Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218780.roa
File: AS218780.roa (raw, json)
Hash identifier: EYe840tSq5jxzSfmuEYGD106uqgDrkgyDjWHoBOjeUU=
Subject key identifier: AE:D9:F1:F2:82:EA:FF:E0:24:7B:E6:3F:46:58:43:35:74:0D:D5:2C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 575D074DEE1513D6F10B876F60CB38C70FF59FFB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218780.roa
Signing time: Wed 11 Nov 2026 08:03:50 +0000
ROA not before: Wed 11 Nov 2026 07:58:50 +0000
ROA not after: Wed 10 Nov 2027 08:03:50 +0000
asID: 218780
IP address blocks: 96.62.204.0/24 maxlen: 24
96.62.206.0/24 maxlen: 24
143.14.87.0/24 maxlen: 24
162.141.25.0/24 maxlen: 24
162.141.27.0/24 maxlen: 24
162.141.147.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/24 maxlen: 24
167.148.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5d:07:4d:ee:15:13:d6:f1:0b:87:6f:60:cb:38:c7:0f:f5:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 11 07:58:50 2026 GMT
Not After : Nov 10 08:03:50 2027 GMT
Subject: CN=AED9F1F282EAFFE0247BE63F46584335740DD52C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:7d:55:03:ac:6e:c0:1a:af:77:72:8f:74:
3f:e8:2c:15:75:51:93:30:3b:56:ff:2b:85:7c:78:
59:d9:c8:b1:86:ec:38:1c:b6:5c:f0:b8:6f:7d:b9:
2b:77:36:66:32:58:0e:d6:7a:dd:b3:f1:64:a4:a0:
3d:00:0c:51:06:19:b7:c2:a6:65:ed:d1:ad:a4:47:
eb:6b:f4:a1:ff:b5:7c:1e:99:89:23:88:21:82:1d:
76:55:3a:58:b9:b9:13:7b:2a:1e:45:3b:85:29:7b:
14:e0:62:33:8a:4a:bc:cc:7c:9a:bc:cb:64:db:f8:
77:32:44:f1:60:a4:e7:dc:02:f5:bd:44:99:5e:43:
d5:47:a6:6c:17:34:70:f2:56:ac:8e:27:b7:e8:0c:
6b:6b:1f:71:85:f6:15:03:c6:84:eb:b1:29:4b:77:
72:23:70:ed:a3:4e:2f:f4:ac:0f:48:de:df:8c:4f:
00:b1:e2:dd:3a:1f:97:b2:cc:f9:9d:78:4b:1a:be:
13:d4:8a:87:4c:6b:34:4a:9e:66:56:f1:f9:fa:c2:
c6:ee:a6:48:dc:c3:ae:ff:9f:90:dd:5b:23:11:47:
8f:e0:8f:b3:d6:b5:64:43:ae:9c:51:24:34:80:2c:
68:24:3f:73:4d:b3:33:ad:b3:f9:64:1b:c7:8f:aa:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:F1:F2:82:EA:FF:E0:24:7B:E6:3F:46:58:43:35:74:0D:D5:2C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS218780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.204.0/24
96.62.206.0/24
143.14.87.0/24
162.141.25.0/24
162.141.27.0/24
162.141.147.0/24
167.148.185.0/24
167.148.220.0/24
167.148.249.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:dc:25:0c:60:4d:75:eb:93:ff:49:57:ba:b9:cb:86:33:23:
78:6a:84:b7:8b:48:79:d2:52:a1:78:2e:ac:88:f7:a0:84:25:
0a:f7:18:ef:37:c1:63:df:99:99:a2:68:93:2f:e3:af:60:47:
65:56:5b:bb:23:5a:20:7c:9f:d0:06:4a:bf:39:0b:0e:4f:92:
df:76:b2:cf:53:ed:14:b9:dd:9f:7f:54:75:f9:21:d9:4b:09:
4e:29:b1:af:08:24:dc:2a:25:74:89:af:e1:16:74:95:ca:79:
82:c5:ab:75:93:ce:93:0d:b5:8f:51:70:88:a0:c0:2e:8c:52:
39:2c:c2:53:0f:e5:63:95:f5:78:36:f3:99:a9:d2:4a:47:12:
65:1e:02:67:3c:1b:1e:a6:7b:9d:69:74:de:9e:e5:1a:95:62:
a5:46:8f:9e:9e:d8:54:5a:67:9b:07:06:ab:ff:31:d1:c8:8f:
ca:51:96:6b:6f:76:e9:06:02:11:c1:51:f4:08:06:2e:5f:fe:
69:fe:cb:9c:e7:7e:3f:56:f0:65:48:da:56:16:47:e1:ca:eb:
00:67:10:49:b3:41:6f:56:db:a3:17:13:af:b2:ed:06:50:e3:
4d:79:71:54:b0:ec:aa:62:c3:a3:9e:6d:ce:60:ff:a3:31:04:
45:62:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:07:20 2026 by rpki-client