Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: oM85JhQOc/GH6kKwb9H9Qlgo9cO8uefVneIBkJyVwYE=
Subject key identifier: 14:6F:AD:F3:B5:35:30:F4:66:D2:E3:BE:FC:98:CB:2A:9A:47:09:FD
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7E8E759BC74FA364D69D80CB7CD4EEE8CBFD14E2
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218965.roa
Signing time: Mon 07 Sep 2026 09:32:05 +0000
ROA not before: Mon 07 Sep 2026 09:27:05 +0000
ROA not after: Mon 06 Sep 2027 09:32:05 +0000
asID: 218965
IP address blocks: 45.89.254.0/24 maxlen: 24
45.137.116.0/24 maxlen: 24
193.107.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8e:75:9b:c7:4f:a3:64:d6:9d:80:cb:7c:d4:ee:e8:cb:fd:14:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 7 09:27:05 2026 GMT
Not After : Sep 6 09:32:05 2027 GMT
Subject: CN=146FADF3B53530F466D2E3BEFC98CB2A9A4709FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:65:ec:a0:fe:a9:25:b7:0d:eb:6c:7b:20:
aa:b3:36:ae:06:6c:94:a5:58:22:d6:f8:f3:e1:fe:
89:16:6e:88:b3:9b:ae:a7:f4:8c:37:fd:b3:87:85:
ee:7e:fc:de:de:06:4b:f6:1d:d1:93:1d:a6:21:73:
e0:01:44:cd:73:4f:12:f7:32:99:b6:08:d6:a6:cc:
06:0c:a8:e0:64:cd:52:69:72:e5:ab:4c:ce:95:dc:
1e:3a:f8:ad:81:3d:63:7a:26:dd:51:f9:c7:d0:c3:
30:55:72:44:a9:b4:53:d1:97:b7:ee:f7:bd:b8:70:
a4:f4:61:78:15:c5:b7:e5:72:dd:a8:2e:97:2a:2c:
d7:04:74:73:bb:1d:97:2e:9a:0b:04:2f:0c:27:ff:
a1:cf:7f:81:a9:7f:40:3c:0e:3f:36:a6:84:08:de:
e8:b6:b0:18:ee:d2:a1:c0:14:ad:69:e5:aa:b5:6d:
f6:c5:27:95:0e:a0:97:2e:68:ea:a1:8d:70:3a:01:
5f:b9:1d:79:7d:5e:8d:de:db:a5:51:dd:3e:3d:c0:
15:cd:a5:dc:e3:1d:28:17:5c:93:46:23:7b:46:40:
c8:6a:60:b8:74:9d:d4:44:19:cf:30:7e:91:e3:32:
72:ee:61:c6:2d:08:e1:a1:3b:2b:c9:47:79:c9:17:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6F:AD:F3:B5:35:30:F4:66:D2:E3:BE:FC:98:CB:2A:9A:47:09:FD
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.254.0/24
45.137.116.0/24
193.107.211.0/24
Signature Algorithm: sha256WithRSAEncryption
71:93:54:05:31:a2:17:8b:7a:1f:37:0e:46:02:f5:48:ab:dc:
91:c4:62:84:02:41:f1:bc:46:66:54:5f:d4:b6:d5:0d:82:07:
d1:5a:1a:8b:81:f2:68:15:36:76:bc:54:14:4e:67:32:c0:d0:
5d:26:ca:09:d1:4a:94:31:f8:ff:19:81:ca:65:63:1e:c4:0b:
9a:a6:52:05:3d:f4:73:d1:b4:c1:78:47:0b:07:12:52:e4:86:
8f:19:c8:90:2f:8f:64:62:6a:32:8e:94:d4:09:f4:39:16:f1:
98:f9:32:e2:e8:04:95:67:53:bd:fa:fd:ba:ec:62:69:f2:34:
38:94:09:41:6b:58:f3:92:74:f0:e7:db:21:a3:c9:47:80:21:
64:0b:b8:86:8c:e1:5a:1c:ca:e0:00:85:ed:2a:ce:b5:3f:66:
b6:a1:26:be:05:10:ae:e9:d7:79:fc:5e:81:5a:b5:38:17:f4:
99:53:a2:9e:b1:8c:da:5f:49:32:2e:b4:aa:25:f0:cd:27:42:
79:b4:3f:74:08:d6:c1:0a:ae:78:0c:16:fa:55:7c:60:fd:80:
e4:08:52:68:b6:88:df:f3:e9:4a:04:2f:73:27:b2:82:bd:8f:
31:0a:5a:d0:c0:a8:ea:ec:23:d0:16:44:74:4c:2c:8b:72:a2:
61:7f:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:51 2026 by rpki-client