Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218251.roa
File: AS218251.roa (raw, json)
Hash identifier: r1W2eLKsCoNQtM2PMayPiB7yvKw88XSgO1FDAjbynB8=
Subject key identifier: CB:96:A9:9F:B5:6B:7D:78:2B:49:7C:41:83:60:75:81:14:F2:A8:98
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 697B0CA8574D787BA223EF2C85AA30B4760456C8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218251.roa
Signing time: Wed 04 Nov 2026 19:03:11 +0000
ROA not before: Wed 04 Nov 2026 18:58:11 +0000
ROA not after: Wed 03 Nov 2027 19:03:11 +0000
asID: 218251
IP address blocks: 2a14:7583:efc6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7b:0c:a8:57:4d:78:7b:a2:23:ef:2c:85:aa:30:b4:76:04:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 4 18:58:11 2026 GMT
Not After : Nov 3 19:03:11 2027 GMT
Subject: CN=CB96A99FB56B7D782B497C418360758114F2A898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:b9:0c:86:30:f3:b3:98:d2:d1:51:00:79:
46:ec:76:22:bc:ed:c5:8d:5d:21:de:33:9a:b2:0c:
f9:9f:c2:48:f3:03:7c:d5:7b:70:cb:72:f8:e9:b6:
fe:2f:6d:50:32:8a:41:90:32:e1:d7:31:04:dd:70:
12:e9:f6:0e:67:5b:ef:c9:17:b1:33:58:dd:95:72:
08:e0:af:a6:2c:d2:6d:ff:28:0b:25:ce:39:67:a6:
07:e2:5c:2e:8e:f0:06:9e:50:a8:cb:a2:9d:1d:6b:
8b:47:35:62:b8:55:1e:b7:27:e9:54:6b:05:c7:03:
a9:47:9f:03:e4:16:a6:73:85:45:81:09:1a:fd:a9:
f6:4b:64:a6:14:b2:73:be:5d:57:d2:41:5a:8e:f1:
51:3b:9b:3e:71:3f:45:0f:14:49:27:0a:7e:75:bb:
13:ce:25:6d:b6:4c:7c:99:c7:51:7e:a8:20:89:33:
61:f8:4f:86:2c:f9:c2:7a:99:dc:1f:58:28:46:a4:
65:59:f0:b7:46:73:cb:6d:ab:2c:e3:e7:78:96:5e:
79:c3:03:45:de:ba:b9:0a:e5:6a:8e:d5:05:84:84:
40:cf:3a:d4:3f:e5:3d:47:f0:a4:d6:60:84:cb:3f:
4e:5d:66:f1:1d:17:4d:4d:96:84:c5:81:53:17:7f:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:96:A9:9F:B5:6B:7D:78:2B:49:7C:41:83:60:75:81:14:F2:A8:98
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218251.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efc6::/48
Signature Algorithm: sha256WithRSAEncryption
44:9b:19:46:d9:86:b8:da:af:60:db:ff:42:f8:c5:07:6a:c9:
a0:cd:1f:2e:a3:72:fb:ad:53:d5:be:83:6e:8b:5b:53:4f:84:
7e:da:b5:3c:33:fb:29:d6:64:b5:51:7a:c7:57:1e:e7:f3:21:
ad:c0:09:a3:55:54:d2:a8:8a:27:a4:84:2a:c7:78:5f:5d:e5:
de:67:87:a7:c2:2d:5d:22:94:26:98:f3:da:04:40:09:19:12:
e5:6a:18:f9:e5:26:8d:26:94:59:9f:fa:55:6f:95:17:c0:85:
3e:9b:f6:db:72:4b:03:a3:bc:a0:61:5e:30:7b:99:85:0f:ed:
db:4f:03:51:95:60:ff:14:9e:8f:22:90:51:28:90:78:d8:87:
d7:0d:8d:35:7b:5b:41:e3:ad:0d:99:d3:9b:1f:6d:43:7c:00:
18:9f:77:6a:9b:9c:48:1b:35:a9:f1:db:15:9f:7d:a7:3e:ab:
f0:88:9c:88:1d:13:eb:36:1f:69:5e:cd:7a:c8:29:20:91:23:
83:0d:15:ef:b3:c1:ec:72:70:7e:1f:70:66:4c:38:01:27:47:
68:20:e1:16:2d:91:89:26:8a:4e:7b:43:8c:06:84:9a:23:aa:
f9:9c:70:3f:c2:25:46:11:92:e2:9b:6a:71:a7:a1:90:24:24:
46:2e:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 14:26:55 2026 by rpki-client