Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218654.roa
File: AS218654.roa (raw, json)
Hash identifier: /RN0zyg3pD9j0h2+kd7hiHOsgEjf3/z7Oi5Wpi7C3l8=
Subject key identifier: 1F:B6:37:97:2E:83:6F:17:D9:55:3E:31:AB:B4:10:BB:1E:E1:9C:54
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 54D96C4368ED4C1AF4D71C595CF96E577CEB8F3D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218654.roa
Signing time: Mon 21 Sep 2026 10:16:16 +0000
ROA not before: Mon 21 Sep 2026 10:11:16 +0000
ROA not after: Mon 20 Sep 2027 10:16:16 +0000
asID: 218654
IP address blocks: 2a13:9500:1de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d9:6c:43:68:ed:4c:1a:f4:d7:1c:59:5c:f9:6e:57:7c:eb:8f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 21 10:11:16 2026 GMT
Not After : Sep 20 10:16:16 2027 GMT
Subject: CN=1FB637972E836F17D9553E31ABB410BB1EE19C54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:68:f7:09:0b:3c:ec:61:1f:22:69:a3:0e:
4a:58:1f:16:60:fc:66:7a:96:f5:a5:e3:78:f7:5f:
63:d0:08:49:c7:59:80:cc:ed:b0:cd:c4:17:e7:a6:
a9:f1:3c:2c:d4:08:8e:73:5d:2b:3b:e4:bd:63:fa:
9c:1a:4c:30:b2:9d:cb:10:31:ef:41:07:08:1d:07:
f8:3f:89:ee:01:4c:f6:6f:44:51:20:7e:c0:ca:51:
c2:ec:a1:61:de:9b:02:a2:a9:86:f4:39:79:48:35:
25:ca:24:30:46:10:7d:03:f1:b7:a5:55:a5:04:e1:
d0:60:21:11:ee:21:9b:f7:68:ac:56:21:b9:54:81:
e8:b4:bc:c6:0b:a3:96:ce:f9:c4:27:de:93:94:cf:
22:70:6c:03:d8:18:ff:65:8e:e5:a1:c5:67:4f:83:
5f:9a:25:34:2d:cd:14:e3:12:ec:12:40:be:c2:89:
8d:5b:c8:13:5d:9b:c3:88:b5:c4:9a:f2:54:ab:10:
3c:18:76:f9:c2:16:f2:1f:5d:9c:9a:da:de:58:f0:
1c:7c:e7:0e:ee:b1:f7:79:6c:ba:94:fe:15:1e:83:
a0:a0:a3:6c:70:8f:36:41:84:2e:1f:f9:52:03:3b:
9d:06:e2:5a:71:1f:da:0d:6e:32:f7:f8:bb:28:9a:
be:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B6:37:97:2E:83:6F:17:D9:55:3E:31:AB:B4:10:BB:1E:E1:9C:54
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1de::/48
Signature Algorithm: sha256WithRSAEncryption
98:79:e1:c4:dc:b5:74:e9:51:2b:5d:5b:08:0a:a1:f4:bc:64:
38:74:8b:30:a6:49:55:3a:4e:79:ef:27:bb:47:29:e7:55:64:
90:88:54:93:2a:94:d0:90:34:c9:31:41:d7:a3:dd:24:58:fc:
c6:f7:b4:41:da:a2:78:e6:df:68:98:4e:75:60:68:75:3b:c9:
c7:70:b6:53:92:c4:f2:3c:bf:c2:5d:5a:22:f6:b8:1d:61:96:
82:61:99:eb:cf:2b:75:0b:f3:a1:7a:98:c5:14:0a:4f:05:30:
e1:3d:98:32:62:ba:b0:59:b7:e7:bb:6d:df:3c:10:61:b9:3e:
de:06:26:53:4f:1f:16:88:1b:40:15:c5:2f:73:da:d5:ef:5a:
6f:10:91:3b:ad:c7:f7:6f:08:aa:ff:23:5e:10:ce:9f:c8:ed:
67:05:09:f4:5c:4b:17:33:2a:94:57:2a:6b:ed:fe:e0:e6:46:
c3:83:0f:5d:c0:72:35:c3:37:84:ae:a5:5e:b4:05:73:a8:e2:
8a:24:23:51:30:f7:b9:fc:4f:3a:50:e8:b1:2c:05:a3:77:13:
e1:34:24:db:90:4c:ba:bf:ce:28:83:dd:69:83:08:1a:d3:18:
02:0a:0c:82:cc:43:a5:38:42:79:dd:26:35:bb:19:b5:3b:20:
56:b8:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:39:59 2026 by rpki-client