Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS218829.roa
File: AS218829.roa (raw, json)
Hash identifier: 2jYZxH3zEknYietEXl6XtFCNYs/IrUG+Ya+1f8+Vvcs=
Subject key identifier: 33:DA:37:8A:37:CB:A5:8D:A3:E6:2C:23:03:AB:0B:0B:2D:E5:DD:C9
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1B2BEAD861B16A6913C98A051EC2C2699FBF008D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS218829.roa
Signing time: Sat 05 Sep 2026 06:59:12 +0000
ROA not before: Sat 05 Sep 2026 06:54:12 +0000
ROA not after: Sat 04 Sep 2027 06:59:12 +0000
asID: 218829
IP address blocks: 141.11.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2b:ea:d8:61:b1:6a:69:13:c9:8a:05:1e:c2:c2:69:9f:bf:00:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 5 06:54:12 2026 GMT
Not After : Sep 4 06:59:12 2027 GMT
Subject: CN=33DA378A37CBA58DA3E62C2303AB0B0B2DE5DDC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:cd:55:bc:f1:dd:30:34:67:48:1b:85:15:
d0:6d:ce:66:9e:e9:cc:8c:72:5d:ef:21:1d:6e:2b:
8e:9c:c9:ab:4a:0b:be:99:82:ae:75:31:1d:24:7a:
e7:b7:5a:ea:82:fe:81:a3:2a:7b:46:16:4e:2f:d1:
b5:56:59:56:80:f3:10:77:03:5a:b6:d0:c1:9b:c5:
a8:93:ea:83:48:98:f3:ba:6e:06:13:cc:b3:75:9b:
ee:dd:68:c4:80:2c:d8:02:50:95:98:5b:fb:d9:7b:
da:89:40:f3:e7:01:34:f5:4b:aa:60:02:ed:13:51:
6c:fe:3a:7d:e1:4e:35:f1:1e:26:ee:1e:4b:b6:01:
f7:c4:08:6a:dd:16:70:0b:07:f8:50:8f:90:9a:03:
93:ad:32:01:f3:49:83:d0:85:88:d0:d1:7f:52:88:
83:9c:d4:4b:56:de:83:ce:e1:79:3f:bb:c8:36:2f:
79:33:9e:fe:75:27:43:f5:da:1c:97:36:6d:6d:2f:
8c:20:c9:4d:1a:d4:17:1c:bc:c7:c5:4f:f4:2d:28:
1c:33:d4:4a:fa:e9:63:00:2a:fd:1e:8a:c8:61:06:
a9:88:c3:d2:d0:06:d6:aa:41:c6:49:d7:b6:81:0e:
a5:06:df:ee:94:a0:ba:e1:f0:11:84:a1:c7:52:be:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:37:8A:37:CB:A5:8D:A3:E6:2C:23:03:AB:0B:0B:2D:E5:DD:C9
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS218829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.7.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f6:fe:3b:d5:c7:54:f3:64:f7:26:bd:b9:32:2b:df:e3:97:
a3:3e:f5:de:65:17:5e:b8:0f:3f:4f:0c:9a:b4:7e:40:15:35:
79:1c:cd:38:25:ff:33:14:c7:99:86:b0:57:a7:07:57:b2:09:
79:a6:f7:9d:d9:96:5f:fa:ad:11:23:95:96:fd:7d:ba:7e:a5:
ed:ed:59:cc:84:92:85:67:c2:f9:96:2f:33:74:92:79:65:72:
8d:f1:3b:e1:2d:2b:c0:b4:25:ad:1c:0e:f9:f7:a7:91:62:7b:
be:db:98:8c:03:2f:0e:90:2b:90:63:ef:bb:12:8d:22:83:6f:
17:fa:7c:46:55:4b:b1:82:7d:e9:52:7e:90:ca:aa:09:d9:64:
92:75:db:4a:05:61:81:e4:b9:f5:ac:88:89:28:8f:dc:c1:c3:
4f:67:e9:2d:24:98:33:a3:49:32:0b:ce:47:3a:dd:fa:55:95:
eb:17:9e:7d:96:e2:38:44:da:61:c6:10:74:f9:3b:e3:6b:83:
e4:99:80:97:38:65:62:05:54:2f:5a:e9:81:97:43:c4:0d:d1:
6b:b1:f6:66:0f:b1:02:72:76:83:2d:bf:92:9e:fd:6f:81:12:
6b:f3:57:93:bf:28:04:a9:48:47:57:c5:6f:00:69:8d:d8:9a:
5f:13:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:44:52 2026 by rpki-client