Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218735.roa
File: AS218735.roa (raw, json)
Hash identifier: FJ2wC976Qr7PrBX12P9lVx5hYkBJfhZBJV/FxNNpEuw=
Subject key identifier: BB:73:7A:9A:B8:44:86:CC:2A:87:F8:DF:3B:C0:F3:ED:51:90:E8:C8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 251208B097900EF997597328198DFC63A10CAD8F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218735.roa
Signing time: Mon 14 Sep 2026 09:26:23 +0000
ROA not before: Mon 14 Sep 2026 09:21:23 +0000
ROA not after: Mon 13 Sep 2027 09:26:23 +0000
asID: 218735
IP address blocks: 82.41.180.0/24 maxlen: 24
82.41.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:12:08:b0:97:90:0e:f9:97:59:73:28:19:8d:fc:63:a1:0c:ad:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 09:21:23 2026 GMT
Not After : Sep 13 09:26:23 2027 GMT
Subject: CN=BB737A9AB84486CC2A87F8DF3BC0F3ED5190E8C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:c4:e8:48:a8:96:67:49:78:11:74:eb:ce:
c3:9f:2e:d2:b0:87:2a:3d:24:9c:af:03:40:71:df:
28:58:b0:59:42:f7:1b:23:73:1b:5d:3d:23:66:42:
a2:39:36:1e:1d:21:ea:6f:e3:27:88:84:30:2a:0f:
6a:12:61:e0:da:56:ad:93:a1:3b:14:44:ed:c0:b1:
5c:3f:d7:a9:cf:2d:86:45:ef:21:b6:ed:af:dd:d2:
59:b6:a7:29:2c:d3:af:ec:6b:6b:8d:2e:f7:aa:7c:
e4:85:12:96:f3:66:c7:21:7a:fa:a4:38:8e:67:49:
c0:55:7b:00:4f:4a:e5:94:ca:fe:f1:1a:2e:18:ea:
4b:6a:54:44:2b:00:1b:25:92:24:7d:42:ab:b7:6d:
48:64:5a:00:b9:2b:62:53:94:0b:8b:df:a5:fc:d8:
57:6e:1a:22:78:22:2e:1a:93:84:de:5b:73:59:0c:
67:3d:f3:8c:90:79:90:9b:d9:43:19:3b:f2:66:8c:
d1:54:93:26:bd:35:e0:8b:b1:0c:af:de:c8:2e:7f:
1b:c9:f3:4a:21:89:6a:4b:ba:36:3a:79:33:33:d5:
71:5d:56:79:a3:ed:33:08:41:fa:96:e0:e1:85:cc:
d4:b8:2f:0b:c3:95:dc:33:30:17:fa:b2:27:fb:f8:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:73:7A:9A:B8:44:86:CC:2A:87:F8:DF:3B:C0:F3:ED:51:90:E8:C8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.180.0/24
82.41.198.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6d:7c:15:de:b4:f6:fc:59:04:cc:0f:d8:fd:b6:06:f7:93:
44:c5:bb:dd:d2:8a:b2:f9:4e:88:9e:db:5e:e4:4c:dd:fb:f2:
86:f3:db:5a:38:24:fa:e6:4f:f4:29:3a:24:e7:99:4b:18:e4:
9e:a4:8a:9e:e2:f6:2b:dc:26:60:19:60:fd:eb:02:31:06:e3:
8b:31:6e:6f:83:51:7c:00:97:bb:ff:29:a8:21:a5:39:d7:1e:
35:a3:f5:b3:4a:52:16:1b:fb:0f:c0:d6:cb:4f:d4:5c:46:b0:
5d:35:f8:91:65:dc:5e:99:be:dc:10:0c:69:a9:b8:0f:11:87:
85:ce:e0:11:6d:d7:8c:77:63:44:05:15:97:30:52:a8:4f:52:
fc:85:3f:06:ba:53:9d:7d:5a:bf:f0:27:8b:32:9d:b8:4a:49:
86:7d:ff:44:cf:3d:1b:29:29:fa:16:b8:5a:c3:e5:b0:04:85:
78:42:28:56:06:45:31:2d:41:b7:2f:a5:7d:88:0f:62:c4:5a:
f4:41:6e:86:16:fb:db:f5:a7:14:29:c2:88:af:29:bb:38:f4:
37:a0:90:86:b9:cb:f4:a1:2b:1f:6a:1a:5a:c3:90:93:f2:50:
0b:9f:aa:66:d1:b9:b8:c4:1a:5a:c2:db:59:5f:7b:65:90:de:
70:92:44:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:57 2026 by rpki-client