Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218274.roa
File: AS218274.roa (raw, json)
Hash identifier: VushEMGcwJltcCpdX7C3g9oqJKLsmXEPni8DtFtaRKo=
Subject key identifier: 0F:5E:A8:DE:2F:C7:37:AD:D4:1C:47:A0:A0:94:B8:A2:83:1F:2B:FE
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 616CBDB293FEC8BD50BF76DFFFEFEE83BB2B6637
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218274.roa
Signing time: Mon 26 Oct 2026 20:24:04 +0000
ROA not before: Mon 26 Oct 2026 20:19:04 +0000
ROA not after: Mon 25 Oct 2027 20:24:04 +0000
asID: 218274
IP address blocks: 2a14:7580:fffa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6c:bd:b2:93:fe:c8:bd:50:bf:76:df:ff:ef:ee:83:bb:2b:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 26 20:19:04 2026 GMT
Not After : Oct 25 20:24:04 2027 GMT
Subject: CN=0F5EA8DE2FC737ADD41C47A0A094B8A2831F2BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:0f:ba:85:b9:5e:36:32:5b:0e:86:f9:e4:
e9:b8:e3:d4:6e:b1:28:90:74:7d:0e:b3:f3:ca:d1:
35:17:24:61:3b:51:00:74:2a:39:10:25:5d:7e:d7:
ae:4e:ea:af:75:d2:91:5b:4b:d1:54:32:29:00:05:
19:e6:a1:74:b4:a4:5d:54:5d:4a:5e:0b:f6:37:ca:
26:d8:7a:97:af:9e:7c:26:0e:00:4e:c4:b1:bf:3e:
24:3e:b4:8a:a4:6b:bc:f3:a0:cf:51:27:f4:d7:81:
07:84:f3:b3:9c:c9:ea:03:6d:a3:d7:0d:70:9a:8d:
76:70:fd:d2:fe:12:16:7a:06:76:f2:e6:0d:f7:29:
bc:21:50:4e:e5:3a:63:0f:a3:74:24:b0:86:45:45:
e6:c6:90:bf:b8:87:0a:e5:87:ab:ec:f3:2f:6f:6f:
1c:35:e9:13:de:9a:eb:fb:00:88:6c:0e:0d:e4:b7:
2e:2a:2f:e2:90:26:02:7c:70:c0:e7:62:cf:85:68:
8a:fb:95:f6:a5:56:c3:96:0e:38:26:a8:bb:0a:41:
de:2e:06:b4:d0:78:ac:96:43:cc:5b:0f:ac:de:8b:
81:e5:56:c0:cb:ae:3e:9b:06:77:f4:64:58:67:cc:
31:be:7b:fc:2d:54:eb:f7:f9:cd:65:82:cd:54:ab:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5E:A8:DE:2F:C7:37:AD:D4:1C:47:A0:A0:94:B8:A2:83:1F:2B:FE
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218274.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
95:3f:96:a4:84:15:f0:a5:a6:36:51:e9:b3:35:58:9b:ab:69:
f5:83:5f:54:de:07:53:08:e4:25:9e:fe:73:87:ad:c1:f1:33:
be:71:3f:43:f4:92:89:76:4d:e5:b6:b4:2d:ef:ca:f6:c5:89:
c7:1d:0f:a7:7a:40:20:e9:c6:83:7c:51:b0:f8:b9:cb:f7:04:
32:96:7a:0d:69:63:2c:cb:61:a6:1f:b3:4f:92:5e:23:3c:20:
9b:ac:7f:02:1e:a8:5b:1e:28:f2:22:a7:b8:92:3f:bf:11:15:
21:24:f7:0b:5f:80:fb:fa:ac:cd:8b:ad:fb:ad:d0:04:dd:14:
36:9b:8a:e4:30:4f:76:68:5b:59:4c:06:10:05:3d:0e:e6:b9:
16:0b:78:68:a1:7e:a8:20:34:2c:e6:0c:3e:c2:f2:72:bd:34:
93:2f:92:41:93:0c:69:c3:16:a4:40:17:b5:82:f8:7d:ae:6c:
d2:6d:13:bc:5a:0b:f8:4d:57:69:17:de:ed:df:62:b1:11:d1:
72:3e:ef:7f:79:40:7b:45:cb:3c:40:12:8e:4a:33:4d:66:82:
0a:bf:f0:ac:a0:4f:1c:2d:0c:e8:e6:a9:55:21:a6:42:c5:ce:
50:21:49:5d:88:ff:45:85:88:00:e7:84:d3:fe:d3:f7:90:0f:
3a:52:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:53:16 2026 by rpki-client