Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218869.roa
File: AS218869.roa (raw, json)
Hash identifier: C9Z2IoiFUL4sJZgXJJWiDLAPLwno4dZ3bn5Q2a3Qu94=
Subject key identifier: 45:B5:77:76:35:34:EA:99:7A:F4:A1:ED:FA:A0:1B:CE:7C:B5:6D:94
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5A3067F71A0C4EA53CD5B288288A48142D54517A
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218869.roa
Signing time: Mon 07 Sep 2026 05:30:53 +0000
ROA not before: Mon 07 Sep 2026 05:25:53 +0000
ROA not after: Mon 06 Sep 2027 05:30:53 +0000
asID: 218869
IP address blocks: 46.236.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:30:67:f7:1a:0c:4e:a5:3c:d5:b2:88:28:8a:48:14:2d:54:51:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 7 05:25:53 2026 GMT
Not After : Sep 6 05:30:53 2027 GMT
Subject: CN=45B577763534EA997AF4A1EDFAA01BCE7CB56D94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:77:1e:5b:85:40:e4:a1:1f:d7:31:36:c4:
b1:e8:dd:7c:77:75:7d:6c:cb:1a:a8:b0:52:ec:39:
f7:28:65:55:9b:c0:2b:56:59:ec:7b:38:75:c6:31:
f5:88:d1:cc:a0:17:e1:f6:31:b2:54:ce:a9:db:ce:
19:b5:6a:10:b1:b8:fe:9d:9b:52:e5:ac:d8:7e:48:
bb:4e:4f:89:88:ee:19:e6:20:07:ab:2e:11:2e:b2:
3b:28:85:5d:33:13:92:b9:23:4f:da:7d:29:44:fa:
82:74:dc:56:81:1a:31:28:ad:b5:65:b9:58:e8:39:
fd:01:fa:a6:b8:de:8c:bf:25:41:58:9e:e3:f4:e5:
74:fd:fc:b3:2d:e2:82:7e:cc:e6:78:6e:94:ae:bc:
07:0a:d2:5d:41:18:02:bd:7e:53:63:ac:2d:18:49:
ff:d5:c9:c7:b3:b6:0b:81:5b:3f:9b:c3:1a:cd:f4:
68:db:b1:0c:7c:ad:da:50:2f:4c:29:35:88:f0:c4:
0b:68:4b:b7:fc:0b:13:10:1b:31:5e:f9:d0:1f:b1:
7f:b2:8d:5c:93:99:4e:ab:64:48:e1:09:cb:a3:6c:
da:07:72:91:98:6b:d6:dd:f5:a3:d7:ba:62:6c:77:
8d:a4:06:05:c3:06:35:81:41:95:1e:7c:3c:96:25:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B5:77:76:35:34:EA:99:7A:F4:A1:ED:FA:A0:1B:CE:7C:B5:6D:94
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218869.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.193.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7f:00:9f:e9:71:d5:97:17:2d:5a:54:95:5f:ac:21:56:8b:
02:29:8c:c9:e5:e7:2e:16:93:a0:e7:c9:91:c4:73:4b:89:7b:
09:92:7d:76:9f:c7:25:76:24:6d:c8:93:fd:b3:f1:f8:58:c3:
92:04:bf:4a:26:67:69:04:f0:dc:53:83:77:1b:da:f8:33:b3:
3f:91:f2:ee:43:32:64:8a:7c:18:00:ce:31:6a:ed:02:47:e9:
33:d0:00:2b:54:fb:2f:5c:0f:df:21:1c:11:b4:7a:dc:11:b1:
c7:52:5a:01:32:58:e4:db:5f:3f:2f:c1:02:36:2b:b9:c9:2b:
d8:f2:55:bb:d9:49:c9:49:49:c0:42:5a:82:3a:55:4e:9f:98:
36:6b:1c:0e:df:39:f6:b3:57:70:b3:dc:82:b1:bc:e2:e6:51:
44:74:7f:9d:0d:ba:95:f3:67:54:44:0b:af:ec:d8:8d:fd:81:
d1:1d:54:2e:43:5e:27:46:34:a5:c6:71:5e:69:f3:5f:ac:41:
8e:39:31:df:cb:bd:3e:f2:aa:7d:00:28:29:6d:68:20:b8:d5:
2b:e5:1d:1c:ae:84:d1:b9:3c:48:52:cf:8b:6b:ba:15:77:f5:
00:51:11:7a:6a:04:e1:6b:85:2b:82:b0:43:c5:16:b5:8e:65:
90:23:19:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:45 2026 by rpki-client