Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218869.roa
File: AS218869.roa (raw, json)
Hash identifier: XHKkm1ThUoyFakmuvAfxhrx/BfjvKhY9KwJB9xrGwIQ=
Subject key identifier: 24:38:F3:6A:A2:B8:5E:4D:A0:5C:3C:37:3E:17:FF:1D:54:AF:84:E6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 17D03235460E5E66F5D43CA96A836AD3BD56CE10
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218869.roa
Signing time: Wed 23 Sep 2026 06:54:04 +0000
ROA not before: Wed 23 Sep 2026 06:49:04 +0000
ROA not after: Wed 22 Sep 2027 06:54:04 +0000
asID: 218869
IP address blocks: 2a13:9500:1e1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d0:32:35:46:0e:5e:66:f5:d4:3c:a9:6a:83:6a:d3:bd:56:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 23 06:49:04 2026 GMT
Not After : Sep 22 06:54:04 2027 GMT
Subject: CN=2438F36AA2B85E4DA05C3C373E17FF1D54AF84E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:82:db:d4:9c:69:9c:af:1e:58:61:17:6f:
4c:72:61:b4:8f:1e:2c:3a:2b:e4:cd:83:b2:63:57:
0e:cf:af:a7:5a:13:3e:13:a0:98:d4:ec:6e:cf:16:
43:64:3b:5f:0c:e6:e0:ed:70:21:cf:46:47:65:ae:
20:92:be:f5:fb:0d:ae:82:57:20:87:6f:cd:32:3e:
7d:a5:6d:1b:d8:26:9b:53:c4:b2:7c:77:7a:a2:01:
72:cd:4d:1e:fa:e6:8a:11:00:37:05:0b:0f:bc:52:
79:19:bb:db:18:04:8c:3b:04:04:ef:fb:f2:f9:77:
32:13:07:c9:59:ba:43:10:be:06:94:64:2c:d8:db:
d0:d2:97:73:c0:d3:c8:46:57:f4:8e:40:21:34:2f:
5f:af:81:50:32:f1:f1:0a:68:c8:f9:ee:54:35:9e:
fe:b0:09:ad:f0:7d:6f:7c:fe:70:b3:88:53:32:e1:
f4:58:27:7a:34:e7:79:82:c2:89:60:17:29:69:bd:
94:f3:84:e1:93:00:ea:cf:6d:e5:c0:85:58:88:f2:
b6:f0:f3:34:5b:30:f0:f2:cd:53:6c:dc:bd:d4:58:
a8:29:7e:a2:b2:e4:e8:a8:a1:3b:95:70:d5:89:dc:
18:aa:8b:fb:7d:00:4c:85:84:4e:f3:94:08:3a:7e:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:F3:6A:A2:B8:5E:4D:A0:5C:3C:37:3E:17:FF:1D:54:AF:84:E6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS218869.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1e1::/48
Signature Algorithm: sha256WithRSAEncryption
0d:08:ad:7b:d5:a3:07:d5:8d:92:ff:14:a6:56:9a:5f:57:79:
dd:e3:af:53:40:3e:2a:41:5b:23:f6:d8:bf:a0:fb:df:57:90:
06:68:39:9d:f4:67:0b:9b:48:ec:c6:5c:68:98:43:2b:1f:84:
ec:d5:84:cb:e0:4e:13:76:d3:0f:25:db:79:28:08:38:53:da:
6b:28:89:f8:e7:26:4c:3c:40:39:a5:1b:e7:4a:86:35:9a:a4:
90:ea:e7:a7:88:f6:30:d3:f8:a4:78:69:32:03:08:94:c6:1f:
de:43:cf:89:28:4e:3f:ee:a6:ca:82:04:f3:c7:3b:0b:2d:1b:
0d:ad:78:b1:e1:be:aa:b3:96:56:79:69:a0:65:03:5e:31:03:
e3:24:c1:32:7a:4a:d2:5e:d2:10:1e:6a:b2:b9:d0:22:f2:60:
24:be:97:98:41:d3:e8:56:c6:2b:87:16:94:89:7b:6b:a4:69:
00:3d:42:dc:49:00:95:71:49:67:93:51:78:23:f4:60:64:35:
4f:a3:ca:6c:4d:f0:ce:c2:3d:66:28:ba:2f:42:bc:09:f4:64:
43:9e:86:e7:b8:d6:50:85:dd:b8:dd:d5:cf:c7:69:f8:02:2f:
8f:57:97:7e:3c:89:d3:12:bf:f5:6b:0b:30:b9:5d:c9:2c:18:
df:b5:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:34:26 2026 by rpki-client