Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218799.roa
File: AS218799.roa (raw, json)
Hash identifier: lzk5NJgZet/TDfCCtpQI2VWWlq/i4O4H60JvCxPqn+c=
Subject key identifier: 9C:B1:79:67:E8:95:5A:34:13:6A:56:B6:9B:71:0A:8B:06:26:4D:1C
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 43B9C6714E1E63D01C3B63DC3AC91FF9FBBFBF78
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218799.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 218799
IP address blocks: 5.199.4.0/24 maxlen: 24
212.74.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b9:c6:71:4e:1e:63:d0:1c:3b:63:dc:3a:c9:1f:f9:fb:bf:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=9CB17967E8955A34136A56B69B710A8B06264D1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:76:f2:ec:42:42:07:a7:e1:40:12:ee:4c:
31:87:8b:08:a4:30:4b:82:de:d4:cc:be:80:79:26:
7f:5d:79:be:d8:b3:58:20:3f:3c:2f:80:df:42:d2:
f4:c4:06:13:93:45:10:31:36:07:3d:43:50:2e:b4:
2f:72:5c:12:1a:78:39:85:0b:e2:f9:f5:d5:21:b5:
65:91:e3:61:53:33:ee:23:62:8a:57:6e:fe:13:95:
1f:84:f4:d0:ac:d2:13:a4:f7:e8:2d:fb:58:a9:9d:
c4:dd:ac:4d:8c:22:97:78:12:c3:36:c1:b0:a7:80:
0f:ee:14:a6:e8:ea:01:e5:bd:53:6b:6f:99:96:ba:
b2:e1:ee:b7:d3:fe:5d:34:92:c9:da:c5:4a:65:e2:
f2:f6:61:33:5b:ba:35:c6:bd:a7:4b:f5:36:19:20:
26:b2:53:fb:fc:e1:86:89:a6:0c:39:af:18:c1:5f:
5a:07:11:d3:95:8c:f8:55:a3:03:fc:6d:6f:d0:9b:
41:28:b8:25:79:4f:c3:86:59:63:f7:22:b5:88:1e:
99:19:55:c0:c1:71:5b:43:10:6f:8b:6d:1a:73:2b:
f7:a5:70:fa:03:3d:07:20:3d:93:d9:d3:d1:66:22:
19:5e:42:48:2c:66:9e:03:13:2b:7b:75:e2:df:1f:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B1:79:67:E8:95:5A:34:13:6A:56:B6:9B:71:0A:8B:06:26:4D:1C
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.4.0/24
212.74.51.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:34:fb:5d:d0:5e:f3:05:e5:29:48:5c:b2:db:9c:96:e8:d8:
42:19:f4:d9:3f:4c:7b:83:4c:36:c4:ec:ac:9f:84:0d:37:45:
89:1a:3a:29:c9:84:f1:9a:5e:c5:8f:73:29:a3:99:c9:3c:1d:
fe:3e:c5:5a:8e:c3:bc:b3:47:ae:87:a2:47:5a:16:16:53:f0:
66:8c:ed:57:c5:2b:c6:04:65:48:42:e3:9d:b3:a6:bf:b3:a8:
b8:db:5c:4a:5a:2e:07:05:3a:28:0d:52:98:e2:35:24:5c:79:
62:de:15:8e:9a:d6:b6:42:b3:03:eb:13:8f:8a:f0:73:41:e8:
77:5f:98:b6:3d:3c:21:27:ca:97:ad:f6:6e:93:93:5b:34:ed:
ce:91:74:e4:1d:b2:34:a3:10:20:3e:2f:ef:6e:79:3a:9d:c5:
dd:16:36:4a:8f:13:71:de:ea:97:69:79:60:9e:ce:6c:4f:38:
ac:bc:99:ae:04:61:16:5a:82:f2:a2:b5:de:79:dd:1e:52:46:
07:03:12:12:35:5e:2f:bb:8e:0e:6f:6b:7a:1e:9c:ed:c7:51:
1b:11:9c:13:c4:95:e5:d0:2d:73:77:f7:f2:ff:6f:41:a3:a7:
5b:d7:21:bb:34:47:00:84:5f:df:db:3d:4e:c4:c1:5a:b7:da:
1e:b8:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:40 2026 by rpki-client