Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218499.roa
File: AS218499.roa (raw, json)
Hash identifier: GEqmjM4sMoVmhCsXEqEvseYJpVXlRgfrenMrUXqFy98=
Subject key identifier: B0:5D:DD:3B:22:2C:88:DB:90:F9:6C:A6:88:B0:A0:6E:AC:A4:98:FD
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 547688D85298D209A4E1C4BD4CEFA711B8EC446C
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218499.roa
Signing time: Thu 12 Nov 2026 10:23:17 +0000
ROA not before: Thu 12 Nov 2026 10:18:17 +0000
ROA not after: Thu 11 Nov 2027 10:23:17 +0000
asID: 218499
IP address blocks: 82.139.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:76:88:d8:52:98:d2:09:a4:e1:c4:bd:4c:ef:a7:11:b8:ec:44:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Nov 12 10:18:17 2026 GMT
Not After : Nov 11 10:23:17 2027 GMT
Subject: CN=B05DDD3B222C88DB90F96CA688B0A06EACA498FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:42:a4:82:8b:2e:58:e9:fc:85:91:95:bb:
62:f1:b8:c3:7e:63:bc:7a:da:ab:c7:72:a8:bb:ea:
62:77:4e:09:63:25:1b:65:e4:7d:ee:ca:03:46:18:
f1:cf:15:15:d3:c2:97:be:5f:e8:20:e7:23:82:69:
72:36:68:6b:5d:b7:37:45:7e:96:15:45:9f:4c:cb:
9d:ca:65:f8:3e:89:75:ba:4f:04:0a:be:bb:80:3f:
c0:b1:c4:56:a8:16:4c:9f:54:09:45:13:80:30:39:
e9:a6:59:c0:fc:42:6e:f6:cf:07:b9:5f:2c:14:04:
a1:a5:46:30:af:52:4a:a2:f2:07:8a:bb:b7:ad:4b:
ff:61:42:8a:da:3b:1a:d5:58:99:69:90:81:8a:e0:
7d:1b:c4:8e:2b:d8:78:aa:07:8a:0a:20:b7:10:80:
24:ad:98:47:e2:37:e2:83:de:ee:3c:36:73:44:61:
9e:81:b4:ac:33:ca:80:62:f4:1c:a9:3a:e3:4d:1d:
97:ac:b6:a8:07:31:26:34:a5:80:fc:c9:c7:c2:a2:
4a:aa:bc:ae:8f:65:6c:d9:92:2d:69:0c:67:65:c3:
f4:fe:94:01:45:8b:78:30:e0:8c:ee:32:89:46:d2:
3c:9e:73:c3:30:2a:08:b9:7a:f0:af:85:0e:39:0b:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5D:DD:3B:22:2C:88:DB:90:F9:6C:A6:88:B0:A0:6E:AC:A4:98:FD
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS218499.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.233.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8c:a9:8c:5e:f1:98:59:c8:4c:87:aa:db:81:11:c9:f3:d8:
63:f1:ff:af:19:43:2e:80:87:c7:86:3f:81:00:39:3a:16:c9:
df:ab:08:d2:eb:00:22:8c:c7:68:09:dc:d9:d4:6b:3e:a4:e0:
2c:94:64:d2:52:cb:95:2c:49:d4:26:0d:ae:65:2e:55:7c:35:
34:d5:40:70:5c:ad:e7:9b:cc:55:79:6b:ed:ec:e0:c3:4a:a2:
58:73:28:64:ac:56:96:06:bd:34:55:27:8d:7f:f6:73:a6:c5:
d2:72:c2:0d:b4:9f:0e:59:5b:26:05:2c:71:da:b5:a4:ec:ac:
d0:7f:b7:5c:ef:7e:16:ba:f0:93:d2:cd:df:cd:82:3a:1b:b2:
42:c6:53:7f:ad:70:11:2c:a4:5d:77:15:a1:9f:09:6d:d8:18:
2e:77:60:2c:7b:92:c5:d9:b3:a6:ea:c8:8f:0c:a4:47:80:fc:
54:a8:00:31:15:6b:29:c1:f7:12:b0:fc:12:a1:14:c7:7a:b8:
6f:11:94:92:8b:e8:01:af:d2:65:fd:b5:7a:8a:14:5e:dd:21:
ea:79:13:f6:7a:b1:1e:7d:fd:dd:9d:43:f7:f7:b3:bf:f0:36:
2b:a9:ad:60:83:0f:3a:ff:4b:21:e9:84:9a:fe:4e:09:97:9d:
98:b4:8d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:14:14 2026 by rpki-client