Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS218616.roa
File: AS218616.roa (raw, json)
Hash identifier: 786XTHpeODi5YxrMsPg8SpkZX1v+14LOMca7iXCRa4c=
Subject key identifier: D2:57:81:44:95:7E:5A:D4:42:3D:5B:92:B7:B7:EA:C7:62:16:A2:2B
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 1DF0342F6FD82C18142EA251EA32DFFBEE0A2CDD
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS218616.roa
Signing time: Sat 14 Nov 2026 08:05:30 +0000
ROA not before: Sat 14 Nov 2026 08:00:30 +0000
ROA not after: Sat 13 Nov 2027 08:05:30 +0000
asID: 218616
IP address blocks: 177.122.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f0:34:2f:6f:d8:2c:18:14:2e:a2:51:ea:32:df:fb:ee:0a:2c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 08:00:30 2026 GMT
Not After : Nov 13 08:05:30 2027 GMT
Subject: CN=D2578144957E5AD4423D5B92B7B7EAC76216A22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:55:51:19:92:8d:55:20:ca:0d:a7:42:21:
4e:8a:43:08:3a:cb:7c:88:e1:25:f4:a2:a7:3d:09:
13:bf:cf:6f:8f:97:f7:10:4a:93:0f:0c:b4:d8:bc:
4d:f5:de:f5:3f:d2:a5:12:ea:7a:ac:29:30:95:34:
d5:f1:92:3a:d2:8e:17:e5:5c:dd:90:22:db:93:d1:
77:a1:80:79:b1:3c:24:06:a9:ee:f0:39:1d:cc:06:
60:00:2e:e6:fa:07:cb:4d:0e:c1:7b:a6:c4:2c:b5:
8c:e5:8b:e1:cc:37:7c:20:2c:2d:ee:78:b6:26:25:
ac:7b:cb:59:23:35:dc:a5:01:bb:1c:ed:e5:01:ad:
1d:08:bf:2c:b3:d7:ba:a7:d2:0f:c4:81:d5:2f:b9:
48:ce:ac:d3:dd:d9:d8:f3:19:2c:83:d2:64:ee:3c:
83:32:0a:3a:88:55:1e:e1:c6:f7:5b:a7:7f:97:70:
03:4e:08:b3:f7:cc:ca:e3:dc:74:a6:59:99:69:1c:
d7:bb:c1:e6:82:56:58:b2:8e:75:71:35:3c:61:aa:
cc:a2:25:f9:6e:d6:bb:3f:d8:4e:75:7b:71:41:be:
94:09:1e:76:07:e3:79:54:a1:c0:1b:9a:aa:4d:d0:
f6:93:00:85:14:0c:a2:d9:4b:cb:e1:b5:e8:08:7f:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:81:44:95:7E:5A:D4:42:3D:5B:92:B7:B7:EA:C7:62:16:A2:2B
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS218616.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.122.232.0/24
Signature Algorithm: sha256WithRSAEncryption
39:75:cf:86:fc:7b:20:5f:60:07:c2:bc:3a:f9:b2:c3:a4:fa:
a0:a8:3f:a5:95:e9:cd:bb:0a:7d:98:8f:c0:42:0f:ed:d3:cb:
ab:05:e0:22:2d:a4:7e:e1:0c:3d:3e:71:38:a8:94:ef:11:34:
12:ce:02:b1:e4:bf:ab:0b:14:34:b3:bf:17:a6:88:68:a2:d4:
aa:93:d6:f4:d7:60:6a:dd:f4:65:18:de:7e:21:13:65:36:73:
56:90:8b:f5:69:42:21:1d:f9:77:6d:a7:45:1e:8b:0f:db:c7:
68:a2:69:8b:67:7a:89:f3:e8:26:2d:c4:15:5f:7c:e4:ed:af:
18:fe:b8:9a:fd:00:f5:57:26:e4:76:84:6f:a1:fb:ea:df:77:
76:50:be:ea:e6:c7:4d:83:1d:c1:ea:17:9c:ef:b7:7e:ed:ad:
d4:ab:75:86:ff:f0:96:0b:57:de:27:b2:04:56:4d:0d:d2:12:
25:de:00:a2:54:fb:8a:9b:f8:bc:25:3c:e3:be:26:23:1c:2d:
e2:23:c3:55:fe:38:40:7c:6c:11:bd:f9:66:6f:ae:8a:12:af:
2f:55:36:4b:80:c7:f6:27:1a:27:de:c7:f8:4a:d1:3b:73:95:
65:ec:25:d9:57:cd:ea:a6:83:dc:a6:2d:f1:e2:8d:55:df:29:
d9:ad:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:51 2026 by rpki-client