Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218736.roa
File: AS218736.roa (raw, json)
Hash identifier: KhOae5Abs9X4/JTwFdPNDNTPYTTuI7V56MO2ziUeri8=
Subject key identifier: C8:A7:80:B6:C9:82:41:76:35:EA:17:BE:6A:C0:A8:E3:37:56:B4:3D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 54587EA603D6F76573C1A7A8BFA83816F341C9A4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218736.roa
Signing time: Thu 10 Sep 2026 17:49:47 +0000
ROA not before: Thu 10 Sep 2026 17:44:47 +0000
ROA not after: Thu 09 Sep 2027 17:49:47 +0000
asID: 218736
IP address blocks: 82.27.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:58:7e:a6:03:d6:f7:65:73:c1:a7:a8:bf:a8:38:16:f3:41:c9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 17:44:47 2026 GMT
Not After : Sep 9 17:49:47 2027 GMT
Subject: CN=C8A780B6C982417635EA17BE6AC0A8E33756B43D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:42:29:38:74:f2:4b:3d:42:28:a7:a1:b1:
74:a7:d0:d4:54:e8:56:c2:ef:11:69:dd:34:31:8a:
8d:f1:d5:19:65:87:0b:73:4e:53:5d:6c:af:0a:7b:
13:4e:84:e2:aa:2a:b6:00:27:13:b6:75:95:38:9c:
69:ca:9b:5e:26:39:92:2c:e6:4d:01:f0:17:9c:92:
2e:c6:cb:e0:78:d3:25:2f:3f:4f:9c:44:32:69:68:
93:ea:f1:0b:4d:cd:b1:90:26:e1:ce:b9:a0:07:57:
0a:0d:73:48:d8:f9:1d:3a:6b:55:4d:d2:95:f6:89:
9a:75:a8:22:5a:f9:3e:c5:22:3f:34:43:96:d8:cc:
11:21:fc:65:9b:70:6b:9c:71:3d:aa:a9:46:db:71:
f6:8e:36:71:91:21:06:87:00:fa:c5:69:c8:6a:20:
7a:cf:4d:17:e9:0f:f2:ee:64:5b:89:58:f5:da:3e:
c3:5f:4a:98:14:a4:c3:51:e1:25:0b:b7:96:ec:56:
f7:08:06:21:64:41:92:f2:c6:d0:70:1e:e4:58:90:
8f:a0:4d:e8:38:df:82:19:83:b6:99:59:7f:68:a4:
2e:ea:45:9b:a5:83:ac:50:7e:76:28:45:da:b1:36:
70:60:82:25:78:1d:19:8a:68:7a:e2:5a:81:a7:3c:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A7:80:B6:C9:82:41:76:35:EA:17:BE:6A:C0:A8:E3:37:56:B4:3D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.77.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f4:ec:f7:fc:1e:83:45:b3:30:df:8e:6e:0c:47:5c:6e:f3:
4c:c3:0a:c6:dd:a6:9e:ad:63:a2:5c:f6:0e:2b:cb:4f:d3:91:
71:d2:b4:e5:bc:7f:28:19:1f:6b:24:7a:92:7b:d7:93:1e:22:
87:7d:b8:0a:55:e1:c7:89:d2:4c:18:97:13:8f:4d:a7:ef:ef:
27:be:46:d6:72:66:a9:91:47:a5:ad:c5:c9:6a:2f:1f:37:f7:
bb:31:dd:fc:2e:6c:02:82:cd:fa:19:0e:7c:ce:27:22:32:65:
1d:69:65:20:02:bf:f0:51:b8:df:ba:36:c0:fb:e1:96:ea:d9:
63:d3:84:08:9f:e1:3c:84:ae:a0:30:aa:ee:d2:1f:0b:c3:71:
f0:e0:eb:7c:ed:21:cf:c7:f9:eb:df:38:a5:32:48:6c:a6:6f:
9c:90:56:77:f0:91:a0:ba:aa:ae:51:a9:00:7a:3a:d6:dc:fa:
64:e9:a8:9a:e7:7b:2a:91:70:8a:10:15:9f:c1:3b:49:8c:ca:
bc:e5:62:11:16:a8:29:87:43:86:bc:cb:2d:f1:5c:79:09:89:
bc:24:c3:fd:19:29:1c:13:ee:2e:6e:0a:ca:8a:da:e0:f0:c7:
22:a6:17:b5:4d:d3:97:86:39:7a:c4:89:fa:85:4f:ac:c0:db:
af:55:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:33 2026 by rpki-client