Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS218568.roa
File: AS218568.roa (raw, json)
Hash identifier: +8pMk5qpcLjdv/XY3bOSI/aMI0w0LR5IeHOSzpYby/I=
Subject key identifier: F5:26:01:24:A3:9D:D7:A9:07:08:5C:5C:64:98:42:03:F6:B0:04:E9
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 37C28B349B4947BC467C7D007EB74311A2AD2357
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS218568.roa
Signing time: Sat 14 Nov 2026 08:06:00 +0000
ROA not before: Sat 14 Nov 2026 08:01:00 +0000
ROA not after: Sat 13 Nov 2027 08:06:00 +0000
asID: 218568
IP address blocks: 177.122.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c2:8b:34:9b:49:47:bc:46:7c:7d:00:7e:b7:43:11:a2:ad:23:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 08:01:00 2026 GMT
Not After : Nov 13 08:06:00 2027 GMT
Subject: CN=F5260124A39DD7A907085C5C64984203F6B004E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:84:6e:46:11:3a:26:af:24:01:d0:b2:3b:
63:ac:0b:2c:b3:52:8e:e7:b7:56:d6:4f:04:4a:03:
ff:79:9c:48:4e:e3:d2:1f:c3:a2:da:50:cf:63:ea:
a2:dd:d5:98:75:d4:1c:3a:70:2b:c0:89:92:fd:38:
80:f8:98:de:db:d8:af:17:b5:1a:e9:73:e0:04:17:
2f:56:ff:9b:e3:4a:7b:bc:bf:09:ce:6d:da:21:6e:
9b:02:13:3d:d3:6d:b4:e0:67:30:d3:37:91:8b:51:
67:0c:fb:31:64:f9:4e:c2:c6:7c:5c:4d:c9:0c:d0:
80:4e:4e:04:60:53:bf:7e:68:a2:be:56:d3:f1:8e:
94:93:25:f3:8c:46:3c:72:83:64:89:69:07:c3:2c:
d6:f3:d7:19:45:91:2f:f4:40:5f:89:f6:6f:c6:05:
fc:d3:bd:15:22:74:f4:67:2b:3e:70:cf:e2:1d:ff:
b1:bf:0d:2a:65:0c:81:5c:88:07:d5:85:ca:cc:19:
55:08:61:47:93:40:c4:2f:24:01:7a:6c:74:7a:aa:
63:e0:20:b8:e8:7d:ff:81:98:a6:94:99:d3:4a:f9:
a2:73:53:40:7b:32:92:df:ee:60:80:bc:43:f6:9f:
4c:a6:ed:ac:49:dd:92:4b:2c:d7:eb:78:f9:0f:32:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:26:01:24:A3:9D:D7:A9:07:08:5C:5C:64:98:42:03:F6:B0:04:E9
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS218568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.122.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:af:ec:22:b8:4c:00:64:3f:e6:f9:99:56:d4:7b:00:bd:c1:
4c:61:23:6b:cd:5c:2c:33:d0:e0:e8:71:30:7c:c8:0b:a8:3b:
61:27:90:b8:0e:9b:9a:3d:51:66:09:0f:6d:a1:0f:66:b1:b5:
81:39:86:db:00:10:68:35:c9:fd:df:f7:8a:52:ce:58:16:2f:
a0:42:ff:ac:a7:26:0b:e1:eb:17:2b:05:08:ca:04:96:31:60:
28:06:32:87:ad:23:a7:3c:8a:30:e9:ba:ad:9c:eb:50:26:74:
51:66:41:c0:eb:dc:36:6b:88:83:bf:e6:87:19:9f:26:1b:df:
61:04:7b:74:70:6b:fe:12:42:8b:75:7d:86:07:e4:7d:0c:8d:
3f:44:39:f1:74:02:16:86:2b:f1:51:6e:0e:b7:33:a4:d9:9b:
25:97:2a:de:5b:7c:24:b2:c7:07:d5:a7:7d:bb:28:46:4b:eb:
40:a1:5e:e4:1c:4e:1d:3f:9a:2d:e7:05:1f:a4:d9:15:78:ca:
1e:43:82:be:dd:6a:c4:ec:e3:3c:f0:d7:a1:24:a3:a5:61:0f:
3d:1a:bd:18:13:32:e9:87:c9:9a:3f:20:6b:21:72:38:92:1e:
bf:70:81:d0:ca:96:1c:11:47:2e:a3:44:1c:f4:a9:72:c1:10:
25:0e:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:25 2026 by rpki-client