Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218383.roa
File: AS218383.roa (raw, json)
Hash identifier: bH4gpyZyAoZHoYMOJ4LBSYN6/0ujkjuBYxzS3TMSjRQ=
Subject key identifier: 60:10:18:C9:7E:6D:7F:25:C6:12:97:AD:45:FD:1A:F6:E2:AC:4F:7C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 23B301F4A89FA92B224401C55D14B38201408DE0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218383.roa
Signing time: Thu 12 Nov 2026 08:55:06 +0000
ROA not before: Thu 12 Nov 2026 08:50:06 +0000
ROA not after: Thu 11 Nov 2027 08:55:06 +0000
asID: 218383
IP address blocks: 145.223.5.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
162.141.5.0/24 maxlen: 24
167.148.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b3:01:f4:a8:9f:a9:2b:22:44:01:c5:5d:14:b3:82:01:40:8d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 12 08:50:06 2026 GMT
Not After : Nov 11 08:55:06 2027 GMT
Subject: CN=601018C97E6D7F25C61297AD45FD1AF6E2AC4F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:40:f4:8b:1b:d3:5f:3f:e4:b3:e0:6b:f2:
87:98:d0:82:f6:32:23:2a:58:89:a0:48:33:15:5c:
d0:f2:f2:0e:6c:48:0d:aa:df:b5:c5:8c:fa:90:d8:
9b:e9:69:18:52:8d:fc:e2:03:4a:06:62:92:ac:74:
d1:04:1e:5c:4a:5a:4b:9b:96:59:f9:9d:30:8a:f2:
ca:e2:1e:1f:62:47:b2:30:ac:b8:f8:58:a5:0d:b4:
d3:01:fb:44:63:2b:e3:66:3e:37:02:2e:64:87:1e:
78:0d:9a:99:c9:3f:0c:70:a6:c2:b9:bb:95:d5:70:
cd:4c:f4:a1:4f:ec:67:8f:39:67:4c:f1:21:b6:9b:
4d:22:6b:51:20:a0:72:61:5c:f3:62:fd:05:51:87:
2a:5f:59:86:63:6b:db:65:ab:b9:21:8c:1d:35:93:
63:dd:ee:2d:5e:76:b7:f8:26:62:f0:41:70:07:6e:
a3:8f:39:6f:c0:fe:f9:32:f9:fb:72:f4:f3:19:8b:
1d:de:97:7d:c0:27:7e:50:97:27:38:66:1e:41:d0:
20:5e:09:7e:08:95:cd:09:ff:e4:34:66:f1:6c:d0:
2e:a5:59:c0:f5:da:b3:43:9c:52:0d:20:c9:52:09:
ea:e8:22:1c:39:41:dc:72:69:61:75:64:1f:84:10:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:18:C9:7E:6D:7F:25:C6:12:97:AD:45:FD:1A:F6:E2:AC:4F:7C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.5.0/24
148.135.173.0/24
162.141.5.0/24
167.148.188.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d9:9d:fb:75:2f:d9:e8:d0:fc:3d:04:2d:3c:91:69:d1:66:
f6:db:ae:25:2f:ba:0c:f0:c6:25:9c:5f:a7:01:bd:86:29:40:
5e:34:96:c3:6f:c8:ff:6a:a5:17:18:5c:b5:01:47:58:07:76:
d9:c2:5b:a3:70:7b:9c:99:98:01:35:af:02:41:74:9c:9d:0b:
24:34:11:d6:36:de:10:1d:a2:41:32:9f:94:1c:34:94:1d:a3:
7e:1d:b8:b1:d7:2c:fc:3a:65:09:84:e7:0a:fd:70:8b:9f:f6:
10:45:00:63:27:91:98:6f:6a:db:09:74:46:3e:78:ba:63:a1:
c6:62:0e:92:64:4a:aa:3b:c1:08:b8:c9:99:3f:cf:5a:97:81:
e9:5a:ec:15:91:77:b6:a3:4b:d5:21:7e:7d:dc:24:85:1d:d1:
7f:bc:d0:65:55:67:e7:c1:e3:58:da:2a:00:44:76:b5:e4:3e:
0a:50:41:a1:5b:ee:b4:eb:2e:fd:f0:ba:ce:5c:56:46:75:05:
24:bf:f3:90:35:ac:9e:c2:04:69:a2:09:7c:e8:88:38:4c:97:
4c:f5:cf:57:a3:b6:66:97:4c:09:3c:da:e2:d3:a5:ac:ff:8f:
67:0b:9a:a2:3e:16:d7:47:32:a9:6f:36:9b:f9:c4:d1:16:78:
84:97:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:47:24 2026 by rpki-client