Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218672.roa
File: AS218672.roa (raw, json)
Hash identifier: RRGc+qD7tlGtPWrZLXFtHIXkDEUF/YQmkJLxht7BjmM=
Subject key identifier: E0:F7:C4:BE:74:CA:52:48:8A:E2:2E:A9:B0:B7:FF:A3:32:3B:2E:86
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 73DA6BD5D30BAD4D395C5728685A3701B1A9D96D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218672.roa
Signing time: Wed 16 Sep 2026 20:08:06 +0000
ROA not before: Wed 16 Sep 2026 20:03:06 +0000
ROA not after: Wed 15 Sep 2027 20:08:06 +0000
asID: 218672
IP address blocks: 2a14:7581:fe0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:da:6b:d5:d3:0b:ad:4d:39:5c:57:28:68:5a:37:01:b1:a9:d9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 16 20:03:06 2026 GMT
Not After : Sep 15 20:08:06 2027 GMT
Subject: CN=E0F7C4BE74CA52488AE22EA9B0B7FFA3323B2E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:9a:a4:6d:36:97:12:31:6d:ad:01:92:8f:
49:1c:0d:f5:8e:49:e6:fb:35:3e:35:7f:40:99:be:
4a:fe:48:ca:23:65:70:32:4a:aa:a7:31:21:7c:fe:
dd:6b:3a:30:b0:98:47:b9:4d:08:3c:47:ff:b5:40:
81:2c:75:eb:6e:23:81:00:18:d9:3e:81:84:33:21:
a6:5d:19:a0:da:58:c2:f2:5c:1d:44:9a:af:83:a9:
a6:24:46:99:43:47:cf:09:96:37:ce:45:ef:2b:a1:
6a:63:f3:57:be:9b:0f:87:62:a0:38:fa:b5:ab:a0:
02:6b:b1:60:f1:c4:2d:af:5b:aa:79:41:6c:bd:fa:
6a:b7:c9:08:f5:48:d9:0f:93:f2:1e:ea:d4:35:54:
33:b8:cf:de:6c:37:9f:38:9a:59:f2:f2:87:6b:d3:
f8:d2:ef:a2:91:0e:1e:24:80:ff:87:d3:8a:31:2a:
03:6d:37:44:59:a2:00:9e:e7:fb:35:a9:80:ae:4d:
d7:4b:9d:ca:49:4d:9e:06:aa:53:76:3d:82:9b:bc:
71:e5:36:1c:3d:bd:fa:bb:73:6d:e4:28:4a:8d:ab:
d2:c8:56:cf:bc:8a:d1:31:70:d6:a7:ec:39:fa:5e:
b5:4f:60:15:b0:4b:6f:4f:80:21:67:a1:b0:31:2e:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F7:C4:BE:74:CA:52:48:8A:E2:2E:A9:B0:B7:FF:A3:32:3B:2E:86
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fe0::/48
Signature Algorithm: sha256WithRSAEncryption
74:71:da:e3:8b:4e:93:77:a6:89:ea:81:8b:9d:7f:d1:a7:24:
ed:3f:a1:88:82:ac:a0:7a:b8:55:8b:c3:b3:eb:7c:20:ff:32:
1c:74:ab:a3:cb:79:c9:2b:f3:05:83:79:9c:c2:ac:54:56:08:
26:88:40:c5:aa:2a:b5:0b:fe:6a:da:fe:5a:a6:e6:a8:c4:09:
24:0a:cd:41:39:a4:70:51:14:4e:d5:b0:3d:3e:61:8e:30:f3:
b7:4c:1c:c4:9b:79:77:97:70:7b:b6:92:49:2b:a7:3f:2f:87:
c8:50:f0:ca:72:7d:ed:3f:0b:85:3e:98:39:fc:ca:63:27:c0:
42:4c:6f:a6:7b:7f:76:fd:d9:1b:13:73:ba:80:b5:53:8f:36:
ee:02:8a:43:35:b2:65:a7:e5:18:4b:3a:d9:65:77:9a:57:66:
60:76:07:4d:cb:72:7c:c7:e8:b4:05:ab:20:93:2a:bc:3e:ef:
de:9d:4d:f7:7b:f4:b6:b8:a9:02:bb:f8:46:62:12:ea:9e:d5:
4b:bc:4f:71:8e:33:68:cd:40:f0:6d:2a:93:3e:ef:d7:52:14:
83:bb:45:a2:bd:23:78:dd:0e:66:0f:cc:93:88:2c:f8:48:94:
4f:5f:d1:53:2e:46:34:41:d3:66:98:ed:f1:a6:75:5e:56:95:
a7:f1:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:56 2026 by rpki-client