Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201814.roa
File: AS201814.roa (raw, json)
Hash identifier: a0d2m62QlYUSyAIoPo3n8gwTGvYSPUtIVJTB4RYyCZk=
Subject key identifier: 62:40:C4:7A:1C:23:F7:1F:BB:2F:15:76:69:56:6D:19:0D:E3:F2:71
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3C964C34BC1F90A802F28A506D1E36D652FBDDBE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201814.roa
Signing time: Mon 16 Mar 2026 16:08:29 +0000
ROA not before: Mon 16 Mar 2026 16:03:29 +0000
ROA not after: Mon 15 Mar 2027 16:08:29 +0000
asID: 201814
IP address blocks: 82.22.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:96:4c:34:bc:1f:90:a8:02:f2:8a:50:6d:1e:36:d6:52:fb:dd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 16 16:03:29 2026 GMT
Not After : Mar 15 16:08:29 2027 GMT
Subject: CN=6240C47A1C23F71FBB2F157669566D190DE3F271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:31:ed:61:22:d0:c6:56:ae:37:47:d3:3a:
23:cd:54:31:5e:29:b9:d6:77:9c:cb:2a:84:f4:60:
89:b2:cb:14:6d:ff:ff:3d:22:70:99:ae:19:a3:57:
c3:74:89:ca:96:77:61:b3:d9:95:c7:5e:e5:e8:7c:
af:9b:ea:ba:c2:31:f6:25:5f:1a:41:51:c3:29:38:
9c:6b:67:78:bd:b4:73:ca:f8:27:32:65:16:71:9a:
95:ce:bb:b5:43:5c:99:a6:a5:6e:53:78:cf:ac:85:
96:d9:98:b3:71:c0:24:81:81:8f:96:36:14:fa:84:
1c:17:ce:de:e9:01:7b:00:8f:a2:b1:cc:1e:94:75:
ab:49:63:de:55:46:cd:1d:ef:25:c2:08:0e:88:b6:
73:bd:e2:12:92:12:6a:e9:95:3a:a0:ca:56:ba:4c:
d6:d7:90:dc:31:f7:53:c3:86:18:d9:d6:05:65:4e:
96:86:23:fd:62:c8:02:49:42:15:f7:b1:de:53:4c:
82:6f:4b:ef:2d:2d:86:67:d9:44:28:a6:91:c9:22:
55:0d:cf:ac:02:ff:62:c6:1d:9f:91:13:a0:40:2d:
71:f3:52:ba:bf:31:15:51:d8:f8:91:df:bd:d8:1e:
bf:9d:e1:46:4f:8b:92:b3:60:47:1a:d8:d9:05:f8:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:40:C4:7A:1C:23:F7:1F:BB:2F:15:76:69:56:6D:19:0D:E3:F2:71
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS201814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c6:78:62:70:e1:b9:38:60:cc:e7:38:95:18:1c:ea:67:5f:
9c:a6:8e:d6:45:59:fe:df:ca:60:97:f0:77:64:fb:01:e9:ae:
93:aa:68:e9:ab:01:0e:c5:58:6b:dd:0d:e3:d8:12:d6:c4:d5:
56:86:66:6b:52:66:7d:9f:bd:52:a0:45:a1:d7:43:3f:a6:72:
2d:09:58:91:88:7d:54:b9:8f:22:27:66:b3:26:21:3e:ea:74:
50:e3:e1:a3:23:20:93:43:9f:3b:c8:f8:b7:5a:52:52:90:32:
40:35:a2:a3:fd:4e:6e:a6:81:18:19:f9:41:38:2c:db:cd:07:
70:d4:7a:26:9e:63:1c:3b:07:b4:99:41:e0:92:12:8d:e2:1a:
6b:e9:a1:2e:14:b4:50:1f:66:c5:9d:25:4b:81:00:69:11:b3:
b2:af:3e:51:d2:9b:f5:93:4a:ec:d2:06:1a:2d:30:06:f4:8d:
db:28:97:3c:29:ba:33:c5:a7:d0:c8:69:61:d2:ff:16:d4:ae:
b2:5a:58:cd:25:84:1f:fc:09:84:1e:2c:97:95:8f:d1:d9:b4:
1f:e2:d8:28:ef:b6:ef:a5:ce:f3:fa:47:10:b4:de:09:fc:86:
48:f7:a4:53:9a:17:e8:bd:0e:39:dd:75:c7:5d:96:ef:13:3e:
db:42:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:47 2026 by rpki-client