Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216245.roa
File: AS216245.roa (raw, json)
Hash identifier: l7O8IfeikEIiyQ3G6/1Kew9eXr3zO5kwAsNWD1B0XaU=
Subject key identifier: A6:23:20:F0:3E:7E:9F:4B:2A:D0:F8:E4:AF:53:98:B7:4F:AA:CA:69
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 36409CA41A5E4647FD3B4E727E8FE8503968D696
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216245.roa
Signing time: Thu 09 Apr 2026 10:48:21 +0000
ROA not before: Thu 09 Apr 2026 10:43:21 +0000
ROA not after: Thu 08 Apr 2027 10:48:21 +0000
asID: 216245
IP address blocks: 82.40.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:40:9c:a4:1a:5e:46:47:fd:3b:4e:72:7e:8f:e8:50:39:68:d6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 9 10:43:21 2026 GMT
Not After : Apr 8 10:48:21 2027 GMT
Subject: CN=A62320F03E7E9F4B2AD0F8E4AF5398B74FAACA69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:d6:7a:96:db:d2:27:13:8b:ec:c8:5e:dd:
bc:7b:01:0e:72:44:34:d0:74:8c:8a:5f:f3:8a:65:
6e:b7:ec:c1:52:c4:e6:52:94:f4:c5:e7:2a:da:23:
c2:53:e8:30:6e:f7:f7:5f:33:95:2f:9d:f0:74:d2:
89:c0:c2:64:4d:e1:bb:cb:17:2c:d9:e7:f0:8c:0c:
c0:ea:10:f6:d1:68:55:1a:4b:6f:bb:0a:18:f4:b3:
48:70:f9:55:04:66:1c:f8:16:4c:e8:19:87:ff:78:
6c:d0:08:b3:db:1f:4e:6f:22:d3:97:8c:f7:2f:81:
9c:b9:2e:2b:0e:47:92:c1:92:9b:03:88:bb:3a:44:
e0:20:5a:ec:f6:03:ed:4f:eb:fb:39:3d:5f:43:c2:
a4:d0:55:b9:ab:db:91:96:c0:45:bc:19:72:52:cd:
c9:f1:9d:28:56:17:e7:e6:6f:c7:39:27:93:d4:13:
9c:60:53:47:9a:80:b0:12:b1:e2:3e:ba:d6:bf:f2:
8e:a9:35:7e:d6:b9:29:c2:77:69:41:f6:3c:65:f3:
97:a0:08:7e:cb:da:18:0f:87:7c:76:5e:58:a5:c1:
f5:ff:a0:79:31:40:ec:50:fb:f2:f1:0a:32:95:b0:
6c:8d:a6:00:12:50:45:95:2c:e6:a6:6d:de:06:7c:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:20:F0:3E:7E:9F:4B:2A:D0:F8:E4:AF:53:98:B7:4F:AA:CA:69
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.40.0/21
Signature Algorithm: sha256WithRSAEncryption
94:42:4c:e8:99:90:94:85:cd:de:ab:8e:5a:61:99:ba:c9:8c:
7c:e0:68:85:e5:b1:44:14:b9:d0:f2:b6:a4:7c:0a:db:05:69:
8e:fc:f0:57:4e:1b:33:71:0b:7c:c2:3f:5b:28:fb:5e:bd:87:
e1:15:a0:73:eb:4c:3b:5a:d6:57:e0:2d:9f:58:f3:e5:a5:47:
1e:e1:ac:79:4c:d3:c9:a4:fb:25:e2:01:ff:09:04:dd:9d:eb:
d7:e2:53:2e:24:9a:bd:64:e2:26:24:a1:c7:fb:31:be:85:40:
2b:89:56:97:e2:4e:06:fe:ee:ce:2f:57:92:ed:b2:19:58:62:
a2:1a:46:bb:b1:46:d8:ec:fa:52:c5:59:09:4b:eb:ba:4b:c8:
24:c5:79:5d:60:0a:33:a0:e7:4e:28:8a:ad:e1:70:21:f7:12:
0d:40:ab:ee:f1:2d:65:82:18:a6:fc:45:9f:a0:74:10:26:da:
1d:59:30:28:b9:f5:07:d2:6d:5c:3e:dc:c2:5c:15:31:64:62:
32:e2:36:12:21:5d:c4:41:2f:89:72:21:91:01:74:78:3a:29:
82:ae:b5:5c:3a:20:4c:55:21:75:da:bb:be:0d:46:89:29:ec:
3c:be:fb:73:4f:c0:20:66:95:42:bf:ac:13:ae:84:3e:f8:10:
63:e4:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:34 2026 by rpki-client