Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218668.roa
File: AS218668.roa (raw, json)
Hash identifier: TOSswQxypjIjXGmIHYzbeV56QEUkneHvUnFbslbgSAI=
Subject key identifier: 54:D8:CA:4B:B0:66:95:E7:57:3E:C2:A6:1F:A0:90:DF:50:F4:03:E9
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 044117B1397F5B5B8D0AAB64212834E3D238596C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218668.roa
Signing time: Mon 14 Sep 2026 12:46:02 +0000
ROA not before: Mon 14 Sep 2026 12:41:02 +0000
ROA not after: Mon 13 Sep 2027 12:46:02 +0000
asID: 218668
IP address blocks: 2a14:7581:fe1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:41:17:b1:39:7f:5b:5b:8d:0a:ab:64:21:28:34:e3:d2:38:59:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 14 12:41:02 2026 GMT
Not After : Sep 13 12:46:02 2027 GMT
Subject: CN=54D8CA4BB06695E7573EC2A61FA090DF50F403E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:22:a9:cb:eb:fb:70:37:81:40:ab:de:e6:
44:46:37:d8:09:e0:23:9b:af:14:b7:d4:5a:fe:33:
0f:21:4c:9a:03:fa:6f:b3:c9:3a:ee:c9:1a:91:40:
60:8f:2d:ad:66:ec:04:6e:12:af:0b:8a:62:71:77:
02:61:94:d8:0d:73:d5:7d:1c:78:c5:7b:a7:9a:1d:
34:a8:cc:3e:e0:a2:04:7d:90:0a:fb:0a:00:a6:29:
45:b2:ee:d1:4b:f6:a9:bb:1d:4a:72:f8:58:4a:94:
29:5e:df:b3:2f:9c:5c:82:33:65:08:43:ad:6a:30:
7f:ed:c5:fe:95:bf:bf:8a:8d:f7:af:94:7e:16:73:
60:11:1c:c5:40:96:36:fd:44:cf:64:38:04:db:b8:
a4:f2:b1:b6:08:e9:7c:ba:e4:51:d1:91:02:02:5b:
87:c8:82:9c:17:3d:3a:d0:a9:8d:6c:f0:75:9c:97:
14:5d:ae:35:ad:91:92:32:aa:eb:4f:1b:25:b7:71:
aa:93:fc:0b:ec:54:b4:6e:0c:08:44:cf:5a:fd:5a:
08:6a:12:c2:fe:cb:b6:06:db:6d:a9:62:24:81:4e:
40:75:6e:50:91:d4:81:7c:28:d2:97:52:c2:a3:fc:
5b:6e:13:8b:9c:b7:57:da:5c:11:f9:ac:4e:d0:4d:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:CA:4B:B0:66:95:E7:57:3E:C2:A6:1F:A0:90:DF:50:F4:03:E9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218668.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fe1::/48
Signature Algorithm: sha256WithRSAEncryption
34:f8:e7:02:b0:26:f6:a7:fd:3c:40:55:c9:a3:2e:50:53:5f:
b5:7b:10:2b:ce:39:b4:82:f3:9c:4d:8c:68:9f:7e:38:b2:e0:
a8:4f:07:75:19:da:90:e3:1d:1c:56:c6:42:57:f1:8e:4f:79:
90:ba:3b:d8:41:b5:67:0d:59:a7:55:72:c3:a7:69:21:d5:5f:
7e:d5:14:b7:c0:f0:ae:33:b1:9b:d0:65:df:4b:9e:2d:35:28:
82:15:3b:aa:f5:0e:52:f9:92:31:38:8a:aa:4f:05:80:c3:69:
ae:d6:41:4c:70:34:4a:ba:6f:71:06:ce:87:4b:a4:a3:9e:e9:
21:0d:3c:24:e5:1b:0c:16:01:80:1e:07:8c:81:2c:3e:a2:2d:
c7:b6:45:11:10:ee:a1:cc:64:25:17:d0:10:e5:fc:16:05:d4:
05:2f:af:b2:14:9e:09:13:89:9f:e5:94:12:67:0d:10:9c:92:
d6:e8:61:61:90:b9:01:b0:68:5b:ea:6a:c7:5c:40:bc:2b:d6:
c9:1f:37:9f:02:ba:b2:80:ab:76:6a:07:44:5c:bb:e8:a1:37:
0c:2b:6b:2c:fd:cd:a5:04:2b:38:61:39:a4:b0:9d:2d:9e:f5:
bc:d2:84:c7:93:3c:7c:71:75:f5:c4:ad:4a:ff:a3:cb:12:34:
12:b4:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:36:40 2026 by rpki-client