1D41BD757DF6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:dd:99:ad:31:36:fd:a8:b3:b0:fd:21:be:
19:ef:41:08:51:8f:23:aa:07:f4:97:2f:47:d2:c0:
0c:86:14:13:ee:a8:45:1f:31:03:1b:19:ca:7d:dc:
49:bd:f2:09:47:a1:64:69:57:19:77:d1:64:e9:47:
4f:d0:03:81:22:0b:cc:be:ab:77:8b:44:fb:04:62:
32:95:b1:0e:a3:5e:99:d4:99:46:16:07:6a:84:90:
2b:4b:b0:ca:40:d0:29:da:e2:de:10:21:3d:bb:be:
2d:c8:3e:72:ca:e9:a7:a7:cd:76:15:b1:84:f0:5d:
c0:33:4c:d0:72:01:b1:83:41:3d:94:6a:21:ae:8a:
9c:07:55:24:d3:37:43:36:5c:08:ac:68:c1:c5:2b:
47:fe:54:75:c5:e4:17:88:16:d9:01:cf:c2:65:96:
be:07:52:e7:c1:17:8a:a5:cb:b9:54:db:93:f5:da:
b9:04:52:af:a0:6a:f3:84:13:53:1b:27:f2:67:d9:
be:34:76:a7:eb:4e:f8:2d:0d:4d:a8:38:d4:78:ec:
97:eb:26:65:43:6e:f8:8d:85:a8:b7:8c:d8:99:bd:
89:61:b1:d0:6d:33:3e:b4:de:5a:bf:02:70:37:38:
fa:bf:03:8b:16:09:c9:86:6d:f6:de:d9:ee:7c:bf:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:27:C0:A2:01:C4:7E:3B:63:DE:E7:9C:C1:D4:1B:D7:57:DF:6B
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218797.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.18.0/24
5.199.29.0/24
5.199.51.0/24
5.199.63.0/24
Signature Algorithm: sha256WithRSAEncryption
71:9b:93:67:f1:ed:ca:cb:a5:cc:dc:9e:c6:9a:b7:b4:90:8e:
14:9b:c0:da:ff:e1:a8:3f:7f:66:07:bf:37:2e:ce:42:ed:4b:
fe:0f:08:dc:8c:ba:94:c2:6c:3e:23:d3:f5:b7:87:f7:15:23:
33:ce:1d:de:ea:04:d1:e7:b6:2d:09:ce:a1:a4:9a:57:7e:54:
77:56:27:ac:9b:82:05:f3:b0:7e:f6:21:36:64:d2:9a:b8:94:
8b:48:fc:e1:d9:c4:10:12:9e:2d:d4:c3:ef:70:09:d3:37:2d:
51:ad:e1:4e:21:b2:64:ce:d5:42:82:f7:a2:bd:5a:fb:ae:0d:
8d:1e:94:82:6d:31:f0:cb:3d:9c:58:5a:0b:bd:3c:89:2d:35:
04:19:53:07:3e:5e:36:57:e1:23:b0:f2:7a:b3:1d:13:b3:19:
cc:27:66:95:1c:43:43:96:e5:74:db:b4:3f:b4:af:37:ae:ee:
68:94:39:97:02:0d:6f:3d:b6:c6:44:f1:9f:9e:c8:82:bc:fc:
8e:5d:31:6a:6a:ce:69:9d:02:c8:32:99:a3:10:18:11:cc:a1:
f8:95:73:75:74:e9:6d:e2:f6:56:77:65:f2:56:0f:3f:11:f6:
d5:b1:74:a0:44:f5:0b:1f:54:72:69:a0:c9:12:36:d3:6c:68:
77:81:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:41 2026 by rpki-client