Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218829.roa
File: AS218829.roa (raw, json)
Hash identifier: DA5bDIrI5P5nir7BgRlB0FQ4EDIu9Hkw6Iy+dec1CsI=
Subject key identifier: 05:D4:3C:C2:88:44:C2:50:0F:57:B3:1E:29:B9:4E:DD:B0:7C:26:8E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 30007C100051C0A03F75465B4506D58BC9F0FE79
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218829.roa
Signing time: Mon 07 Sep 2026 05:57:49 +0000
ROA not before: Mon 07 Sep 2026 05:52:49 +0000
ROA not after: Mon 06 Sep 2027 05:57:49 +0000
asID: 218829
IP address blocks: 193.107.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:00:7c:10:00:51:c0:a0:3f:75:46:5b:45:06:d5:8b:c9:f0:fe:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 7 05:52:49 2026 GMT
Not After : Sep 6 05:57:49 2027 GMT
Subject: CN=05D43CC28844C2500F57B31E29B94EDDB07C268E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:2d:82:9e:2b:48:f2:6a:c1:d2:38:c1:46:
d5:07:e5:51:cf:e3:ae:47:27:5e:8a:a6:c9:4d:8f:
2d:2e:84:32:20:24:b0:d4:7d:ef:ab:37:ae:d5:0b:
76:57:1c:d7:bb:6f:40:c6:14:a8:f1:8f:d8:18:f4:
52:2a:02:5a:be:fb:b8:55:8a:d2:f8:4a:0c:d2:1c:
09:f3:cd:b2:7e:bf:9a:f4:33:72:ef:25:b9:a7:ec:
3c:ed:fd:15:9c:6e:5a:07:96:6b:33:39:3f:ef:0d:
d3:58:ca:ec:04:68:02:06:83:8f:95:ec:49:6a:01:
b2:06:fe:b3:af:4f:c3:bd:0f:93:93:97:76:06:52:
7e:29:b5:10:6a:68:2e:d2:48:28:27:8b:d8:df:ed:
ed:d6:68:71:91:8c:61:1c:95:2b:a0:04:97:15:38:
e0:bd:ce:24:5a:1e:76:97:28:1b:d9:77:41:da:d0:
ef:ba:7a:9a:73:cf:5c:b4:41:bf:83:1c:c3:12:62:
dd:d3:a2:3d:4f:de:09:3f:ce:92:d3:33:f9:1a:07:
23:7b:f3:c8:e0:cf:79:54:16:02:ab:51:a6:d7:f9:
5b:b3:26:65:8b:0f:5c:76:90:54:a8:99:c7:b2:13:
b3:1d:f0:0b:fa:0c:62:98:31:f6:54:65:f0:4e:78:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:3C:C2:88:44:C2:50:0F:57:B3:1E:29:B9:4E:DD:B0:7C:26:8E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.208.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c4:f5:57:0b:dc:a0:12:50:af:2f:cb:33:2c:a6:19:38:33:
77:9c:10:f3:09:8c:bb:32:29:a6:54:8d:3f:f4:e9:b0:55:91:
6e:62:09:1b:c1:38:e9:6d:9d:a8:09:0f:b0:c4:34:a5:5d:65:
af:fd:48:14:97:a8:c9:9d:d2:fa:85:0d:e8:09:7a:0a:6a:e2:
7c:76:cb:71:2c:76:0c:e8:c3:de:c0:90:dc:5f:0b:1b:65:dc:
c3:83:f2:db:b6:7e:a0:80:87:14:de:8c:5c:f5:3a:fa:36:7f:
12:d9:de:71:f1:ae:00:ad:75:3a:86:8a:5d:df:eb:8b:59:7f:
8e:25:50:73:09:c6:b9:05:ec:12:4a:c6:3e:59:0f:79:c8:4f:
83:1f:bd:9f:93:0a:9a:77:a6:06:92:5a:92:2b:74:57:e3:41:
50:a5:04:0f:75:14:69:6a:89:15:0d:23:3b:07:5e:3a:1d:d1:
8b:84:cf:e4:12:1a:93:38:b8:14:01:74:ee:23:b4:3d:3d:cc:
42:95:a1:44:08:a3:7e:52:a0:e1:c1:7a:12:03:1b:2c:8d:b2:
0a:68:cf:bb:16:98:81:33:d4:30:d9:f4:9c:d9:3b:ab:97:2a:
5c:e6:e1:22:7d:04:94:1a:4b:5e:8a:ec:21:94:49:45:20:c2:
c3:a2:0b:1a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMAB8EABRwKA/dUZbRQbVi8nw/nkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MDcwNTUyNDlaFw0yNzA5MDYwNTU3NDlaMDMxMTAvBgNV
BAMTKDA1RDQzQ0MyODg0NEMyNTAwRjU3QjMxRTI5Qjk0RUREQjA3QzI2OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzi2CnitI8mrB0jjBRtUH5VHP
465HJ16KpslNjy0uhDIgJLDUfe+rN67VC3ZXHNe7b0DGFKjxj9gY9FIqAlq++7hV
itL4SgzSHAnzzbJ+v5r0M3LvJbmn7Dzt/RWcbloHlmszOT/vDdNYyuwEaAIGg4+V
7ElqAbIG/rOvT8O9D5OTl3YGUn4ptRBqaC7SSCgni9jf7e3WaHGRjGEclSugBJcV
OOC9ziRaHnaXKBvZd0Ha0O+6eppzz1y0Qb+DHMMSYt3Toj1P3gk/zpLTM/kaByN7
88jgz3lUFgKrUabX+VuzJmWLD1x2kFSomceyE7Md8Av6DGKYMfZUZfBOeFrJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUBdQ8wohEwlAPV7MeKblO3bB8Jo4wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE4ODI5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWvQ
MA0GCSqGSIb3DQEBCwUAA4IBAQABxPVXC9ygElCvL8szLKYZODN3nBDzCYy7Mimm
VI0/9OmwVZFuYgkbwTjpbZ2oCQ+wxDSlXWWv/UgUl6jJndL6hQ3oCXoKauJ8dstx
LHYM6MPewJDcXwsbZdzDg/Lbtn6ggIcU3oxc9Tr6Nn8S2d5x8a4ArXU6hopd3+uL
WX+OJVBzCca5BewSSsY+WQ95yE+DH72fkwqad6YGklqSK3RX40FQpQQPdRRpaokV
DSM7B146HdGLhM/kEhqTOLgUAXTuI7Q9PcxClaFECKN+UqDhwXoSAxssjbIKaM+7
FpiBM9Qw2fSc2Turlypc5uEifQSUGkteiuwhlElFIMLDogsa
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:55 2026 by rpki-client