Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201814.roa
File: AS201814.roa (raw, json)
Hash identifier: aJtLZjKX+c418F2D7M3FrgJOOeyktFK+bt/3i5FNlO4=
Subject key identifier: 96:D3:9E:08:FD:62:9A:65:A1:CC:97:69:8D:38:85:D8:DF:88:B2:5D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 49E2B36CD2C0CBDFB6F11936D332EEF9A6256C88
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201814.roa
Signing time: Mon 05 Oct 2026 13:33:43 +0000
ROA not before: Mon 05 Oct 2026 13:28:43 +0000
ROA not after: Mon 04 Oct 2027 13:33:43 +0000
asID: 201814
IP address blocks: 178.95.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 14:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e2:b3:6c:d2:c0:cb:df:b6:f1:19:36:d3:32:ee:f9:a6:25:6c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 5 13:28:43 2026 GMT
Not After : Oct 4 13:33:43 2027 GMT
Subject: CN=96D39E08FD629A65A1CC97698D3885D8DF88B25D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:62:19:e7:6f:75:94:73:f6:a5:60:0e:da:
20:0c:25:3e:93:38:60:5c:81:e0:df:b0:45:64:83:
4c:92:f4:b6:2e:ae:e0:99:e5:a6:3d:50:73:f2:89:
3e:f7:5a:e0:3d:f1:93:ac:65:75:88:87:72:3b:3a:
94:e6:6a:e0:2c:78:b7:78:47:4e:0f:15:1e:51:e9:
9c:51:c4:e4:67:22:55:8c:1e:d9:eb:b0:5f:8e:74:
38:4b:b7:2d:ea:96:54:ba:6f:d9:d2:73:2a:28:62:
b6:15:54:e1:b8:54:58:30:4e:c2:23:5a:bb:f1:60:
8e:ff:5a:d1:fb:7a:36:16:89:cb:a1:44:de:96:fb:
e1:11:c5:91:a8:84:83:30:23:3e:3d:be:a7:68:fa:
6b:31:5d:4f:10:9f:fd:ec:e9:0c:ec:af:f9:45:15:
73:e0:1f:58:c4:65:76:7a:f3:64:18:e8:bd:49:1f:
a6:48:89:94:c5:c7:47:db:ff:96:56:a9:6d:c7:a1:
4b:42:d9:9f:00:a2:b6:15:c3:43:3b:5e:78:97:a6:
db:48:4f:aa:39:6a:95:b6:ed:8f:c9:58:15:38:e2:
99:1c:62:cf:5c:8a:08:4d:ea:96:0b:fe:31:81:a9:
71:ba:9c:2a:be:17:ca:6b:4a:1d:d2:7c:8c:de:c6:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D3:9E:08:FD:62:9A:65:A1:CC:97:69:8D:38:85:D8:DF:88:B2:5D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c7:68:8c:30:af:42:d7:8f:23:58:cf:fa:b3:e7:6e:ba:75:
3d:a5:79:b7:51:66:36:f8:9f:13:21:8c:85:9f:a9:e0:be:bc:
40:55:b7:f1:22:62:06:f6:95:7f:7e:cc:66:cf:fc:27:3c:df:
0a:aa:f4:16:be:bc:8c:7c:5c:fa:44:f6:96:b6:48:5c:18:8f:
5b:2b:53:2f:ab:a4:79:35:b5:41:cc:03:cd:21:ce:b4:9b:38:
2a:e4:71:3e:ca:dc:c5:01:bc:29:4f:96:36:b2:4d:7e:ba:cb:
0a:47:b7:99:77:aa:8e:5a:bc:68:ad:b1:d6:dd:1d:53:99:ea:
84:e9:ed:22:7b:23:87:d1:87:0f:ac:a5:57:20:7a:c8:19:fd:
a9:41:8c:8c:0e:bc:56:9b:91:60:e5:3b:88:21:f0:d7:00:22:
1b:69:ef:b9:b9:d1:ca:8a:50:d4:f4:bd:fc:7a:74:da:7a:33:
fe:c6:25:4e:0d:9e:b3:e2:22:e8:8e:42:dc:ec:ce:e4:61:97:
8e:82:8e:81:39:3c:7a:26:df:2c:2f:17:09:5a:48:e9:71:37:
5c:50:4e:43:98:34:71:9c:fa:82:1e:1b:6d:e3:29:b1:e2:8c:
d4:06:62:34:36:0e:ee:a5:96:e4:3d:08:0d:6b:b3:b9:7d:bf:
eb:a5:6d:4d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUSeKzbNLAy9+28Rk20zLu+aYlbIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMDUxMzI4NDNaFw0yNzEwMDQxMzMzNDNaMDMxMTAvBgNV
BAMTKDk2RDM5RTA4RkQ2MjlBNjVBMUNDOTc2OThEMzg4NUQ4REY4OEIyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XmIZ5291lHP2pWAO2iAMJT6T
OGBcgeDfsEVkg0yS9LYuruCZ5aY9UHPyiT73WuA98ZOsZXWIh3I7OpTmauAseLd4
R04PFR5R6ZxRxORnIlWMHtnrsF+OdDhLty3qllS6b9nScyooYrYVVOG4VFgwTsIj
WrvxYI7/WtH7ejYWicuhRN6W++ERxZGohIMwIz49vqdo+msxXU8Qn/3s6Qzsr/lF
FXPgH1jEZXZ682QY6L1JH6ZIiZTFx0fb/5ZWqW3HoUtC2Z8AorYVw0M7XniXpttI
T6o5apW27Y/JWBU44pkcYs9cighN6pYL/jGBqXG6nCq+F8prSh3SfIzexjivAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUltOeCP1immWhzJdpjTiF2N+Isl0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjAxODE0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl+5
MA0GCSqGSIb3DQEBCwUAA4IBAQBux2iMMK9C148jWM/6s+duunU9pXm3UWY2+J8T
IYyFn6ngvrxAVbfxImIG9pV/fsxmz/wnPN8KqvQWvryMfFz6RPaWtkhcGI9bK1Mv
q6R5NbVBzAPNIc60mzgq5HE+ytzFAbwpT5Y2sk1+ussKR7eZd6qOWrxorbHW3R1T
meqE6e0ieyOH0YcPrKVXIHrIGf2pQYyMDrxWm5Fg5TuIIfDXACIbae+5udHKilDU
9L38enTaejP+xiVODZ6z4iLojkLc7M7kYZeOgo6BOTx6Jt8sLxcJWkjpcTdcUE5D
mDRxnPqCHhtt4ymx4ozUBmI0Ng7upZbkPQgNa7O5fb/rpW1N
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:17:08 2026 by rpki-client