Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218539.roa
File: AS218539.roa (raw, json)
Hash identifier: 0vAxZx7QFAanJU9XoRIz4W/CYuwf3h38Jcnym7Hdb2U=
Subject key identifier: 04:36:6B:BD:69:8C:78:E2:7B:FA:F1:CB:89:33:80:48:A5:6B:8F:C5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 456756F98504DB60A58D9CF79A4A71B8083F6C96
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218539.roa
Signing time: Sat 03 Oct 2026 13:29:46 +0000
ROA not before: Sat 03 Oct 2026 13:24:46 +0000
ROA not after: Sat 02 Oct 2027 13:29:46 +0000
asID: 218539
IP address blocks: 2a13:9500:1ea::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:67:56:f9:85:04:db:60:a5:8d:9c:f7:9a:4a:71:b8:08:3f:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 3 13:24:46 2026 GMT
Not After : Oct 2 13:29:46 2027 GMT
Subject: CN=04366BBD698C78E27BFAF1CB89338048A56B8FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:bb:fb:3d:45:23:61:03:d1:bd:62:1c:19:
67:de:d3:1b:a2:2b:e3:d2:81:dc:fc:5c:06:fd:90:
d0:b4:ac:94:46:1c:1a:71:3d:88:4c:d9:38:1b:f9:
07:2d:e9:4b:a6:7c:3f:3f:26:a1:51:43:38:f7:a5:
b3:64:8b:19:2b:98:fc:15:ce:a1:15:6b:da:15:a8:
b4:43:f0:d4:a6:ff:bf:bb:8e:c3:1c:32:60:b3:bd:
f2:40:b0:9c:0d:c5:2a:68:bc:78:8f:99:14:c2:bc:
d5:7e:01:5b:f7:9d:fe:b6:a7:f8:06:d1:98:bd:62:
1e:20:32:6a:80:e7:a4:d0:21:e4:27:c0:12:67:45:
5a:00:dd:bc:d4:b3:10:1f:e1:13:4b:75:8d:c3:96:
88:95:ae:58:b5:07:d5:bc:d1:1a:c3:87:3c:c6:9c:
74:2a:f3:97:ed:99:6b:ce:44:f6:2e:0b:a1:73:1e:
94:1b:95:88:33:53:bf:18:b9:14:d4:93:19:26:d7:
1c:38:ab:35:31:3d:2f:7f:dd:21:90:73:50:6a:ad:
c6:30:ae:7c:63:d9:21:97:0a:f1:d1:6a:8c:43:5c:
a6:ba:97:ac:29:59:b3:1e:fe:8a:60:eb:ea:60:fe:
ba:d1:a6:44:d8:3e:67:df:3e:9b:9a:c1:6e:2f:e4:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:6B:BD:69:8C:78:E2:7B:FA:F1:CB:89:33:80:48:A5:6B:8F:C5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1ea::/48
Signature Algorithm: sha256WithRSAEncryption
47:d0:3c:34:db:a2:f7:7a:cc:b5:1f:a7:e1:92:15:17:df:8f:
cb:bb:db:47:fe:d2:f8:8c:ec:1c:77:3e:1a:95:a3:ee:4b:fc:
ee:73:f3:61:b8:38:ae:af:6b:d6:16:37:7d:c6:59:cf:cf:82:
25:62:09:79:d2:12:17:60:dc:88:84:24:3b:cc:2d:75:08:71:
66:63:ef:ae:29:1c:1a:65:a6:94:2b:29:94:34:fc:37:08:34:
34:9b:01:8b:0b:75:d4:e1:4d:00:d4:fd:3c:65:24:fd:e7:5a:
ba:e2:0c:42:fc:0f:00:3d:2e:53:7a:6c:f7:db:6e:c9:56:1d:
a4:1d:c6:6d:90:fa:b7:b7:85:85:2a:85:4f:04:f1:e5:a7:2a:
2c:79:03:35:8c:3b:70:7c:6d:78:f8:bf:7d:42:7f:14:c3:44:
d2:73:58:13:f4:45:fe:5b:33:45:5a:0f:41:c9:38:10:0d:f2:
39:11:0d:77:7d:a3:b8:24:09:04:c6:5b:2f:35:7f:43:13:1c:
84:46:ef:b4:a3:ad:4f:03:39:3d:e1:e1:b8:ed:55:1a:98:b2:
20:51:b1:36:22:ac:50:39:04:9d:33:30:e1:5d:25:70:a0:bf:
e3:4b:a8:3a:75:42:00:73:2f:d5:3f:86:af:1c:31:bc:2e:0f:
d6:88:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:39:50 2026 by rpki-client