Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218868.roa
File: AS218868.roa (raw, json)
Hash identifier: +OJYTHza1ktBStXPH+EYNRVDaB++sFWjwLWKxPTHc1Q=
Subject key identifier: 4A:19:AE:E3:3D:51:B4:F6:CD:7F:6A:D1:6C:E5:E7:1F:A3:A9:3A:22
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5104F21DCA069DAB0ACE93F66F3484FC2C763845
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218868.roa
Signing time: Wed 04 Nov 2026 14:20:58 +0000
ROA not before: Wed 04 Nov 2026 14:15:58 +0000
ROA not after: Wed 03 Nov 2027 14:20:58 +0000
asID: 218868
IP address blocks: 2a13:9500:1fd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:04:f2:1d:ca:06:9d:ab:0a:ce:93:f6:6f:34:84:fc:2c:76:38:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 4 14:15:58 2026 GMT
Not After : Nov 3 14:20:58 2027 GMT
Subject: CN=4A19AEE33D51B4F6CD7F6AD16CE5E71FA3A93A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:e4:ee:ef:d0:8a:c9:28:52:a6:d2:3a:8e:
6c:94:7c:61:0e:49:4b:51:f5:00:c2:43:46:11:fd:
c9:f5:4a:a1:6e:ca:e2:21:d7:9e:9b:b1:f7:92:97:
3a:89:1a:e4:33:c9:e4:54:90:4b:96:22:1e:2f:ba:
aa:cd:12:ca:ce:ac:88:36:50:5c:7f:5e:25:34:7c:
20:5b:ed:42:77:82:14:03:f2:5c:a6:44:e1:b0:b4:
66:b4:d7:5a:1f:d2:1b:cb:44:d3:a1:9b:ec:12:83:
f6:d8:b4:d5:04:99:49:d7:ce:3e:45:a9:e2:f9:cb:
8f:f9:ec:07:58:d3:4b:4b:02:ff:e3:7d:41:63:66:
26:de:7d:4f:c6:83:60:6a:04:71:17:9d:4c:71:13:
ba:21:d7:70:4a:75:3f:dc:a5:0e:71:a7:0e:d3:ae:
66:0b:b9:cc:0f:f7:2f:aa:f7:7f:73:10:d4:ee:11:
2e:84:f4:e3:8a:a0:78:bf:79:2a:27:3b:aa:b4:45:
11:33:d4:c0:22:d6:56:c9:de:21:88:f9:6d:ab:9a:
84:45:7a:92:b4:f2:3d:55:05:d3:df:4e:a6:ed:51:
ff:27:55:b3:af:47:d4:65:f3:7e:16:28:c5:5c:9e:
a5:e2:f0:9d:e5:b2:ce:1e:a3:98:b8:a8:00:00:14:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:AE:E3:3D:51:B4:F6:CD:7F:6A:D1:6C:E5:E7:1F:A3:A9:3A:22
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1fd::/48
Signature Algorithm: sha256WithRSAEncryption
4d:62:a1:e4:3a:c7:d8:75:4f:c0:af:ca:dc:59:13:34:f0:8d:
1f:69:f3:76:7e:fc:b4:62:ca:f0:14:05:be:44:a0:78:7b:47:
cc:90:e5:46:eb:a8:df:79:76:45:20:b3:e2:4e:31:72:c3:05:
2c:a3:5e:9c:c7:52:8d:74:20:cc:35:57:6f:a9:72:8e:91:d1:
a6:8e:d2:1e:9e:99:19:ee:f7:01:1d:19:54:21:dc:aa:a8:10:
c0:d3:a8:7a:5e:3b:e5:94:ef:d1:71:0b:dd:d1:95:f5:a0:77:
a6:dc:52:b9:71:1a:73:c7:dc:6c:1d:b9:cf:2e:3c:39:4a:59:
16:9c:70:1a:03:57:31:24:c5:4c:a9:cc:a8:86:69:5e:ef:04:
af:51:d4:b2:28:4e:19:b4:d2:f4:d1:91:d9:f8:b3:86:ae:79:
08:c6:1d:83:b0:fc:6d:a4:43:12:74:0e:8e:19:47:8e:b0:51:
91:ae:0d:4b:5f:87:cf:1b:8b:e2:15:63:5b:1f:3a:60:f6:cf:
c6:52:78:59:ce:21:76:90:97:de:65:cd:3a:4a:9a:cb:6d:be:
9c:3b:18:44:e7:cd:8f:97:7a:b3:c5:d4:a9:c3:57:41:19:2d:
92:d0:90:c7:6c:02:6c:37:90:f5:25:c8:a6:ab:fe:1b:fd:d3:
29:7e:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:23:44 2026 by rpki-client