Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS218349.roa
File: AS218349.roa (raw, json)
Hash identifier: 1OjoUaX04NymUOdlxvzguPRaMPjTI0PCPIBe7fa3aK0=
Subject key identifier: AE:2F:C9:47:1A:AC:03:01:9F:B8:85:AE:24:F6:7F:57:85:B0:FA:70
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 6B41E0F2A61EFFA930AE1924904E3082DCB48143
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS218349.roa
Signing time: Wed 04 Nov 2026 20:32:45 +0000
ROA not before: Wed 04 Nov 2026 20:27:45 +0000
ROA not after: Wed 03 Nov 2027 20:32:45 +0000
asID: 218349
IP address blocks: 2a0e:8f02:f07f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:41:e0:f2:a6:1e:ff:a9:30:ae:19:24:90:4e:30:82:dc:b4:81:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:45 2026 GMT
Not After : Nov 3 20:32:45 2027 GMT
Subject: CN=AE2FC9471AAC03019FB885AE24F67F5785B0FA70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:cf:c1:e9:64:0b:9c:66:77:d8:08:cb:3c:
71:26:0d:4c:db:8a:fa:1b:d6:d7:5d:81:c9:bf:35:
d5:68:a3:00:38:6a:32:fe:82:b8:e1:2e:4d:46:51:
ef:db:36:f9:f9:3f:bc:33:81:df:3c:e8:34:bd:81:
bf:54:cf:34:3e:15:52:63:07:33:62:1b:fb:ec:39:
94:3a:4a:26:84:6f:52:2e:ce:09:ea:ca:4b:e7:91:
5f:fb:bd:b4:90:f4:3d:9b:d9:10:54:9f:eb:a5:96:
45:1c:da:36:49:a6:c0:db:58:61:13:6c:d3:1c:43:
05:b4:84:ff:84:41:ff:a0:00:cc:ff:f0:d2:33:df:
b9:86:bc:ed:c1:b4:76:2d:1a:42:c1:a4:11:84:80:
da:6f:85:38:86:80:57:ba:1a:80:5d:22:dd:a2:0a:
77:a5:16:e4:28:c4:e6:41:31:2f:10:67:9a:ff:a8:
3f:41:83:c3:58:69:74:b1:ab:df:fb:40:1d:42:62:
8a:5e:bc:39:4e:8f:de:b7:6d:42:d1:6c:e7:ad:ee:
c7:bd:4a:10:3d:2e:6b:bb:a2:d3:3d:62:5f:3f:a1:
ed:92:79:9d:8f:8e:79:99:8f:f0:aa:92:c6:11:55:
4f:62:73:f5:d3:8b:f2:e9:ac:76:d0:b6:ee:96:0f:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2F:C9:47:1A:AC:03:01:9F:B8:85:AE:24:F6:7F:57:85:B0:FA:70
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS218349.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f07f::/48
Signature Algorithm: sha256WithRSAEncryption
31:d4:36:81:1e:e7:89:12:4c:21:2a:a2:3c:36:d2:d7:b4:3f:
65:90:46:64:f0:45:e7:db:d1:f4:fb:12:2f:0e:e8:63:77:c1:
c3:b3:0a:21:f5:b3:a8:2b:fd:1f:9d:b1:78:66:e9:c8:60:60:
68:9e:d9:27:fe:75:77:ef:60:67:90:3c:02:52:23:f7:73:64:
bd:2b:84:53:07:f0:55:ca:71:79:80:2f:e1:ed:f0:7c:89:5d:
68:1d:8a:c2:3e:0e:18:3e:e0:84:f5:32:c7:bd:81:22:2f:db:
8d:c1:95:fc:eb:fd:83:94:43:53:af:8d:01:36:12:f5:72:b5:
7f:b3:1f:81:ec:f5:5d:8b:3f:5e:88:24:9f:bb:13:45:06:bf:
92:db:aa:ec:c9:80:df:0e:61:41:2b:3d:cb:8e:e0:a1:1e:11:
51:a8:85:11:ff:31:e5:e7:b8:bc:9a:dc:69:79:e9:36:8d:35:
57:d7:8a:df:2d:81:ba:b4:cd:2a:74:18:64:d3:0f:6e:b0:50:
00:1d:cd:09:98:61:8e:88:02:eb:8a:2d:93:f1:79:03:51:5d:
07:7f:62:76:f1:05:a3:a1:9b:95:ee:6c:12:d9:d4:9b:34:17:
03:b0:c2:33:36:d8:d0:0d:bf:e9:39:39:c5:bf:6a:4d:56:6b:
e0:f5:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:16:36 2026 by rpki-client