Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218569.roa
File: AS218569.roa (raw, json)
Hash identifier: CV95D7TjzCR6QmSrPCBn2neyY++1GmBAmlFcHdE7LzU=
Subject key identifier: 8F:AB:85:BC:2C:6D:3A:9D:EB:B5:63:4E:0D:32:73:EB:A5:E9:12:44
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 06FF336FD4F87697CBC3F6054F9782AF4FDE144B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218569.roa
Signing time: Mon 28 Sep 2026 12:41:07 +0000
ROA not before: Mon 28 Sep 2026 12:36:07 +0000
ROA not after: Mon 27 Sep 2027 12:41:07 +0000
asID: 218569
IP address blocks: 2a14:7580:600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ff:33:6f:d4:f8:76:97:cb:c3:f6:05:4f:97:82:af:4f:de:14:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 28 12:36:07 2026 GMT
Not After : Sep 27 12:41:07 2027 GMT
Subject: CN=8FAB85BC2C6D3A9DEBB5634E0D3273EBA5E91244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:58:c6:64:c0:21:71:a2:03:a6:7b:41:b5:
0d:fb:22:86:a6:39:17:3d:bc:3a:0f:01:04:38:3e:
a2:0c:98:ba:7b:55:01:42:16:8d:01:68:d1:a7:6c:
f7:cb:4c:5c:f4:88:e7:d3:1f:3b:53:4e:6a:f5:e7:
37:f9:63:e9:85:aa:29:9f:8b:b2:53:12:d6:24:d4:
4b:e4:4e:25:f8:a1:a2:e7:87:9b:b9:e8:d0:a4:ba:
bc:4b:20:f6:1a:86:cc:02:b3:91:8e:b8:81:a0:33:
13:13:2e:a3:c8:21:9c:a1:30:1f:67:0e:d7:62:5a:
14:5b:a4:62:9d:2c:61:51:df:ef:cc:a3:94:0b:f5:
d3:19:1e:a3:7f:1f:3c:cf:53:7e:6d:57:d6:a6:4e:
01:18:91:ff:ae:fa:4a:d1:55:63:d0:c2:55:6b:69:
60:69:cf:8e:a7:c1:e6:06:17:9b:c3:ae:3e:b0:31:
31:78:46:80:96:49:44:50:fd:bb:93:3e:e9:16:23:
f5:d0:dc:f5:8a:50:5b:f9:c5:c1:da:6a:ca:1c:7c:
f1:79:f7:71:be:7c:d0:5c:29:e8:3f:8f:d5:d3:fb:
e0:e8:0f:ae:6f:7d:ea:98:44:a5:22:c1:70:57:5c:
32:0f:8f:db:57:af:4f:d2:da:eb:fc:2a:0c:c4:99:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:85:BC:2C:6D:3A:9D:EB:B5:63:4E:0D:32:73:EB:A5:E9:12:44
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218569.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:600::/40
Signature Algorithm: sha256WithRSAEncryption
4d:64:a8:89:f2:cf:67:93:00:97:73:32:41:62:5b:1a:e9:54:
39:3d:df:ec:13:a2:b2:39:f2:67:72:78:c2:7a:df:f7:3d:0d:
c8:54:2f:cc:eb:a0:31:4d:00:09:f5:5f:14:33:68:0f:77:36:
56:a3:d3:f0:7a:44:95:c0:f5:19:4b:44:7f:ae:57:d5:25:b4:
b1:83:4b:cf:9f:bb:2b:e0:9d:3b:1f:41:dc:bb:d6:fe:5b:11:
6c:96:13:96:01:1e:fd:96:94:66:78:c2:fb:7e:36:30:db:bc:
8b:a4:22:80:cb:4c:cc:03:6a:22:b9:3d:1e:18:11:17:e0:fa:
41:92:1d:89:a4:53:b9:7c:65:40:09:0b:9c:d5:1d:8f:f7:67:
22:b3:cc:fd:0e:88:f6:68:35:41:bc:b5:d4:0b:90:29:e2:8d:
31:bb:2c:f0:51:0c:31:dd:02:c9:23:0d:f3:e3:c9:ca:11:ac:
70:da:08:f5:87:b5:3e:44:6e:4c:8a:a9:5f:34:8c:dd:4a:2b:
46:18:e0:e1:a8:3e:b8:69:3a:58:ce:5f:18:fb:dc:5f:5f:ec:
b8:30:14:f3:e9:1a:1d:8b:7f:db:34:be:9d:34:1a:38:22:31:
51:7b:a2:4b:23:de:b4:d9:0c:51:f4:ff:e7:13:83:92:2c:3a:
92:1f:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:57:31 2026 by rpki-client