Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS218757.roa
File: AS218757.roa (raw, json)
Hash identifier: +oPJ4BCTREh5NYpXQhLqnbrUHjMt0jZYbNPOQ3NVfEY=
Subject key identifier: 5F:AA:EC:0B:F6:06:BD:14:46:AC:FD:B8:83:A1:32:AA:1C:70:B6:70
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 1A4520733453EA79A3E8C6D41D3868D92016F8C6
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS218757.roa
Signing time: Sun 06 Sep 2026 11:01:46 +0000
ROA not before: Sun 06 Sep 2026 10:56:46 +0000
ROA not after: Sun 05 Sep 2027 11:01:46 +0000
asID: 218757
IP address blocks: 177.29.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:45:20:73:34:53:ea:79:a3:e8:c6:d4:1d:38:68:d9:20:16:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Sep 6 10:56:46 2026 GMT
Not After : Sep 5 11:01:46 2027 GMT
Subject: CN=5FAAEC0BF606BD1446ACFDB883A132AA1C70B670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:9f:de:a5:da:9a:2b:ad:f8:41:1a:2a:f7:
5e:3f:d3:9f:5f:f6:c2:de:38:cd:c8:5e:91:36:1f:
15:10:d4:d7:fa:45:59:d4:c3:4e:86:4c:f1:46:6e:
41:17:61:0e:69:b9:1e:09:bf:c2:fe:35:cf:62:5b:
f3:67:7d:48:96:f5:1d:cd:86:0a:8c:15:ef:35:ef:
f4:2a:17:76:26:76:a3:23:4a:2d:4f:d0:f2:f8:8c:
1f:66:93:51:9d:04:bf:a4:69:4c:bf:83:19:48:ae:
16:b0:25:fb:3d:e1:54:fe:9d:aa:43:c3:54:f2:76:
9a:ae:16:cb:95:50:b2:33:a3:95:1e:9c:be:56:45:
99:c8:d1:2b:72:20:8b:78:43:b0:f7:22:00:9d:ff:
c4:05:91:4a:b3:0a:a0:0f:3d:48:76:7e:b9:37:e8:
3c:eb:f9:79:e7:b0:49:2c:a1:34:66:ac:6f:d2:05:
51:bb:8a:d3:9c:1b:93:f3:08:75:8d:73:d2:f8:26:
90:48:85:1a:98:9d:e4:60:ee:b4:b0:f0:e4:d6:c0:
73:e0:d4:b8:55:c0:94:e4:3c:9a:05:1b:72:06:61:
a6:3d:fc:2c:f5:8f:76:c6:52:9c:d0:25:91:bf:b5:
9a:26:de:12:31:a5:30:3f:7f:94:51:07:84:e5:d3:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:EC:0B:F6:06:BD:14:46:AC:FD:B8:83:A1:32:AA:1C:70:B6:70
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS218757.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.247.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8a:d1:1f:ed:1e:01:68:ad:fc:49:97:64:b2:63:e6:60:3c:
80:3b:72:4b:59:90:f4:c7:42:e9:a9:b5:eb:c7:be:62:28:f8:
32:b5:1f:c1:c9:ee:fb:0d:0f:8b:99:2b:a0:21:2b:88:e7:8b:
f2:f1:c8:e0:c7:c8:4e:ab:f7:68:60:b4:2c:64:98:da:ea:4c:
84:67:61:e1:80:da:ee:3b:11:69:88:03:27:15:18:03:de:df:
8a:0e:fa:da:9f:9a:51:0a:8e:b1:f1:03:b0:02:41:9d:46:f5:
13:65:50:f5:eb:32:8b:48:9e:da:37:bd:e2:46:41:7a:b1:ab:
b6:af:08:55:46:b5:ad:fb:bc:67:6a:af:85:44:50:70:28:53:
d4:1d:df:45:14:57:cb:4d:ae:78:f4:ae:a1:b1:3a:5f:c6:ea:
26:6d:e8:ab:ea:b0:b1:2f:24:19:c7:e0:1f:f9:42:dc:fb:1d:
c8:53:ff:41:4d:2a:70:4b:48:93:c1:22:b3:b7:ba:fa:ef:7b:
a1:59:81:9c:08:65:99:0b:42:69:08:83:3d:28:c6:6d:72:5a:
19:ae:c1:f8:21:6c:71:e5:35:cc:3d:b8:67:e6:56:59:5a:8e:
84:07:31:d9:42:78:47:27:3e:2b:a3:84:23:40:d1:06:26:fc:
82:c6:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:54 2026 by rpki-client