Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218910.roa
File: AS218910.roa (raw, json)
Hash identifier: PQ8R/IT9CM4a8hyq1tF39f8QmgOkB9/Y02kqgBRjRhM=
Subject key identifier: 2C:C9:12:A0:2B:06:A2:66:F4:35:9D:13:3C:90:30:3A:B4:BB:FD:E4
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 177CC9A97F9CFD44A88B520B92AEE3220A46C33D
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218910.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 218910
IP address blocks: 5.199.32.0/24 maxlen: 24
5.199.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7c:c9:a9:7f:9c:fd:44:a8:8b:52:0b:92:ae:e3:22:0a:46:c3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=2CC912A02B06A266F4359D133C90303AB4BBFDE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:98:9e:1f:63:c9:96:49:00:74:34:58:6d:
d1:71:e8:19:cd:e2:93:30:28:99:b6:43:b2:34:ed:
fe:f5:0e:86:ed:18:48:1e:87:4f:e4:0c:17:bb:2b:
15:7f:cf:3f:d4:26:b1:aa:2e:15:ea:e5:da:fd:5d:
a7:69:fe:0d:3f:d0:eb:32:af:88:99:25:b5:d9:08:
4e:6c:ad:b6:f0:20:3e:5f:77:c4:f4:65:8c:eb:75:
11:5f:d2:7b:4a:73:2e:78:6a:45:7a:4e:3e:80:7d:
17:9f:46:86:0e:66:4c:a8:ee:73:32:0e:8b:96:37:
a4:f0:bb:47:f2:74:5f:2e:3e:eb:ce:48:4d:91:86:
a8:a8:7a:9a:c5:d2:82:30:c6:21:0a:38:a6:48:5f:
03:da:8f:29:eb:0a:be:6d:63:18:28:52:ba:a0:eb:
83:a3:56:de:9f:3d:5c:4f:31:b5:1c:53:fb:c8:2a:
fc:25:ec:58:7c:b8:9f:ad:8f:c3:7d:7e:d8:41:fd:
00:3b:5d:02:40:c5:31:9c:fb:67:e1:f6:c7:dd:4a:
6c:53:7a:1f:9a:4b:15:ec:b4:11:3e:09:75:e2:86:
0e:0e:9b:c5:48:ef:31:78:28:a6:0c:5b:ca:a9:40:
1f:f5:6e:14:d4:b7:76:e4:58:54:8d:3d:1d:a9:b9:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C9:12:A0:2B:06:A2:66:F4:35:9D:13:3C:90:30:3A:B4:BB:FD:E4
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.32.0/24
5.199.46.0/24
Signature Algorithm: sha256WithRSAEncryption
54:cc:a3:51:96:76:9a:75:40:91:2e:62:72:85:aa:80:b5:ad:
90:50:39:03:44:ef:ac:3a:1b:80:8f:e4:99:4b:7a:ea:fb:1a:
ad:4d:70:ff:31:e7:78:c4:40:48:a9:d4:82:d4:6b:1c:3f:4e:
2c:51:1c:25:48:6b:14:db:2d:36:24:e4:d5:5b:27:09:4e:06:
66:41:7c:a3:78:34:41:d1:9f:2c:95:a9:18:42:af:47:1b:ed:
81:bf:c9:87:e4:f1:50:1a:2b:d8:34:98:75:29:c6:49:3f:68:
f8:3c:20:a5:17:73:74:60:3a:cc:50:f5:52:a9:0c:be:73:50:
bb:24:74:23:83:61:ab:c4:97:73:13:95:a1:bb:f6:f1:e6:c5:
1c:be:74:0e:10:8a:32:0c:69:ad:f2:d9:77:94:01:43:43:ab:
e5:ce:46:cb:f4:07:d8:9d:00:6d:f5:52:5d:97:26:1d:e8:68:
33:d5:70:fb:d7:fe:e3:55:ec:da:32:e2:2b:e2:bd:25:ce:69:
15:9d:19:7b:3d:52:f1:93:60:7e:10:92:2b:2b:86:69:17:c1:
a4:06:f3:7d:c5:45:0e:27:b5:9a:22:56:3f:f5:19:0c:ae:47:
68:ab:6a:b5:65:ff:79:86:1d:e3:26:82:3f:cb:f8:e1:23:04:
99:8f:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:38 2026 by rpki-client