Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218829.roa
File: AS218829.roa (raw, json)
Hash identifier: oldSsw9S5yOdXTZ5eHt9eP1HCHJOagXqKGwSjOeNMKc=
Subject key identifier: 29:84:10:6E:95:07:D2:99:0E:50:B2:B9:18:03:8B:FD:2A:59:1C:F6
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 7ACEBA8A2F8B348E0E50681542566509116C9DEC
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218829.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 218829
IP address blocks: 5.199.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ce:ba:8a:2f:8b:34:8e:0e:50:68:15:42:56:65:09:11:6c:9d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=2984106E9507D2990E50B2B918038BFD2A591CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:36:81:2b:2e:af:a7:b6:fb:98:1c:7d:50:
ab:a8:35:7b:d7:b7:77:88:a0:2e:98:20:56:eb:06:
18:64:a4:57:20:63:df:36:3f:2a:bb:54:07:0c:98:
ec:dc:af:b3:ac:f5:b5:3c:51:2f:99:e8:07:3d:eb:
b9:78:4c:a2:5a:d3:4e:70:5d:fd:a1:3e:14:9f:74:
c9:1c:67:77:18:55:52:65:9b:0b:5e:d8:98:0f:9c:
76:e3:ce:ce:87:bf:98:b2:6a:7d:25:70:15:fa:ef:
ab:b2:d4:1e:cd:35:39:71:6e:70:67:20:c2:f7:35:
b9:c2:38:63:57:f6:e9:da:7f:5e:b0:4b:6e:f4:40:
86:98:78:28:bf:f5:f4:0d:94:28:e4:46:1e:4b:64:
b0:90:4c:fa:c2:51:ff:46:21:b6:94:84:9b:aa:28:
6e:ff:2a:70:5e:1e:b0:77:8c:12:95:34:4b:90:8b:
2c:fb:c1:e6:e4:3b:3e:1a:2f:a3:d3:30:36:24:83:
7e:5a:d3:a3:3c:fc:36:f7:88:e1:3c:8a:5f:dc:e2:
3c:94:02:df:81:2b:32:2f:4d:d7:a9:07:3a:b7:2e:
98:e2:c1:86:cd:7d:3a:bd:81:a0:44:66:7f:77:d2:
76:38:3e:17:ae:33:da:ea:9a:ab:63:33:e6:42:cf:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:84:10:6E:95:07:D2:99:0E:50:B2:B9:18:03:8B:FD:2A:59:1C:F6
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:9a:42:58:f0:18:f0:ef:07:d5:0f:64:d1:8b:05:99:2c:d3:
ee:65:51:27:c1:6c:e7:c1:1a:de:f3:88:cd:30:63:96:5e:ab:
a6:73:d2:7c:dd:81:5d:a8:67:62:62:ab:36:5e:b5:51:35:fd:
1a:fa:2c:b1:e8:a3:72:08:5a:91:99:a5:37:7a:95:7b:5d:5e:
d6:57:de:17:c5:45:84:bb:3e:88:dc:95:d5:90:1b:b8:53:09:
14:f9:1e:45:44:4b:ec:7f:9b:58:e0:8f:4a:20:0a:47:4e:99:
3b:2b:38:37:94:5a:2d:13:da:90:16:86:db:58:f6:ae:2e:ab:
2d:dc:dd:fb:5f:a0:38:70:16:b3:13:66:4f:72:f9:44:a4:2d:
95:de:a8:30:c9:e0:e4:10:8e:db:f5:fb:cb:9d:7f:fc:ef:38:
5d:7a:35:2c:ba:9d:ef:00:f5:73:df:e4:d6:17:91:04:44:d3:
d8:f5:27:1d:8b:d7:e5:63:08:37:85:e7:92:c5:38:cf:8b:06:
17:76:e7:10:8e:62:c8:1e:22:e0:58:30:67:f4:8e:f4:cb:06:
ea:17:e6:86:b5:45:ed:b2:75:f8:df:64:53:97:30:f7:d8:5d:
b6:20:ae:2c:68:e9:83:5c:17:5e:19:57:c6:c0:96:17:1e:c5:
29:03:0f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:39 2026 by rpki-client