Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: ESdN38tYsa9Z9L7+V5khw1D1Opo5LJk2YBl0TSNfmEw=
Subject key identifier: 48:2B:AB:57:84:2F:4F:71:EA:52:9F:C5:AC:63:FB:30:D0:D2:1F:FA
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 02E6DAB3B50053427361B9901BF647D153A116A8
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218965.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 218965
IP address blocks: 5.199.22.0/24 maxlen: 24
212.74.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e6:da:b3:b5:00:53:42:73:61:b9:90:1b:f6:47:d1:53:a1:16:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=482BAB57842F4F71EA529FC5AC63FB30D0D21FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:3b:9c:68:cc:9f:99:0c:6a:93:e4:e4:ed:
ba:81:4e:f2:4a:8c:86:11:2a:08:0f:bf:fd:99:58:
7d:91:d5:ec:21:9f:13:b1:03:b3:3c:0b:17:da:f5:
1c:82:3e:92:b0:d1:1f:15:b9:33:ce:61:e4:0b:16:
3a:19:23:b2:64:ce:da:cd:00:b4:1b:db:f6:8d:20:
41:17:e3:f5:51:01:3e:f1:7f:cd:a0:f7:47:9a:62:
da:26:d5:fa:5a:6d:0a:cf:ae:5d:26:52:b7:1c:a4:
bc:72:67:70:dc:41:e3:b7:31:7a:40:c9:af:3d:12:
86:23:a0:23:4d:c9:d2:cb:51:c8:6a:1c:0f:b6:af:
1e:ea:6d:1a:4f:ae:8a:8b:81:ea:3a:6c:2e:bc:69:
84:d3:b4:4c:fd:82:76:62:e7:c2:3e:63:ff:92:06:
21:39:cc:81:81:d5:9e:e6:07:b2:c4:e9:73:cb:6e:
1b:9f:9e:78:8e:bc:05:63:06:4d:5e:80:9a:22:0c:
e7:18:07:ef:56:e0:7f:87:8b:e8:d5:60:ea:9e:50:
d9:ab:ce:74:0c:b4:9a:38:02:b4:d0:4d:08:25:25:
9f:85:9b:5a:df:be:96:08:68:e7:2c:35:bf:70:d7:
c0:33:d6:38:6f:30:2b:e7:1a:f1:fb:93:c1:3a:62:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2B:AB:57:84:2F:4F:71:EA:52:9F:C5:AC:63:FB:30:D0:D2:1F:FA
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.22.0/24
212.74.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4b:50:22:1d:94:85:50:31:85:70:bd:e8:99:1a:3b:86:91:
f7:3e:7c:e5:86:a3:62:9a:22:23:56:c2:e9:f4:2b:ad:f3:4c:
03:a9:f3:ba:39:e9:6c:f5:72:60:6c:52:42:28:0d:8b:39:1e:
11:27:99:e5:e3:4b:cc:c9:3e:3f:18:27:e9:d1:f9:49:c7:29:
10:ef:2d:9a:25:b4:85:93:ac:d8:bf:52:5a:8f:5a:68:e8:27:
c5:ee:1e:65:1d:21:31:49:f5:02:4c:0a:af:a3:c2:06:c9:2f:
29:d5:a3:fe:97:27:2c:88:86:0d:2c:ba:3d:f6:0e:cd:f8:e4:
0d:75:6e:64:15:83:6a:4d:4d:a8:88:9f:04:45:14:b3:60:80:
83:88:85:de:8e:11:af:9d:05:bc:50:43:71:3f:0d:77:cc:e8:
d4:a6:88:2b:24:f6:6d:4f:a1:32:f8:5b:0f:68:85:c4:b6:df:
cc:f0:1a:1a:1f:4f:eb:39:77:88:a2:49:e3:22:f8:9e:67:3c:
f7:66:de:82:5c:59:d0:0b:73:de:46:39:88:77:2c:a2:a4:19:
e8:00:8c:7b:10:65:62:a4:fd:fc:78:d4:1a:22:11:8e:ce:87:
66:bb:9f:f2:a7:16:a3:a7:91:b1:92:50:9e:f0:13:85:76:e7:
7d:1b:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:26 2026 by rpki-client