Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218887.roa
File: AS218887.roa (raw, json)
Hash identifier: s1I7+gKb4jbyIqIWYuvoizgSufxMyB5yzflijaygsZg=
Subject key identifier: D1:B6:46:BB:C2:8A:A4:9F:18:40:D2:F5:6F:5A:4D:A3:6A:61:C8:18
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 01353F5E887A52F2963095F64F83B65FD7D8D739
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218887.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 218887
IP address blocks: 5.199.43.0/24 maxlen: 24
5.199.58.0/24 maxlen: 24
212.74.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:35:3f:5e:88:7a:52:f2:96:30:95:f6:4f:83:b6:5f:d7:d8:d7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=D1B646BBC28AA49F1840D2F56F5A4DA36A61C818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:f7:a5:5f:e1:73:7f:ee:0e:77:c9:ac:7f:
e0:23:02:ca:86:2f:9b:d8:b1:62:7e:b3:42:1a:70:
7e:86:4c:7f:91:65:ff:83:43:fa:47:d4:b2:2f:48:
18:92:1f:62:26:a8:f5:bc:75:60:99:8b:53:a0:05:
0e:15:85:ae:f2:bc:a8:8b:92:86:6f:94:f9:04:e2:
59:02:c0:39:b7:45:85:2c:81:e2:8e:d2:24:a9:f8:
f5:65:58:01:6c:91:39:2c:3d:a2:a3:0b:dc:f4:9f:
52:37:65:95:f8:c5:7b:6a:17:42:e9:d7:c2:b5:f3:
6b:f6:1e:b0:ff:43:5f:19:62:4d:24:1f:9c:e3:40:
f7:04:40:d9:68:7a:0e:f1:23:2d:69:23:64:ed:19:
b9:46:bc:d7:6b:3e:ac:6e:45:27:25:b3:16:e6:47:
fb:96:9c:56:7e:5d:b4:8c:b8:74:4c:de:c8:d4:b7:
a9:10:1b:b7:13:0d:2e:32:3c:f0:27:ae:54:7f:ec:
28:e7:de:c4:9d:61:76:9d:d5:a5:5f:13:b5:a3:29:
e9:6c:ac:c2:6f:da:db:dd:13:f0:c9:d8:7f:7e:fc:
e4:99:2a:30:d8:82:7d:f2:c5:d3:a8:9d:08:b9:cc:
59:76:a0:20:76:42:1f:c6:53:e9:0d:cb:f3:ad:3f:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B6:46:BB:C2:8A:A4:9F:18:40:D2:F5:6F:5A:4D:A3:6A:61:C8:18
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.43.0/24
5.199.58.0/24
212.74.56.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:13:89:60:73:12:01:07:d5:2b:07:06:8e:64:b5:74:f6:f5:
f4:eb:63:70:07:de:71:4b:e4:90:eb:7e:3a:08:73:0e:ae:a1:
e5:8e:a8:42:7c:8c:86:26:f0:b2:59:36:d5:17:fb:49:8a:f0:
cc:19:1f:a0:47:f8:ce:53:e5:1f:b5:a9:fc:8a:d5:bb:09:cb:
e1:3b:5f:67:58:ea:ad:51:ec:ac:dd:69:e4:ac:5c:0b:ab:46:
0a:9e:bd:fb:e0:b2:ef:10:22:a7:5b:49:70:73:16:a0:c7:6f:
51:a8:9f:88:ee:dd:b1:89:f8:95:a7:f7:aa:4a:02:64:f3:31:
41:e9:f5:6f:1c:1b:fb:2c:54:1d:54:52:de:e9:6c:a1:9f:fd:
75:f4:d7:e5:14:7d:76:44:40:39:c2:d8:45:4f:47:02:b8:84:
9b:b0:43:e4:39:6b:55:7c:e6:03:98:b8:bd:0c:fe:42:3c:4c:
12:22:ca:c4:7d:c2:09:da:cc:68:9c:80:33:67:2e:53:cc:e9:
73:dd:2f:19:56:6f:00:a6:97:b6:3c:1c:ac:ba:f4:72:09:78:
ca:ad:86:ed:fe:61:c9:a4:2d:fc:a4:dd:23:4a:fd:c2:82:0c:
f0:18:b3:6c:df:4d:b8:ba:30:82:d8:94:7b:3e:ba:3e:53:74:
9a:e1:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:42:31 2026 by rpki-client