Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218643.roa
File: AS218643.roa (raw, json)
Hash identifier: 4W8Fa8HsaDKRioW8HAN3qFOyacvspsM3jfDCxfWwkQM=
Subject key identifier: 26:60:9A:75:E4:DB:BD:13:8B:35:CA:F3:0E:96:E2:37:E4:AB:C4:65
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1F3AFFF3A8403F16D2F89846E99C112DFF2C1820
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218643.roa
Signing time: Sat 17 Oct 2026 10:17:47 +0000
ROA not before: Sat 17 Oct 2026 10:12:47 +0000
ROA not after: Sat 16 Oct 2027 10:17:47 +0000
asID: 218643
IP address blocks: 2a14:7580:ff80::/44 maxlen: 48
2a14:7583:efd2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 02:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:3a:ff:f3:a8:40:3f:16:d2:f8:98:46:e9:9c:11:2d:ff:2c:18:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 17 10:12:47 2026 GMT
Not After : Oct 16 10:17:47 2027 GMT
Subject: CN=26609A75E4DBBD138B35CAF30E96E237E4ABC465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:4a:51:a2:f7:79:23:7f:da:51:7b:e6:ad:
0a:4e:1b:03:ee:1a:70:43:46:69:87:4e:b9:30:5d:
c3:3f:4b:b5:e3:a9:27:03:32:55:e3:10:8c:e3:19:
34:f8:5d:dc:f0:9e:a0:63:6e:4d:5f:be:0b:a3:5f:
73:39:82:f9:f7:aa:b7:7a:4b:78:ca:2b:2c:a1:60:
7f:77:72:23:21:74:c1:99:66:0a:e3:08:d8:6b:06:
25:3d:e3:2a:bc:2a:15:71:b4:f3:5d:25:da:9d:6d:
84:aa:dd:a1:7a:ba:63:d4:38:e1:38:4f:e0:16:98:
38:33:20:08:99:c4:e8:a9:2d:13:33:47:a3:7e:bb:
21:10:53:0e:28:ee:c5:a2:76:af:6e:69:b2:8c:2e:
2e:67:e4:1a:a5:16:aa:56:a0:6c:dc:ba:52:f8:89:
d6:d1:a0:78:ad:aa:4b:b8:a5:2c:5f:d9:32:4b:65:
aa:71:84:62:49:9f:d4:4d:1f:46:f5:be:78:07:2e:
14:aa:c8:98:57:af:e9:3a:a3:1d:e0:11:69:f6:56:
8b:d9:bc:d3:5b:da:8c:54:46:73:51:17:e8:86:1a:
c0:50:91:c2:c2:fa:9b:91:24:53:c4:b1:58:49:a0:
a6:8c:d3:2f:8f:b0:5d:89:a5:c0:bd:77:10:f3:38:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:60:9A:75:E4:DB:BD:13:8B:35:CA:F3:0E:96:E2:37:E4:AB:C4:65
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff80::/44
2a14:7583:efd2::/48
Signature Algorithm: sha256WithRSAEncryption
6b:fc:e4:05:52:d6:a7:05:e3:3a:c3:ba:b2:6c:bc:4a:5d:5f:
08:6f:97:3e:54:dc:85:c2:70:e3:fa:3f:1e:55:6c:d6:6f:53:
e7:64:5d:cd:7a:43:ce:4f:c3:04:44:18:02:49:65:d9:05:32:
8c:45:3f:40:59:9a:d8:bb:dd:a6:09:5e:05:c9:72:32:3f:d1:
df:36:da:4c:16:3b:4c:23:19:a6:73:76:26:4f:4e:fd:6f:3c:
41:f1:12:8e:56:d2:84:eb:a4:4d:37:d2:5e:06:3c:b9:e1:e3:
f3:81:e6:5a:10:1e:38:ba:6b:a0:10:eb:ca:17:e2:52:a9:52:
c1:c7:37:bf:a5:9b:62:74:a0:60:4a:5d:a9:49:d4:72:da:32:
5a:c5:86:e7:ab:43:08:6e:d8:56:23:11:20:b7:25:3a:5b:6e:
8a:63:83:0a:1e:e3:21:04:60:4b:07:0c:fc:77:10:79:1f:80:
db:dc:3c:41:52:27:58:e0:5a:de:4f:e7:bd:3f:23:96:23:36:
aa:55:7d:d0:c7:a1:15:a1:a6:95:11:ea:f4:a7:56:65:76:32:
20:50:0a:f2:71:95:92:e3:a9:be:b4:08:35:ff:1b:2e:e0:46:
8c:cf:52:8e:3e:9a:c4:da:40:a5:bb:1f:70:63:4f:40:aa:51:
78:d8:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:10:19 2026 by rpki-client