Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218717.roa
File: AS218717.roa (raw, json)
Hash identifier: Ua9yucKYjKctc4AQF+v8YMTlLP/UFMbdxLOnwnfaSCU=
Subject key identifier: 10:26:C3:85:15:D7:32:EF:E0:1B:6C:B3:CD:8D:67:0B:A7:0C:AA:24
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 54CFDF4E72271C85D3ED73212B3FE3FD354864F8
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218717.roa
Signing time: Sat 12 Sep 2026 20:30:12 +0000
ROA not before: Sat 12 Sep 2026 20:25:12 +0000
ROA not after: Sat 11 Sep 2027 20:30:12 +0000
asID: 218717
IP address blocks: 143.20.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:cf:df:4e:72:27:1c:85:d3:ed:73:21:2b:3f:e3:fd:35:48:64:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 12 20:25:12 2026 GMT
Not After : Sep 11 20:30:12 2027 GMT
Subject: CN=1026C38515D732EFE01B6CB3CD8D670BA70CAA24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:ca:e5:d3:f0:f6:b6:2b:c4:11:58:4e:4b:
d4:7c:82:fd:8a:1d:8e:ac:fc:cb:7a:0e:eb:f0:38:
98:8c:82:7e:c8:c7:3b:20:0a:3b:59:12:87:13:da:
ca:6a:f7:57:91:0f:00:27:de:ca:b6:08:78:a1:96:
37:f9:86:5d:7a:a3:ca:b1:2d:fa:3c:6c:1f:40:88:
8b:e8:78:bb:f0:02:95:e1:63:fe:77:50:0d:ee:c4:
b2:ba:e4:44:fe:dd:31:5a:12:c5:60:4c:ce:38:e5:
2c:e0:41:73:18:36:d9:3b:fb:06:7a:d9:8b:96:4b:
c8:e2:a7:a1:bb:6f:da:5c:5a:41:6c:1b:b3:e8:d1:
44:f8:04:31:3e:35:da:b6:76:f0:63:c1:39:80:75:
73:00:0d:40:a7:7e:9a:e8:68:04:f6:58:49:0b:9f:
61:f0:48:77:5c:60:1a:91:65:30:3b:14:22:d7:07:
6f:f5:b0:74:c6:bc:d6:f1:78:e9:9c:cc:37:a0:74:
f2:f4:1b:d5:b0:84:b0:d9:0c:07:62:ef:3e:1e:2d:
ab:02:ff:b4:b4:bf:79:d9:eb:03:92:0f:61:3c:3b:
4f:19:e7:67:33:d0:f4:41:86:b6:ce:0d:14:b3:9a:
4a:ba:43:2b:0b:49:83:e0:d7:68:75:84:34:3a:e3:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:26:C3:85:15:D7:32:EF:E0:1B:6C:B3:CD:8D:67:0B:A7:0C:AA:24
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218717.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d0:31:1d:bf:66:63:be:ec:4e:c0:4f:aa:27:d4:74:1e:4a:
28:4e:94:de:c2:83:e9:3a:65:bb:ae:66:1c:b6:5f:46:0c:7a:
10:5a:31:46:84:99:d3:73:31:38:c5:da:7b:60:18:9e:73:38:
2d:b9:a1:2f:78:eb:19:06:49:29:27:ee:61:c7:17:b1:d6:e7:
e4:82:d3:af:e9:e8:11:9f:15:b9:f1:07:71:e5:30:eb:05:b1:
d8:08:76:5b:2b:52:c5:4c:c5:10:b9:69:e9:ad:04:dc:84:b5:
26:17:df:18:2c:f1:09:0f:a0:47:ac:33:f6:e7:86:d8:90:d4:
7f:82:cb:2b:9c:ad:74:97:ca:ea:e7:ab:34:04:d8:b1:87:61:
47:6d:dc:c2:e5:53:80:ae:61:e0:ef:fb:99:9f:01:00:bf:be:
57:a8:d9:b5:c7:e9:15:86:47:51:0b:9d:78:91:3f:18:52:e8:
e4:97:40:dd:00:da:9d:9a:ee:b7:37:b4:20:2a:5c:e9:24:81:
90:e9:95:55:99:b8:4b:ca:e0:b6:aa:50:2d:f8:11:8b:76:c5:
06:1d:38:b4:da:4b:67:3f:d4:f9:42:e5:9f:f2:ea:35:da:32:
65:21:6b:aa:4b:03:19:10:fb:eb:b8:74:f9:6e:f7:af:fa:53:
ab:47:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:05 2026 by rpki-client