Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218643.roa
File: AS218643.roa (raw, json)
Hash identifier: r9axnOsWgks/nH8ifU2CZ0RKQPnoduiWzt5Ge0XPioo=
Subject key identifier: F9:D3:44:54:A5:72:C7:BF:21:14:C3:96:B2:83:8C:E9:A6:85:57:C1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0AF963F61C3ED920B1E8CEA51AD688BBC59C08E7
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218643.roa
Signing time: Thu 17 Sep 2026 11:34:54 +0000
ROA not before: Thu 17 Sep 2026 11:29:54 +0000
ROA not after: Thu 16 Sep 2027 11:34:54 +0000
asID: 218643
IP address blocks: 2a14:7583:efd2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f9:63:f6:1c:3e:d9:20:b1:e8:ce:a5:1a:d6:88:bb:c5:9c:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 17 11:29:54 2026 GMT
Not After : Sep 16 11:34:54 2027 GMT
Subject: CN=F9D34454A572C7BF2114C396B2838CE9A68557C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:40:5c:d7:21:9b:bb:c4:96:78:3f:bc:83:
09:b5:1c:87:dc:8c:53:f0:90:4d:97:86:e8:0b:a6:
33:21:0e:fd:23:6e:af:fd:09:2f:62:93:36:fa:62:
8c:15:7a:63:a8:11:ae:d0:39:b5:37:6c:7c:7e:c2:
8d:07:cf:2a:7a:cd:bc:47:89:29:dc:7e:f4:82:7c:
89:1e:9c:a0:6c:12:51:4b:df:39:a2:bd:1f:c4:90:
5d:a1:49:4e:23:a1:3b:16:15:6a:a8:48:88:ce:d0:
45:fd:de:f5:6c:db:28:ca:1d:87:17:c6:03:97:1b:
ad:e3:04:da:3b:e6:94:54:fd:9d:cc:69:9d:b6:1a:
80:c4:73:88:4a:87:fa:ef:ec:2c:18:42:fb:4b:28:
72:bb:d1:a2:7a:07:b5:07:51:9f:8c:98:09:7c:8a:
ab:8b:df:f3:db:8b:0f:0e:c1:e9:b6:40:72:72:82:
1f:7e:8a:b6:64:9e:59:bc:a2:0d:8e:4a:d0:9d:8b:
08:63:17:c4:68:93:0f:f8:bd:0e:34:b4:ae:54:f2:
34:0e:06:b8:41:ad:62:4b:97:74:d8:1c:45:57:f5:
a9:32:84:83:d4:4b:7d:c8:6f:b0:2b:81:dc:34:f8:
42:e9:8b:04:07:3b:81:d1:5f:f8:a4:37:2c:d0:34:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:44:54:A5:72:C7:BF:21:14:C3:96:B2:83:8C:E9:A6:85:57:C1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:efd2::/48
Signature Algorithm: sha256WithRSAEncryption
5a:a0:1a:05:c8:b9:89:96:db:2e:a2:05:44:14:18:89:26:6b:
0a:77:15:fa:f5:5c:09:29:26:78:62:d7:31:05:e2:4a:c1:38:
a3:2a:dd:4d:b2:e6:de:b0:1d:22:3f:c6:07:c1:93:03:bb:77:
bb:e0:d8:d2:25:8d:fb:21:f7:b4:33:64:4d:47:81:db:a1:84:
54:79:3f:93:49:60:2f:35:4c:07:8c:eb:a8:4f:23:cc:22:41:
d5:d2:8e:78:00:2d:6d:4b:55:a8:35:7f:4c:7b:49:67:cf:ec:
5a:39:ad:b3:b3:fb:7e:e7:47:6c:b6:a5:50:24:74:f0:ab:73:
bf:9c:2e:1e:8e:fc:2a:49:8e:22:9d:b4:8c:5e:3d:fd:76:db:
0a:30:3d:80:f8:ee:7f:19:f8:30:04:bf:92:59:09:01:6b:1e:
39:a3:c5:6c:77:03:aa:24:04:3d:4b:e6:93:78:54:49:fc:f3:
82:96:59:58:be:f5:77:86:e6:ec:c5:bb:64:0c:25:3a:e2:f1:
b4:35:20:59:e2:b3:5d:38:66:6e:0a:c5:91:b4:c0:e6:7c:93:
03:c8:ef:3b:43:83:33:f0:30:d9:31:fe:ff:52:be:3d:35:2b:
f7:67:29:ff:45:87:d6:88:cb:03:73:8b:33:59:cb:b8:9a:0b:
57:9e:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:53 2026 by rpki-client