Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218799.roa
File: AS218799.roa (raw, json)
Hash identifier: ygS6RYJbuVlmO0G7WSN8uMmkZnlxDO46orxVkmnusfs=
Subject key identifier: 1A:4A:5A:C4:B0:23:63:55:E7:74:A6:B6:68:2E:C1:92:9C:64:FD:3B
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 776A400A9EDCBD17F32919169DAEE6AEE255497A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218799.roa
Signing time: Sun 15 Nov 2026 01:12:41 +0000
ROA not before: Sun 15 Nov 2026 01:07:41 +0000
ROA not after: Sun 14 Nov 2027 01:12:41 +0000
asID: 218799
IP address blocks: 90.96.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6a:40:0a:9e:dc:bd:17:f3:29:19:16:9d:ae:e6:ae:e2:55:49:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 15 01:07:41 2026 GMT
Not After : Nov 14 01:12:41 2027 GMT
Subject: CN=1A4A5AC4B0236355E774A6B6682EC1929C64FD3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:0b:a7:e0:be:63:51:7d:5e:45:60:2f:9a:
d8:8a:2d:45:9f:4e:c7:60:ed:0d:b3:5c:cc:d9:3f:
8e:fe:4c:b3:ba:8b:61:c7:d3:20:a1:46:d0:97:a3:
64:ab:25:a1:5b:61:01:47:85:fe:cf:75:94:ea:25:
e4:a5:57:e7:dc:c8:51:3f:a6:ef:e5:04:03:1f:30:
23:4e:94:85:ed:69:37:ad:90:e7:19:bc:a1:f7:92:
5b:eb:ea:15:4c:f5:ce:09:d7:84:ba:6a:0d:60:60:
e4:ad:75:c3:21:c4:a3:ba:9c:99:ba:bd:51:20:5b:
9f:4f:71:1e:72:db:20:2c:d0:76:4a:34:d5:4b:d7:
74:1f:28:90:83:a0:1b:d5:47:11:23:43:d0:56:85:
d8:2c:9d:36:09:ee:ee:df:f6:9a:43:4b:b3:9a:8b:
73:a0:55:6d:9d:30:9f:6f:7a:59:4f:1c:a3:65:7f:
9d:6e:da:3c:32:fa:bb:c3:1d:42:f1:e3:9f:c7:ce:
c1:74:e4:30:5a:3f:d6:51:d6:8a:46:54:6b:1d:85:
c3:b0:20:93:a6:23:86:cb:c3:4d:a0:c5:74:ec:f6:
20:d9:61:4f:fd:2f:5d:f4:d7:af:b5:38:78:04:3a:
e9:e0:be:0c:a4:5a:16:50:78:2c:e2:90:3d:e8:47:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4A:5A:C4:B0:23:63:55:E7:74:A6:B6:68:2E:C1:92:9C:64:FD:3B
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.110.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:d4:38:00:d5:99:39:71:d3:ab:99:74:27:b6:05:fc:ea:69:
96:d2:97:32:39:87:e8:4c:d8:6b:c5:31:b7:7c:6f:33:f5:4a:
45:49:93:8d:c0:81:13:43:10:bd:28:3e:bf:e8:59:fc:dd:06:
07:8b:90:43:67:a2:9b:78:fc:89:de:1c:4c:47:1b:5b:b3:79:
9d:7d:e7:f6:4d:d8:6a:4f:1f:fa:f2:1d:d6:8a:6e:23:e0:8a:
e9:59:43:91:0d:02:c5:6e:9b:af:08:1a:61:06:f6:d1:f2:ae:
60:db:7a:44:b0:6b:b2:2e:52:54:74:29:63:c0:52:05:c1:90:
e5:2f:6f:25:ba:7a:b7:e0:b9:ad:74:51:92:26:92:63:6e:0c:
40:eb:94:7b:bc:33:c9:1f:00:f5:99:3d:31:1b:33:4f:15:f2:
48:d5:23:dd:a8:da:40:d1:4a:74:59:70:de:c9:4a:0b:34:21:
d6:98:5f:3d:8a:15:fd:24:27:88:2e:7b:72:4d:dc:45:e9:64:
fa:6f:30:c3:89:3a:69:8b:9b:1c:2b:ce:43:b5:04:65:8b:bd:
cc:7d:94:ae:3f:3a:db:ee:a6:c3:69:81:7b:3e:1f:48:7c:fd:
e6:65:92:9d:59:db:7d:1e:b8:3d:b8:24:96:46:34:1e:da:94:
e8:e8:f6:3c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUd2pACp7cvRfzKRkWna7mruJVSXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjExMTUwMTA3NDFaFw0yNzExMTQwMTEyNDFaMDMxMTAvBgNV
BAMTKDFBNEE1QUM0QjAyMzYzNTVFNzc0QTZCNjY4MkVDMTkyOUM2NEZEM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLygun4L5jUX1eRWAvmtiKLUWf
Tsdg7Q2zXMzZP47+TLO6i2HH0yChRtCXo2SrJaFbYQFHhf7PdZTqJeSlV+fcyFE/
pu/lBAMfMCNOlIXtaTetkOcZvKH3klvr6hVM9c4J14S6ag1gYOStdcMhxKO6nJm6
vVEgW59PcR5y2yAs0HZKNNVL13QfKJCDoBvVRxEjQ9BWhdgsnTYJ7u7f9ppDS7Oa
i3OgVW2dMJ9vellPHKNlf51u2jwy+rvDHULx45/HzsF05DBaP9ZR1opGVGsdhcOw
IJOmI4bLw02gxXTs9iDZYU/9L13016+1OHgEOungvgykWhZQeCzikD3oRwgDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUGkpaxLAjY1XndKa2aC7Bkpxk/TswHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE4Nzk5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWmBu
MA0GCSqGSIb3DQEBCwUAA4IBAQDG1DgA1Zk5cdOrmXQntgX86mmW0pcyOYfoTNhr
xTG3fG8z9UpFSZONwIETQxC9KD6/6Fn83QYHi5BDZ6KbePyJ3hxMRxtbs3mdfef2
TdhqTx/68h3Wim4j4IrpWUORDQLFbpuvCBphBvbR8q5g23pEsGuyLlJUdCljwFIF
wZDlL28lunq34LmtdFGSJpJjbgxA65R7vDPJHwD1mT0xGzNPFfJI1SPdqNpA0Up0
WXDeyUoLNCHWmF89ihX9JCeILntyTdxF6WT6bzDDiTppi5scK85DtQRli73MfZSu
Pzrb7qbDaYF7Ph9IfP3mZZKdWdt9Hrg9uCSWRjQe2pTo6PY8
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:22:16 2026 by rpki-client