Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218357.roa
File: AS218357.roa (raw, json)
Hash identifier: dH28gNEZD5xZOJioL4u++YGPe6ih2ujor2swRg+egTo=
Subject key identifier: 51:40:40:44:42:4E:09:EA:D9:74:FF:DF:9E:EA:7E:94:C4:57:C6:6D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 615F52537C9B305E64081C5F1CF7F83A27065DBC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218357.roa
Signing time: Thu 29 Oct 2026 05:19:58 +0000
ROA not before: Thu 29 Oct 2026 05:14:58 +0000
ROA not after: Thu 28 Oct 2027 05:19:58 +0000
asID: 218357
IP address blocks: 82.27.38.0/24 maxlen: 24
82.38.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5f:52:53:7c:9b:30:5e:64:08:1c:5f:1c:f7:f8:3a:27:06:5d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 29 05:14:58 2026 GMT
Not After : Oct 28 05:19:58 2027 GMT
Subject: CN=51404044424E09EAD974FFDF9EEA7E94C457C66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:1d:67:7a:23:5e:11:b6:16:f1:0f:ea:78:
0e:a6:61:6b:5b:96:2c:d4:60:13:43:0a:04:7c:8d:
cf:79:10:46:d8:06:5e:60:f7:0b:90:61:f5:5a:37:
13:67:e4:14:ff:85:3b:cd:f7:7f:a3:d3:56:13:67:
a6:f8:a7:1b:a3:c7:42:a2:ca:5e:5f:2e:41:e4:fa:
7a:85:1d:0e:f3:64:53:08:cc:87:69:de:ae:e5:4c:
38:09:30:c4:75:b4:2a:48:4e:68:e9:3d:02:05:ad:
cf:9c:2b:47:a2:d7:83:fb:c5:63:c0:28:5c:1c:ab:
c0:a7:51:be:c8:e9:20:75:65:c8:71:e8:e9:89:1f:
39:b8:7e:e5:07:fb:5e:38:0a:96:ac:4b:1a:11:5a:
af:6f:b5:7e:3c:bb:2c:1c:bb:cf:c3:c2:e1:85:8c:
f3:cd:18:ae:f6:f9:07:30:c2:e5:6d:40:94:6d:01:
72:bd:04:41:3a:ae:b3:97:63:96:7e:58:8a:86:84:
c6:03:fd:f8:0a:a2:49:93:bf:55:74:35:12:61:5b:
61:31:84:0d:16:66:8e:d0:e0:c6:30:d4:e5:1d:f3:
a8:8a:08:d3:e1:d8:f3:d2:96:60:30:68:32:4c:70:
6e:d2:7b:c7:3a:4b:4b:8a:1f:fe:65:c7:23:9f:a6:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:40:40:44:42:4E:09:EA:D9:74:FF:DF:9E:EA:7E:94:C4:57:C6:6D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218357.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.38.0/24
82.38.28.0/24
Signature Algorithm: sha256WithRSAEncryption
65:73:71:49:ae:d1:75:85:5e:e4:95:f2:8b:ad:b7:cc:a6:8b:
e3:b2:d2:71:35:df:43:1a:ec:c5:44:d4:f3:9e:d5:3c:ec:9c:
0d:68:eb:35:97:28:b5:6b:cf:68:b8:51:45:03:9b:87:20:f8:
3e:70:8a:cd:09:9c:ba:10:66:d1:34:b1:5d:87:6e:ca:de:4b:
a3:07:66:2d:a6:ba:50:49:44:ea:a5:68:18:b4:fb:a2:a7:18:
58:0a:c3:3d:38:e5:53:b1:f7:96:04:f7:df:01:85:3f:2a:1e:
e8:ad:2b:6d:9b:bd:f5:b9:35:1b:76:a0:6e:d2:de:9b:13:61:
2a:d1:77:3d:cb:8d:d1:47:9d:ed:57:d5:b9:3d:b7:b0:2e:9e:
a6:b2:d0:eb:50:56:f8:e7:4a:af:ef:ac:fb:3c:05:ab:32:a1:
f3:6a:c2:3c:c9:19:db:8b:45:94:1f:33:60:33:03:dc:b3:91:
be:88:d9:11:7a:f0:73:e3:84:44:20:5e:00:d0:12:df:74:5a:
76:0f:d0:12:2a:35:98:8d:61:4d:d6:ae:91:54:ef:52:60:76:
4a:db:c9:ae:10:26:4b:a3:07:13:52:dd:0a:b8:aa:92:a3:e8:
2e:c2:d7:b1:98:54:cc:10:b4:38:54:25:e1:a3:d0:fb:b6:78:
f7:02:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:25:51 2026 by rpki-client