Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218195.roa
File: AS218195.roa (raw, json)
Hash identifier: oT1lSnn94dqivcjAgL0tle6DAZWIdC4Cxn74YWudcb4=
Subject key identifier: 8E:59:1E:DB:3F:03:A6:71:4A:4F:8E:66:B9:DC:94:F1:8F:44:05:0E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7CE0463D9C87E9C8F70DE4F0147C4FB76FEF926F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218195.roa
Signing time: Tue 03 Nov 2026 23:21:34 +0000
ROA not before: Tue 03 Nov 2026 23:16:34 +0000
ROA not after: Tue 02 Nov 2027 23:21:34 +0000
asID: 218195
IP address blocks: 2a14:7583:efc8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e0:46:3d:9c:87:e9:c8:f7:0d:e4:f0:14:7c:4f:b7:6f:ef:92:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 3 23:16:34 2026 GMT
Not After : Nov 2 23:21:34 2027 GMT
Subject: CN=8E591EDB3F03A6714A4F8E66B9DC94F18F44050E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:b0:6c:2c:a0:0c:3d:c6:47:ca:97:85:4b:
99:6c:2b:4c:2d:39:2c:45:92:b6:a1:4a:4b:1f:da:
3a:c2:53:7e:f7:bf:58:e9:a1:04:d0:3f:bf:12:a6:
64:0d:7f:14:5c:4b:bf:91:86:c7:d8:88:8c:eb:e3:
51:47:cd:a4:0c:7c:aa:8c:b0:79:e1:1a:6e:22:94:
7a:a6:43:9c:de:2b:ff:4e:4e:5e:5a:57:90:7e:79:
4c:7e:59:7b:3d:42:4a:81:56:e2:1b:ed:d9:c9:bc:
85:04:1b:ef:3d:96:c9:3a:ba:d5:8d:13:60:c9:a3:
f9:60:35:ae:09:73:1e:32:3f:3d:38:c5:87:34:a6:
3e:92:69:cf:5a:83:6f:50:a2:f6:a4:25:7e:ad:61:
89:4f:7d:c1:76:91:46:17:ea:1b:41:3b:84:cd:a3:
d2:e8:49:71:28:9e:f6:4a:9f:e9:af:3f:cf:78:a5:
1c:71:83:ad:ab:63:54:4a:f3:d6:d6:ae:7a:cd:59:
a5:ef:4b:3a:24:e5:b2:79:ae:2b:f7:bd:be:9b:41:
79:93:81:96:d8:42:0c:b0:c3:18:b5:09:d4:09:7c:
5a:15:10:81:5a:ae:2e:6f:df:73:7d:ae:23:7f:ba:
b3:3d:8c:97:2e:ce:cb:a3:14:83:23:00:1f:e9:70:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:1E:DB:3F:03:A6:71:4A:4F:8E:66:B9:DC:94:F1:8F:44:05:0E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efc8::/48
Signature Algorithm: sha256WithRSAEncryption
07:70:fc:e6:0a:36:91:65:71:3b:54:1a:48:17:36:71:3e:34:
90:2d:13:48:c9:c3:68:92:a9:97:ba:a1:67:dd:ba:9a:00:93:
90:19:09:33:ae:36:09:b2:78:29:84:ef:d8:7b:8b:e0:9f:11:
e5:5a:e4:b0:b9:ea:05:43:6d:fd:50:bd:87:0c:59:c5:5d:a3:
b0:d5:1a:db:43:83:65:e8:1e:19:c2:d2:9f:c3:e6:ee:ba:8c:
7d:a6:5d:31:ff:bd:85:8b:6b:05:8b:52:33:bc:38:89:88:58:
27:e1:e6:ca:a6:93:2d:f2:bf:46:93:a6:02:39:9e:9b:c9:6f:
88:81:56:4d:96:57:32:5b:a2:7e:ab:06:34:90:8b:8a:4d:4a:
52:8b:a0:09:16:8b:e7:78:f0:62:78:57:00:ff:46:87:43:b2:
a9:56:8a:e6:72:75:ae:78:e2:7b:5a:7d:56:8e:b0:eb:10:7c:
69:5e:b3:9f:8a:e3:49:84:f2:55:b6:65:ed:f9:04:9b:6e:69:
78:fe:a1:69:dd:2c:88:ea:be:f4:d0:ba:85:00:8b:84:dc:37:
35:68:a0:88:ae:df:c0:e4:3e:17:d7:83:79:47:59:ba:66:82:
e3:d1:dd:fb:e7:bd:12:c5:e5:05:a0:83:1e:be:f2:a4:5c:e1:
94:e7:de:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUfOBGPZyH6cj3DeTwFHxPt2/vkm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjExMDMyMzE2MzRaFw0yNzExMDIyMzIxMzRaMDMxMTAvBgNV
BAMTKDhFNTkxRURCM0YwM0E2NzE0QTRGOEU2NkI5REM5NEYxOEY0NDA1MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ4bBsLKAMPcZHypeFS5lsK0wt
OSxFkrahSksf2jrCU373v1jpoQTQP78SpmQNfxRcS7+RhsfYiIzr41FHzaQMfKqM
sHnhGm4ilHqmQ5zeK/9OTl5aV5B+eUx+WXs9QkqBVuIb7dnJvIUEG+89lsk6utWN
E2DJo/lgNa4Jcx4yPz04xYc0pj6Sac9ag29QovakJX6tYYlPfcF2kUYX6htBO4TN
o9LoSXEonvZKn+mvP894pRxxg62rY1RK89bWrnrNWaXvSzok5bJ5riv3vb6bQXmT
gZbYQgywwxi1CdQJfFoVEIFari5v33N9riN/urM9jJcuzsujFIMjAB/pcLjzAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUjlke2z8DpnFKT45mudyU8Y9EBQ4wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE4MTk1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
g+/IMA0GCSqGSIb3DQEBCwUAA4IBAQAHcPzmCjaRZXE7VBpIFzZxPjSQLRNIycNo
kqmXuqFn3bqaAJOQGQkzrjYJsngphO/Ye4vgnxHlWuSwueoFQ239UL2HDFnFXaOw
1RrbQ4Nl6B4ZwtKfw+buuox9pl0x/72Fi2sFi1IzvDiJiFgn4ebKppMt8r9Gk6YC
OZ6byW+IgVZNllcyW6J+qwY0kIuKTUpSi6AJFovnePBieFcA/0aHQ7KpVormcnWu
eOJ7Wn1WjrDrEHxpXrOfiuNJhPJVtmXt+QSbbml4/qFp3SyI6r700LqFAIuE3Dc1
aKCIrt/A5D4X14N5R1m6ZoLj0d37570SxeUFoIMevvKkXOGU5970
-----END CERTIFICATE-----
Generated at Mon Nov 9 23:58:03 2026 by rpki-client