Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218197.roa
File: AS218197.roa (raw, json)
Hash identifier: ggJPxKTrrpjYYmrRv5lf1ctmpDNaxSvhk6vl+EzqvlU=
Subject key identifier: 6F:B9:78:75:1E:D2:3D:02:92:01:DC:B7:83:6B:F0:DC:65:D4:73:33
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 68E001C12A96B5F0721A1426094F7DAE0D56FBFA
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218197.roa
Signing time: Wed 04 Nov 2026 19:00:31 +0000
ROA not before: Wed 04 Nov 2026 18:55:31 +0000
ROA not after: Wed 03 Nov 2027 19:00:31 +0000
asID: 218197
IP address blocks: 2a14:7583:e300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e0:01:c1:2a:96:b5:f0:72:1a:14:26:09:4f:7d:ae:0d:56:fb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 4 18:55:31 2026 GMT
Not After : Nov 3 19:00:31 2027 GMT
Subject: CN=6FB978751ED23D029201DCB7836BF0DC65D47333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:ce:f3:4f:d1:78:34:c1:4a:38:9d:6e:28:
de:a9:e2:aa:f5:8e:f3:aa:f9:90:88:ca:ea:b4:3b:
47:99:41:63:f4:f1:90:e1:7c:55:96:f4:43:48:d4:
4a:a4:4a:80:6f:86:b3:5b:d3:c2:e0:9c:bb:e1:cd:
b5:12:a2:ba:4c:76:a8:4c:9e:f3:e6:5c:b7:15:7a:
84:bd:b1:65:65:ac:e5:e5:4d:ad:cc:b6:10:bd:49:
ad:16:3d:c8:5d:07:91:3f:ec:f5:cc:30:de:ab:ac:
63:d2:dc:5b:6c:e7:30:cf:88:a9:4f:b7:ee:0f:35:
01:28:0f:f4:26:26:b6:2d:ec:e2:ef:85:d9:30:43:
a5:94:38:0c:fd:e2:b1:47:e3:c9:19:55:89:4e:c4:
ef:c5:18:02:57:56:b3:9e:89:ff:e7:c1:0b:51:f4:
2a:98:88:63:6c:8d:a2:76:f0:4e:32:66:f7:0a:55:
d9:47:82:d8:10:6f:3c:6e:df:2b:99:88:ef:6c:87:
19:b3:14:3f:24:92:55:79:ec:ca:6b:bd:06:27:e3:
5e:d1:62:3f:03:fa:7d:53:8f:ec:5c:41:1d:12:42:
de:7b:c7:db:a2:01:f7:b9:fa:c5:4f:99:cc:07:d3:
5a:f4:3e:a6:83:9e:7e:a8:c0:32:44:68:f4:fa:66:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:78:75:1E:D2:3D:02:92:01:DC:B7:83:6B:F0:DC:65:D4:73:33
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218197.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:e300::/40
Signature Algorithm: sha256WithRSAEncryption
46:fe:4a:db:55:48:3f:8e:54:18:9c:f3:e0:1f:1e:2e:d8:5e:
9f:eb:4b:34:e9:be:84:a7:29:1f:41:ec:93:5c:59:ab:2e:1d:
f8:67:4a:6b:66:a7:fb:99:53:8f:72:cf:ab:0b:a5:e9:8a:47:
d5:c6:1d:61:d6:d1:62:6e:60:86:f4:97:65:2e:03:33:d9:27:
db:0d:0d:44:96:f3:d7:38:07:4b:a7:26:7b:fb:82:d5:28:7f:
31:f0:08:c6:31:95:94:41:ce:d0:f6:60:20:0a:fc:8b:fc:cf:
eb:a4:39:d6:2f:32:10:c6:8e:8b:fd:a9:18:1c:d0:f9:cb:ff:
a3:2e:f6:fd:38:33:cd:8a:6f:82:99:19:ce:2c:54:91:0d:df:
14:24:7f:f6:06:66:9d:64:98:08:35:d2:98:34:a2:60:c2:c3:
cb:97:3c:6d:89:f0:f2:ad:34:70:e8:6a:07:fe:ec:51:cf:0b:
8a:42:3d:ef:1f:f5:e8:63:2f:c1:7a:ba:a9:2c:fb:dd:65:af:
8a:79:b4:7d:d1:d6:3a:3a:92:5a:d4:56:d1:c4:0e:4e:38:ce:
3c:d0:dc:63:b6:a8:f0:45:a6:6a:48:72:2d:df:cf:ce:19:90:
43:6e:b6:d3:a7:15:16:cb:0a:d4:84:55:55:23:08:89:11:8a:
da:20:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:07:06 2026 by rpki-client