Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218661.roa
File: AS218661.roa (raw, json)
Hash identifier: 5oMqm9ye3f3BcdD+TMVnXRcx17k05Q5VlSqde2ITSWg=
Subject key identifier: FE:49:68:64:05:D6:6E:27:DF:02:99:A3:C3:61:4E:8C:80:F7:F3:3B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 716E5FC80EAB1CF9DFFD6DE017A59CD708EB04C5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218661.roa
Signing time: Sun 25 Oct 2026 08:15:23 +0000
ROA not before: Sun 25 Oct 2026 08:10:23 +0000
ROA not after: Sun 24 Oct 2027 08:15:23 +0000
asID: 218661
IP address blocks: 69.90.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6e:5f:c8:0e:ab:1c:f9:df:fd:6d:e0:17:a5:9c:d7:08:eb:04:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 25 08:10:23 2026 GMT
Not After : Oct 24 08:15:23 2027 GMT
Subject: CN=FE49686405D66E27DF0299A3C3614E8C80F7F33B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:45:95:fa:ee:77:25:06:d5:64:06:f3:cc:
96:70:1e:55:45:25:8b:67:89:49:5f:67:97:d9:47:
a9:4f:2b:46:79:2d:b0:8b:e2:c5:db:b0:4f:f6:a8:
fb:5a:dd:5c:4e:89:0f:01:ef:29:91:d0:61:08:72:
f5:80:03:95:3a:3e:9f:63:8c:63:0f:d4:44:96:d2:
30:fa:0e:6c:9e:aa:39:06:4c:4a:81:d8:db:b9:97:
eb:93:4b:ca:4e:5c:58:22:ac:54:28:c0:5c:ec:13:
25:08:2c:77:54:f8:51:e8:8d:a4:73:d2:47:54:ab:
ac:75:d5:ea:b2:46:ec:fe:fe:91:ed:77:ba:87:4e:
5e:3c:22:6f:7f:2a:0f:69:ba:68:2b:c7:0a:73:eb:
a0:14:51:61:18:80:d5:77:87:56:16:58:da:69:6b:
58:46:91:ac:32:8d:1c:ed:c9:31:6c:2d:47:a4:b6:
f2:aa:bd:9c:22:06:60:12:d3:23:6b:70:c6:40:32:
3d:6a:75:f4:95:cf:5a:18:1c:7c:27:84:01:6d:e8:
fe:08:b4:93:06:43:72:ef:b2:c9:79:db:2f:60:52:
33:15:4c:93:1a:b4:0f:82:94:09:33:10:8d:bd:e2:
25:d7:51:90:b8:68:9d:94:24:37:a5:46:ec:41:f8:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:68:64:05:D6:6E:27:DF:02:99:A3:C3:61:4E:8C:80:F7:F3:3B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.90.129.0/24
Signature Algorithm: sha256WithRSAEncryption
57:df:97:cb:81:5c:61:d1:fe:a3:81:7f:d2:74:8e:c2:2b:a2:
0b:6a:2c:da:1a:a4:93:6d:a3:27:86:5d:6c:53:7f:d5:30:0b:
26:a7:98:1e:cf:a8:ca:9a:00:ad:9a:75:93:e9:7c:69:f1:4a:
e5:c6:89:b7:70:0b:dc:2c:4d:39:39:b2:37:8f:e0:b5:59:8b:
26:fa:da:2d:c0:cd:f4:2b:ef:c1:22:a1:c2:a5:32:1f:ed:36:
cb:84:43:cc:c7:5a:a5:d4:fd:39:90:4d:b5:3e:b4:2d:96:18:
17:ab:98:5b:e3:6f:d9:2d:b0:42:f0:6d:6c:51:03:e3:7f:ff:
02:7d:99:67:ba:5b:b2:53:55:aa:06:47:74:5d:8b:bc:39:c8:
b2:9b:b3:9c:4a:b3:59:35:85:4b:ab:45:66:25:81:e3:63:59:
45:b8:7c:84:6a:9b:c3:ed:9a:88:8a:4b:29:34:d7:e4:3f:e0:
8d:84:a1:f6:84:5f:ba:97:71:13:45:3f:68:73:08:8c:bc:c3:
f8:26:28:76:db:42:25:ab:8e:47:9e:78:7f:14:0c:29:2a:89:
c6:06:10:6e:13:0e:12:34:9f:54:37:e5:85:79:ec:8d:d9:6e:
bb:bf:bc:43:53:fe:8c:4f:ee:97:17:0e:f2:dd:db:54:6e:dd:
bb:b1:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:23:10 2026 by rpki-client