Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218862.roa
File: AS218862.roa (raw, json)
Hash identifier: Li5NVrARHYUKlIpqAE/af75MrKw3XccsoTijIazx9ZM=
Subject key identifier: 05:1C:0E:4A:B9:73:52:AC:CC:63:B5:E5:0E:A2:9F:B2:D1:33:20:C4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 62DD118BDFEDFFE200E67693D0C8FFB58A0723B0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218862.roa
Signing time: Tue 22 Sep 2026 10:16:29 +0000
ROA not before: Tue 22 Sep 2026 10:11:29 +0000
ROA not after: Tue 21 Sep 2027 10:16:29 +0000
asID: 218862
IP address blocks: 82.41.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:dd:11:8b:df:ed:ff:e2:00:e6:76:93:d0:c8:ff:b5:8a:07:23:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 10:11:29 2026 GMT
Not After : Sep 21 10:16:29 2027 GMT
Subject: CN=051C0E4AB97352ACCC63B5E50EA29FB2D13320C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:48:03:e8:6f:ac:69:40:68:58:7a:b9:66:
a7:d4:78:37:32:77:5b:d8:9f:50:93:14:35:b4:9c:
0d:2f:93:33:06:fa:3d:15:f2:68:92:b2:a3:d8:89:
93:06:c9:8e:aa:09:df:f7:98:96:13:ee:8b:4c:fc:
df:e4:f4:eb:4b:fb:82:ec:75:5b:b2:8e:cc:25:00:
e6:d0:fd:62:df:3e:4f:03:66:b1:f9:90:e0:79:17:
c1:72:fb:f2:dc:e4:f0:87:ce:66:de:45:77:8b:6a:
c2:86:86:ae:a0:37:5d:cb:34:9c:6c:fd:92:12:b3:
cc:1f:e9:c0:fe:05:92:7b:4d:b7:fc:63:5c:d4:4b:
71:ec:00:b9:95:0a:5f:f7:d7:04:ba:e0:f5:2c:0b:
b4:b5:58:29:1f:77:fd:b3:bf:66:ef:39:11:2c:98:
05:af:5f:6b:a5:08:84:a1:c1:6e:34:f7:8a:96:9f:
2d:f5:71:64:9b:49:5f:2c:ef:fe:47:7d:8a:44:c4:
89:92:54:8a:fd:85:f6:c5:8f:87:f9:48:e9:f7:8f:
74:ab:c8:07:71:55:97:77:12:9e:2f:f0:6d:29:6d:
c8:0f:99:4b:cf:96:57:04:5a:99:d6:a0:81:37:f9:
0d:bc:78:d0:a2:7f:15:a2:bf:61:bc:39:f2:16:3e:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:0E:4A:B9:73:52:AC:CC:63:B5:E5:0E:A2:9F:B2:D1:33:20:C4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1e:7c:e3:a3:8f:3f:8e:2b:68:66:84:e6:6d:1f:8f:7a:69:
e6:a3:6c:8b:38:9f:09:14:f7:7e:86:74:f0:f5:1e:b8:0e:0e:
2e:89:2d:e8:3c:48:84:45:45:29:7c:c7:48:15:74:08:27:6f:
81:76:d2:81:49:59:7c:99:bf:8a:57:01:78:9d:e3:54:4c:b8:
00:04:33:ab:e6:b2:16:88:56:ac:83:22:82:21:be:f7:38:2c:
fe:0a:eb:e5:bc:47:7a:40:b9:b5:1f:ba:e0:92:a9:43:fa:4a:
45:c5:84:28:fb:37:7a:63:8a:39:95:5e:93:47:db:2d:d0:b0:
fe:7e:c4:9d:c7:c6:83:14:e5:7c:c4:a1:24:a4:d9:15:a3:b6:
33:9e:d0:80:24:00:1b:99:1b:fd:a4:50:a3:d0:8b:cb:db:8b:
23:d8:65:4e:e2:0c:0d:98:78:7c:0d:d2:c5:ba:c0:8c:b0:e0:
a2:81:6e:1b:ad:b3:af:88:8a:7b:d1:f3:9a:72:f9:72:90:d7:
72:cf:bc:65:88:0d:ab:48:6a:2f:77:42:7d:01:87:af:14:00:
19:8f:91:50:db:db:b2:a4:d7:22:2e:2e:c1:cc:f2:1f:35:7c:
5e:59:84:50:9d:42:4f:a6:8c:cd:a8:86:cc:70:de:dd:53:61:
cd:30:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:33:07 2026 by rpki-client