Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218322.roa
File: AS218322.roa (raw, json)
Hash identifier: nlkF/dT/op7gIm0LeEGUKsss4oDoMMLrsyQaXAH+f6o=
Subject key identifier: C5:F0:DA:3E:10:8B:18:9B:3F:FE:96:F0:0A:93:4F:30:15:7A:3A:10
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 777755ECAE138B7FA042CB41BD1C5E079E425314
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218322.roa
Signing time: Tue 03 Nov 2026 20:51:01 +0000
ROA not before: Tue 03 Nov 2026 20:46:01 +0000
ROA not after: Tue 02 Nov 2027 20:51:01 +0000
asID: 218322
IP address blocks: 82.38.20.0/24 maxlen: 24
82.47.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:77:55:ec:ae:13:8b:7f:a0:42:cb:41:bd:1c:5e:07:9e:42:53:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 3 20:46:01 2026 GMT
Not After : Nov 2 20:51:01 2027 GMT
Subject: CN=C5F0DA3E108B189B3FFE96F00A934F30157A3A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:59:61:4a:51:ae:5b:af:65:83:b8:21:0a:
65:0b:a0:6b:1a:ab:19:cd:a0:66:34:06:43:e5:0f:
bf:f8:8b:87:36:73:5f:55:ff:d6:f9:1e:1e:2c:31:
0a:de:84:ea:6e:b4:60:dc:97:00:ae:e0:43:3e:40:
7c:ff:74:f7:0c:18:21:2f:a9:02:d3:a7:b4:1d:bb:
84:6f:d4:40:72:2c:53:dc:56:fe:c1:36:e8:24:39:
c6:3b:cd:e3:74:9e:c9:f2:44:55:71:23:fc:f3:27:
5e:91:c6:8e:e0:84:9b:5e:85:16:c1:91:49:4f:8c:
54:18:29:4e:ce:80:82:59:ad:f5:1b:db:16:a3:35:
24:e4:89:80:bd:15:8c:78:21:a1:26:74:48:4a:59:
5f:50:4a:83:5e:00:ca:b9:52:d7:48:57:e4:f6:e1:
a3:ab:70:63:5a:33:e3:cc:eb:d7:ac:a1:00:5d:04:
c6:f6:80:6e:76:ab:02:4d:6c:e7:09:c9:e7:84:fa:
cb:5d:dc:df:cd:24:66:c2:df:a6:35:5d:cd:97:40:
4d:33:89:04:a0:1c:df:89:b0:46:1c:b8:41:35:1c:
55:ab:a2:ff:87:31:5b:9e:33:6c:19:25:b6:07:e8:
ce:c5:6e:db:f8:c1:87:00:d7:d2:87:80:fc:1e:c3:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F0:DA:3E:10:8B:18:9B:3F:FE:96:F0:0A:93:4F:30:15:7A:3A:10
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.20.0/24
82.47.197.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:04:ee:5a:ec:7c:98:aa:05:2f:90:07:8c:ac:68:e9:09:34:
aa:57:d4:ce:f3:30:0b:9f:22:17:22:d5:15:66:68:48:61:24:
07:8b:ca:cf:85:fb:53:08:ed:e6:f1:77:fa:fa:66:28:31:bc:
80:58:72:88:62:af:1f:80:d6:4b:f4:7c:61:6f:d5:c9:15:e4:
dc:d9:e2:ae:01:0f:1d:86:65:39:e3:53:21:36:9c:70:21:34:
e0:0d:c1:22:00:58:03:ab:b2:12:85:a2:99:5f:e7:af:83:03:
c2:0d:58:63:fa:a1:24:56:1f:7b:60:77:82:fc:fb:1e:9c:ca:
81:15:6e:18:c2:8a:b8:5f:f0:4b:7c:9f:42:3d:62:24:64:f8:
48:ea:23:43:80:e4:3f:71:c3:25:43:38:27:a3:0b:25:6a:98:
24:4c:fa:4c:17:9b:be:3d:7a:51:aa:27:3f:81:87:51:26:27:
d5:5a:5e:92:13:13:bc:ef:73:20:d5:3f:6b:f9:07:99:65:a0:
7a:a2:c9:11:ab:e4:0e:99:86:f4:00:89:61:9a:5a:f8:73:66:
60:fb:0f:19:07:de:91:8a:b3:e0:71:f3:4a:48:63:6d:f5:e7:
6b:87:4b:92:f8:9d:17:3e:46:f0:81:ff:19:32:a9:e9:5c:f3:
c0:5a:5c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:53:41 2026 by rpki-client