Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218582.roa
File: AS218582.roa (raw, json)
Hash identifier: t/NEtXS5T7fC8HS8EZ88Cdd4hQd4+qf2w/cacUqBkdg=
Subject key identifier: CC:46:EF:E9:13:B8:CA:4D:9C:61:EF:4A:F7:E7:0E:73:87:09:6D:A1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 44234BBD83E1E289BBBBDED65B21B9ABC04C5E68
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218582.roa
Signing time: Fri 09 Oct 2026 08:57:42 +0000
ROA not before: Fri 09 Oct 2026 08:52:42 +0000
ROA not after: Fri 08 Oct 2027 08:57:42 +0000
asID: 218582
IP address blocks: 2a13:9500:1e3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:23:4b:bd:83:e1:e2:89:bb:bb:de:d6:5b:21:b9:ab:c0:4c:5e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 08:52:42 2026 GMT
Not After : Oct 8 08:57:42 2027 GMT
Subject: CN=CC46EFE913B8CA4D9C61EF4AF7E70E7387096DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:46:b6:81:17:47:0e:40:60:ca:a0:71:61:
e0:3c:fd:f6:b5:c4:5b:33:02:86:84:de:ae:a8:9e:
95:4b:93:45:8b:21:f5:98:31:5b:6c:02:cd:5e:60:
8d:8f:b8:1f:88:7b:35:67:be:bb:f3:82:4f:41:2b:
35:3e:29:de:88:93:22:63:78:d4:85:c4:74:85:61:
ef:1d:dc:20:3a:46:d7:77:85:33:2a:38:39:38:9d:
d1:a7:07:c3:40:aa:00:84:1d:ac:3a:2e:6a:09:e8:
a1:af:cb:05:38:ec:26:9b:cc:bf:d4:90:46:45:c1:
c1:bd:b0:47:17:4c:e8:53:05:87:2d:57:f0:5b:10:
0b:6a:26:7e:f5:ce:93:dc:49:04:6c:fa:3e:ea:95:
3e:4b:3c:93:fe:b6:fb:f4:cc:75:2b:42:d8:08:8a:
af:dd:ed:54:07:54:7f:33:bc:13:59:ab:20:1d:6d:
63:0c:ba:b9:42:22:ff:b1:5c:fd:47:32:cf:df:00:
ae:ce:1b:b5:aa:cd:f1:81:95:87:37:56:db:c1:3b:
be:d8:85:d2:e7:27:2e:65:a3:b3:c8:fc:8f:d9:c3:
e7:af:01:62:0e:20:53:80:0b:81:40:a1:f1:9b:68:
d1:cd:ab:23:4b:5e:89:37:5e:8e:36:9e:c4:4f:3b:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:EF:E9:13:B8:CA:4D:9C:61:EF:4A:F7:E7:0E:73:87:09:6D:A1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218582.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1e3::/48
Signature Algorithm: sha256WithRSAEncryption
69:f4:ef:71:84:d5:21:6e:6b:56:d9:45:1f:c5:86:25:1d:c9:
e3:ee:4d:64:36:af:38:d1:85:68:2c:16:e1:00:fe:0e:c8:7b:
bb:4a:41:f4:df:b8:0e:c3:37:70:11:2d:06:1b:e1:46:6e:4c:
a8:47:43:b5:b4:e4:89:14:58:8d:b9:16:df:03:84:39:58:b5:
89:92:16:a1:1a:16:bd:95:ea:82:f4:69:b0:05:ef:12:85:b6:
b7:e9:55:29:f4:27:6d:5a:a5:13:a9:0e:0e:e2:b3:d0:05:a8:
1d:fe:41:7d:63:c4:7a:18:c6:87:fd:c2:6c:2e:d3:a3:7c:d5:
24:fe:61:3c:d2:34:17:4e:b5:88:e7:10:4c:3c:11:27:83:1f:
00:2f:e1:fd:da:d1:d7:32:de:cd:e5:93:f3:df:5d:8d:94:13:
2b:c0:65:3d:e4:d6:da:02:62:39:f4:f1:d9:fe:96:c4:73:f9:
33:10:6d:e8:1f:a2:c5:31:c5:af:3d:e3:0b:a0:40:28:a4:b5:
e8:59:d8:72:0c:29:e1:5e:71:8f:f5:5b:9f:5a:3a:70:28:67:
4b:da:5e:ef:c9:02:5d:99:5e:28:ff:29:c7:30:25:88:10:d0:
d6:c0:96:af:af:2f:27:cd:93:2d:b1:cd:31:aa:3a:68:07:5d:
5e:61:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:46:58 2026 by rpki-client