Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218862.roa
File: AS218862.roa (raw, json)
Hash identifier: PB3rQEiBGCuMGdVBM6u/M6MQs8V8SRoKbdGO4IlmGMA=
Subject key identifier: 22:15:11:C5:69:28:79:FE:8F:72:B8:F0:65:9C:A5:24:88:41:0C:C6
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 13CBE8198E22E8FDDB534EBC3EA51988BF04B761
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218862.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 218862
IP address blocks: 5.199.24.0/24 maxlen: 24
212.74.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cb:e8:19:8e:22:e8:fd:db:53:4e:bc:3e:a5:19:88:bf:04:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=221511C5692879FE8F72B8F0659CA52488410CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:4b:89:7d:98:93:95:75:69:75:e3:fa:d7:
36:45:2a:15:b7:9e:5f:c8:34:3a:f3:65:f7:38:18:
c4:8d:4b:21:dc:4e:13:13:f4:72:cb:fb:35:6d:2e:
62:5d:68:1b:3e:86:1d:57:74:f0:94:cc:af:84:1b:
c1:cc:26:62:06:3f:60:2d:cf:d5:7b:4e:3c:34:b8:
ec:3f:6a:0b:7b:d0:63:ff:9f:e8:aa:9e:4b:d4:aa:
77:91:67:95:8f:13:74:1a:db:87:6e:8f:df:b6:37:
9a:c1:5d:92:ec:cd:88:c6:0e:a1:04:df:e9:2d:54:
79:bc:cd:b6:73:60:01:1b:38:81:30:68:43:c6:87:
95:c9:12:b0:02:d1:b1:06:35:d2:81:49:46:55:31:
85:21:df:ff:53:c7:6f:73:b5:79:b3:3e:7a:c4:6a:
88:94:b1:14:fd:5b:44:3b:7a:79:49:dd:3e:08:02:
4b:90:1c:21:9a:b3:96:51:01:55:bc:de:34:ba:ab:
13:7d:bf:c9:11:6b:39:f5:48:20:48:2d:5d:58:12:
86:69:03:fb:99:8e:05:08:3b:ac:f1:5b:0e:3c:da:
3c:de:46:37:a1:d2:7c:11:d2:dd:eb:c0:e5:98:b5:
06:5c:30:b2:24:b5:0a:72:30:72:94:50:91:f2:8e:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:11:C5:69:28:79:FE:8F:72:B8:F0:65:9C:A5:24:88:41:0C:C6
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.24.0/24
212.74.40.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d0:48:b7:6b:9d:e2:5a:84:82:33:82:60:84:1e:7c:65:18:
fd:26:e2:1a:f8:2e:68:6d:53:60:8b:ac:4e:3d:1e:18:21:3f:
41:b8:b6:27:aa:6d:ac:94:a7:37:9b:2b:53:90:f3:7a:70:0f:
9e:b8:ef:35:fc:7e:ec:cd:80:19:54:b6:20:9f:45:35:4c:ab:
e6:8c:c5:44:6f:37:1f:41:a6:70:ef:2d:16:22:88:8d:0a:ae:
76:f7:48:aa:e7:5f:e7:a3:1b:f0:ea:ad:53:b1:af:02:0d:88:
fe:d0:7a:56:83:e4:1d:08:31:3f:68:8f:cd:5d:0d:08:f5:00:
b4:15:5d:d8:14:aa:ae:c0:43:f3:f5:54:dc:df:c0:da:0a:84:
fe:96:8e:9f:83:d7:3c:89:95:b8:ba:e0:04:91:aa:15:e4:4b:
96:71:a4:cf:f4:e7:d0:0b:e7:bb:83:ea:0c:e6:b7:38:17:fa:
e4:30:8a:1a:35:4f:7f:4f:c7:92:9c:6d:70:f6:26:f0:15:93:
71:92:96:44:e2:99:8e:59:6b:27:5c:35:b3:71:ec:2a:31:f3:
6a:64:21:76:42:d8:13:63:37:d6:0a:c8:95:84:91:b8:63:9c:
21:e8:92:e6:85:2f:f7:0a:d0:9d:f4:89:4d:33:05:f5:80:83:
0f:1a:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:34 2026 by rpki-client