Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218918.roa
File: AS218918.roa (raw, json)
Hash identifier: +YByegWxuEzRQyEqeiJ/vIe6UxYNZD3HraV5lJbCxIc=
Subject key identifier: 32:94:37:CA:94:65:A0:4F:11:6F:70:57:B9:A8:AF:CD:E5:FD:CC:7B
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 7AB06DCB34205B9FD0F69B66ADEA0630B88FC1CE
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218918.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 218918
IP address blocks: 212.74.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b0:6d:cb:34:20:5b:9f:d0:f6:9b:66:ad:ea:06:30:b8:8f:c1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=329437CA9465A04F116F7057B9A8AFCDE5FDCC7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:81:71:dd:ef:46:f8:b2:80:3a:14:4d:1b:db:
85:6e:0c:55:6b:57:fc:bd:bf:a3:2d:40:b5:2d:22:
59:3c:dd:a7:88:4a:d1:f1:6f:cb:8c:19:cc:8c:cc:
13:19:f7:75:45:1c:c5:e3:e4:57:1e:7d:b6:20:02:
45:ab:56:80:7c:b6:ef:fd:53:d9:b7:5e:b4:58:be:
39:63:79:0a:3e:85:ab:c3:d8:fa:5a:f0:7c:24:5b:
b7:cd:d4:9f:e6:27:0c:40:a6:8a:2c:84:53:63:fc:
b4:4e:8f:d6:13:60:0c:22:c9:af:3b:65:6c:18:2c:
3a:83:80:78:66:eb:e0:12:7c:4d:36:14:ba:0d:65:
95:c8:2f:6d:3f:96:34:21:69:fc:a6:8d:54:94:62:
00:ec:7b:f4:ee:36:d8:bf:ec:3b:52:8a:87:b5:16:
ea:43:c5:21:0a:ac:74:65:fa:54:78:78:23:1d:7a:
84:c6:e6:b0:e2:b1:a9:68:22:92:3f:7d:62:5d:53:
38:45:14:dd:ec:8b:f9:43:15:a0:d3:8f:42:e8:b3:
28:0e:52:ee:75:f7:7a:0f:bc:fd:d8:c3:43:78:78:
41:e0:be:a8:3a:f9:7b:05:85:f5:9f:65:68:58:53:
b5:81:2a:3a:a9:5c:5a:e0:ca:92:e9:82:ce:f5:86:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:94:37:CA:94:65:A0:4F:11:6F:70:57:B9:A8:AF:CD:E5:FD:CC:7B
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218918.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:68:33:cb:cb:38:af:97:eb:09:6e:a1:9c:8d:ce:a9:e7:b0:
9c:55:be:bd:2a:58:f9:0a:f2:f2:f3:49:c4:8d:de:7d:6f:16:
43:3f:66:12:5e:4f:91:70:e3:f0:94:b4:f8:73:1c:66:f2:0b:
2a:39:d5:d3:e1:73:88:b6:af:dd:e4:eb:df:70:19:2e:b0:ba:
13:ec:70:f1:e1:73:ea:2d:db:b5:12:29:b7:3c:1f:64:b1:2d:
d6:44:2d:ac:71:03:14:08:b9:df:37:b4:fe:c6:c5:68:8c:7b:
1b:2c:64:49:f9:c6:6e:ee:b1:81:89:88:17:9a:e4:6f:6c:94:
1e:ca:5e:45:59:47:1d:9c:72:8c:c8:0e:d3:da:15:b8:97:44:
7e:ff:6b:e1:36:2d:26:a3:18:cb:9f:51:51:3b:60:be:5f:1d:
28:ec:f3:64:f4:85:59:9f:8c:54:35:43:c0:cb:86:8c:28:6a:
23:fe:78:0e:a2:75:ef:71:f7:c2:e4:18:e3:89:27:b8:36:a8:
9a:b5:05:e7:83:6d:6b:57:10:35:1e:44:83:07:82:92:a2:73:
4a:7b:c6:f1:e3:c1:e9:0b:b1:d7:fd:48:76:31:63:fb:53:b1:
61:fe:49:0a:35:0d:03:1c:84:78:e5:c9:18:4b:ce:a5:40:82:
45:a5:c7:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUerBtyzQgW5/Q9ptmreoGMLiPwc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA5MTYwNzIwMjBaFw0yNzA5MTUwNzI1MjBaMDMxMTAvBgNV
BAMTKDMyOTQzN0NBOTQ2NUEwNEYxMTZGNzA1N0I5QThBRkNERTVGRENDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5gXHd70b4soA6FE0b24VuDFVr
V/y9v6MtQLUtIlk83aeIStHxb8uMGcyMzBMZ93VFHMXj5FcefbYgAkWrVoB8tu/9
U9m3XrRYvjljeQo+havD2Ppa8HwkW7fN1J/mJwxApooshFNj/LROj9YTYAwiya87
ZWwYLDqDgHhm6+ASfE02FLoNZZXIL20/ljQhafymjVSUYgDse/TuNti/7DtSioe1
FupDxSEKrHRl+lR4eCMdeoTG5rDisaloIpI/fWJdUzhFFN3si/lDFaDTj0LosygO
Uu5193oPvP3Yw0N4eEHgvqg6+XsFhfWfZWhYU7WBKjqpXFrgypLpgs71hvnFAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUMpQ3ypRloE8Rb3BXuaivzeX9zHswHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTMjE4OTE4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Eox
MA0GCSqGSIb3DQEBCwUAA4IBAQCbaDPLyzivl+sJbqGcjc6p57CcVb69Klj5CvLy
80nEjd59bxZDP2YSXk+RcOPwlLT4cxxm8gsqOdXT4XOItq/d5OvfcBkusLoT7HDx
4XPqLdu1Eim3PB9ksS3WRC2scQMUCLnfN7T+xsVojHsbLGRJ+cZu7rGBiYgXmuRv
bJQeyl5FWUcdnHKMyA7T2hW4l0R+/2vhNi0moxjLn1FRO2C+Xx0o7PNk9IVZn4xU
NUPAy4aMKGoj/ngOonXvcffC5BjjiSe4NqiatQXng21rVxA1HkSDB4KSonNKe8bx
48HpC7HX/Uh2MWP7U7Fh/kkKNQ0DHIR45ckYS86lQIJFpccv
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:43 2026 by rpki-client