Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218194.roa
File: AS218194.roa (raw, json)
Hash identifier: T3HkpYpxcy/nVTJ7rHLTZ/Qr3xNXb+y210RQXIBodaA=
Subject key identifier: 0D:56:4D:AF:EF:4B:A6:92:5A:48:85:DE:AE:DD:5C:53:3A:A4:7C:2D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 431CF97255288C5AC4B4131E37F8B6A97D618E82
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218194.roa
Signing time: Wed 04 Nov 2026 19:01:28 +0000
ROA not before: Wed 04 Nov 2026 18:56:28 +0000
ROA not after: Wed 03 Nov 2027 19:01:28 +0000
asID: 218194
IP address blocks: 2a14:7580:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1c:f9:72:55:28:8c:5a:c4:b4:13:1e:37:f8:b6:a9:7d:61:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 4 18:56:28 2026 GMT
Not After : Nov 3 19:01:28 2027 GMT
Subject: CN=0D564DAFEF4BA6925A4885DEAEDD5C533AA47C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:c4:32:4b:36:b8:8a:d6:0a:14:b4:48:d3:
f0:6c:75:e1:07:05:19:f3:d0:34:5e:26:4c:67:31:
57:15:78:4a:53:13:8c:2c:db:e0:10:72:ae:70:ce:
58:35:12:ff:49:c2:6f:72:04:ab:4c:39:89:ef:65:
78:80:5d:e2:47:fc:32:a5:7b:aa:f8:41:c7:1a:e9:
15:90:f1:de:b3:7e:f3:ee:5c:97:b7:38:a2:fe:e7:
06:00:cf:94:dc:47:8f:96:e0:05:c4:ef:4a:4f:6c:
5a:5a:fb:27:d3:62:b8:37:b7:6b:9b:d4:3c:7d:d5:
05:b4:4b:c8:c5:cf:51:22:53:0f:de:12:bf:ae:07:
fd:e5:66:fc:72:86:e6:ee:f0:0e:28:f9:27:48:c2:
28:42:03:f6:62:98:8a:29:98:9e:2f:03:de:29:dd:
fb:c7:49:a8:b7:d3:3f:36:b4:7f:43:54:b4:9a:cc:
0d:ba:5b:31:d2:c3:54:b9:14:e0:2e:f3:aa:03:9f:
d8:3a:59:09:1d:85:b6:d9:65:a5:16:54:29:13:1d:
31:da:ad:f4:2a:5c:53:d8:ee:0f:c5:18:1b:d0:86:
03:49:bd:0c:c0:86:b5:bc:15:6e:2a:96:b7:28:32:
cd:96:b2:40:cd:d5:2e:d1:3f:a5:89:00:88:79:fb:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:56:4D:AF:EF:4B:A6:92:5A:48:85:DE:AE:DD:5C:53:3A:A4:7C:2D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218194.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:100::/40
Signature Algorithm: sha256WithRSAEncryption
5f:5f:e3:01:e4:7e:c0:71:5c:2a:34:27:69:15:61:3e:eb:b2:
79:f4:4e:67:fb:0e:e1:a2:da:bf:74:7f:7d:3a:e4:5f:f1:e0:
b2:bb:29:e7:6b:33:ca:30:fa:b9:a4:21:41:12:8c:a5:dd:ed:
ab:bd:a5:1f:9d:ce:e5:e6:3a:3c:73:ea:b9:50:ce:7a:70:13:
83:4a:21:e2:ae:7b:43:e5:fe:5b:f7:b6:40:77:3a:4a:ff:74:
d9:15:c0:46:11:69:dc:6c:86:1d:43:ff:3f:43:66:ee:b2:82:
31:59:27:6e:97:eb:68:e8:50:4d:80:cb:87:c2:c9:88:32:d5:
15:3b:ec:44:05:fd:35:81:52:44:f5:28:6a:a9:89:5f:05:3e:
65:e3:53:9c:fa:8a:02:84:5e:bb:cf:93:8a:43:36:b6:b4:fa:
79:da:b9:ac:29:dd:b2:86:7a:b4:23:35:c4:8b:6c:c6:06:76:
e0:59:e4:13:18:f1:fc:cb:49:74:85:0a:3d:8f:40:fc:44:81:
56:f8:3c:d8:85:89:85:cd:00:fe:20:5d:09:14:c8:94:0e:b8:
80:62:1e:0a:cf:ac:0a:80:8d:69:19:cd:a4:da:0c:30:95:7e:
89:20:27:63:e4:80:bf:a5:52:fc:eb:f0:58:2f:c7:c1:62:8b:
58:21:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:53:48 2026 by rpki-client