Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218955.roa
File: AS218955.roa (raw, json)
Hash identifier: spPy4v0l5QxXqEKMpQdmwgSSElhrtkJsBVIDhrHtXk4=
Subject key identifier: 45:B0:F0:F6:AC:BF:83:35:92:DD:5B:6F:AC:AF:5E:71:E3:B7:97:28
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 51D50E1954C3C3E527121DD05241902018DC45C6
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218955.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 218955
IP address blocks: 5.199.32.0/24 maxlen: 24
5.199.46.0/24 maxlen: 24
5.199.47.0/24 maxlen: 24
5.199.49.0/24 maxlen: 24
5.199.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d5:0e:19:54:c3:c3:e5:27:12:1d:d0:52:41:90:20:18:dc:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=45B0F0F6ACBF833592DD5B6FACAF5E71E3B79728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:75:02:52:37:39:a9:f0:a8:6f:9e:e9:d8:
0d:c4:be:36:83:ef:76:6f:85:a6:34:5d:49:50:91:
fc:55:28:3b:f2:ff:a1:e5:52:58:bd:8d:fe:3a:e8:
a3:cc:86:b8:e1:86:c9:6c:7c:af:24:d5:17:f8:e9:
10:ab:d5:37:c6:9e:eb:c3:ab:96:12:da:d5:1b:65:
ba:a3:93:9a:9e:18:f1:e1:61:e2:db:88:fb:35:89:
ec:8e:5d:86:03:ca:9b:99:ab:89:80:72:09:69:c7:
d7:71:86:24:71:28:fb:66:ae:0d:f7:72:70:e1:db:
cd:ec:0b:c5:11:97:68:f8:ff:3f:92:83:8a:c9:ad:
cb:bd:02:fb:69:a6:8b:25:de:9f:a0:e6:66:a0:62:
b5:fc:ec:9a:d4:86:8d:d3:9e:ff:5e:c6:aa:c8:38:
00:ff:ca:4c:31:11:63:7d:3e:33:9a:d0:a7:0b:d8:
54:82:56:f3:00:33:a5:5b:ec:ef:5e:9e:e9:d5:2c:
26:71:aa:c9:3c:45:df:49:07:f4:4a:8e:21:33:22:
41:1d:33:ef:b9:45:5a:e9:be:f7:31:ca:00:8f:b5:
37:b2:a7:8e:3f:9f:e5:df:74:6f:6a:0b:a8:9b:58:
ee:34:cc:61:81:cc:7b:10:cc:1d:2f:58:32:7d:73:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:F0:F6:AC:BF:83:35:92:DD:5B:6F:AC:AF:5E:71:E3:B7:97:28
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.32.0/24
5.199.46.0/23
5.199.49.0/24
5.199.63.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:7d:c4:c5:e2:38:9d:60:42:1b:ea:be:4e:35:11:2c:53:89:
3c:f2:40:06:b5:3b:a0:7e:fd:64:02:b8:b1:81:c2:7e:ac:4e:
d8:de:63:93:2a:09:fa:96:57:be:c4:dd:27:c0:d8:f1:ed:f6:
7b:f3:1c:ec:98:0c:b5:81:da:a3:34:33:68:98:8c:96:49:9b:
a3:d4:a7:1d:93:59:47:15:ec:92:0c:06:9c:7c:31:7b:6c:11:
b1:04:df:4b:df:2b:bd:1a:cc:64:16:d6:54:dd:0d:79:ca:cc:
5b:af:fb:79:b2:d0:8a:81:46:0a:31:67:64:b9:ff:9d:6e:d7:
aa:00:07:26:f4:ec:84:11:19:42:de:a6:ae:07:2c:46:c6:12:
5e:5b:28:bf:b3:e7:79:fc:f6:a6:85:1a:da:d7:b2:d0:26:a2:
22:05:79:a3:cd:47:8e:4d:9a:46:94:32:81:1d:98:bb:a2:d2:
5b:a0:04:97:93:af:44:5d:0a:13:bd:78:ce:8e:3a:8c:89:09:
5f:96:72:f5:5f:d3:ce:4b:d9:b1:e4:f4:a0:8b:4c:97:75:b4:
33:75:5e:b4:26:fc:f3:3b:bc:7c:bb:f7:0f:e8:30:fb:34:d2:
69:d0:3f:d4:88:82:ce:73:4f:25:94:25:33:23:ad:a4:c4:93:
9c:c2:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:31 2026 by rpki-client