Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210436.roa
File: AS210436.roa (raw, json)
Hash identifier: LDjFoRpAUyGmNtlM12MQgD0Hf1QIhIH2GTOBC7G/hqc=
Subject key identifier: B8:36:DC:66:01:FD:1E:37:02:5C:5A:22:45:B7:30:C5:73:01:84:D0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5322D8D18599BA8F1B8C0CB9ACE2373AF26F350C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210436.roa
Signing time: Sat 12 Sep 2026 19:28:43 +0000
ROA not before: Sat 12 Sep 2026 19:23:43 +0000
ROA not after: Sat 11 Sep 2027 19:28:43 +0000
asID: 210436
IP address blocks: 178.95.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:22:d8:d1:85:99:ba:8f:1b:8c:0c:b9:ac:e2:37:3a:f2:6f:35:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 12 19:23:43 2026 GMT
Not After : Sep 11 19:28:43 2027 GMT
Subject: CN=B836DC6601FD1E37025C5A2245B730C5730184D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:98:b3:19:24:30:fe:56:f0:a0:a4:7d:21:
dd:d1:d0:33:46:2c:f1:43:66:1d:93:cb:e8:a8:d1:
53:a5:ac:67:55:8c:72:67:c2:80:1c:97:84:28:d7:
82:0b:b3:bb:fe:23:c0:ac:37:af:26:5f:11:85:cc:
61:fa:3f:02:20:14:c9:88:80:4f:a2:b3:fb:5c:4d:
1e:32:d7:47:e9:93:20:4a:b7:f2:41:e8:db:83:f8:
b6:5b:20:82:b9:5d:70:0f:20:7e:98:56:60:bb:1c:
14:a6:de:03:47:97:7e:87:ea:ba:9f:6b:eb:4e:79:
16:5e:54:16:03:b9:08:53:9f:ea:13:63:9c:3b:d5:
e8:d8:40:b7:fd:2a:5f:de:2a:a3:8c:f2:8b:04:0e:
92:c9:b1:51:58:42:92:55:23:2f:05:ee:62:5f:93:
3a:a6:17:d9:2b:cd:e3:fc:1b:d6:f2:d7:ba:63:de:
46:87:60:91:f4:84:5b:67:a7:4b:7f:89:05:d1:48:
80:0f:d3:08:91:cf:2b:60:38:1e:3d:d2:4e:92:e8:
61:d9:47:c3:8d:3b:30:f3:86:af:41:02:2c:88:25:
0f:03:10:13:55:df:27:5b:af:4e:55:a1:d9:99:c8:
f0:a4:5c:af:b2:1e:ce:f3:89:95:3d:b3:ff:5b:c4:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:36:DC:66:01:FD:1E:37:02:5C:5A:22:45:B7:30:C5:73:01:84:D0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.164.0/24
Signature Algorithm: sha256WithRSAEncryption
61:32:45:b2:0e:74:dc:5d:0f:2e:a6:ce:d3:e9:aa:86:f4:01:
32:22:86:c3:aa:1c:5d:e6:a9:67:4e:57:3b:f7:b7:5b:06:30:
0c:0c:e0:33:b2:dc:81:bf:fa:85:a6:80:5e:4a:9a:29:f2:66:
a8:23:47:bf:50:a1:8f:90:e8:f2:cb:1a:61:cf:2b:b8:59:ee:
f3:04:cb:93:37:39:53:de:34:7c:15:07:a1:ee:11:34:3e:2d:
93:1f:bd:f1:8a:d4:6e:08:e4:ed:c4:ca:6c:43:0e:e5:68:35:
f6:d9:fb:6d:49:cf:b0:f2:1a:b0:f6:6b:1c:f8:ce:b3:05:84:
1f:54:ec:eb:1b:7a:0a:c8:d5:d5:42:74:47:11:60:0e:24:cb:
69:07:5a:00:71:f8:14:db:3a:a3:ca:aa:40:46:1a:f9:10:b7:
c4:f2:54:02:f0:df:cc:60:d4:e1:d6:f8:0e:a4:e2:c7:ef:cd:
c9:3f:8a:73:b0:60:aa:5f:2a:eb:52:c5:21:ec:75:24:d2:0a:
85:b2:80:78:e5:49:a1:a0:92:35:9d:bd:fc:51:98:e5:e5:6b:
32:f2:b4:df:73:0d:22:c2:3e:c7:38:87:ca:5b:78:4f:ed:24:
b4:64:1c:30:59:11:cb:10:fc:95:14:2e:6f:f8:da:57:b0:93:
e2:0d:e8:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUUyLY0YWZuo8bjAy5rOI3OvJvNQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MTIxOTIzNDNaFw0yNzA5MTExOTI4NDNaMDMxMTAvBgNV
BAMTKEI4MzZEQzY2MDFGRDFFMzcwMjVDNUEyMjQ1QjczMEM1NzMwMTg0RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRzpizGSQw/lbwoKR9Id3R0DNG
LPFDZh2Ty+io0VOlrGdVjHJnwoAcl4Qo14ILs7v+I8CsN68mXxGFzGH6PwIgFMmI
gE+is/tcTR4y10fpkyBKt/JB6NuD+LZbIIK5XXAPIH6YVmC7HBSm3gNHl36H6rqf
a+tOeRZeVBYDuQhTn+oTY5w71ejYQLf9Kl/eKqOM8osEDpLJsVFYQpJVIy8F7mJf
kzqmF9krzeP8G9by17pj3kaHYJH0hFtnp0t/iQXRSIAP0wiRzytgOB490k6S6GHZ
R8ONOzDzhq9BAiyIJQ8DEBNV3ydbr05VodmZyPCkXK+yHs7ziZU9s/9bxKa1AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUuDbcZgH9HjcCXFoiRbcwxXMBhNAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEwNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl+k
MA0GCSqGSIb3DQEBCwUAA4IBAQBhMkWyDnTcXQ8ups7T6aqG9AEyIobDqhxd5qln
Tlc797dbBjAMDOAzstyBv/qFpoBeSpop8maoI0e/UKGPkOjyyxphzyu4We7zBMuT
NzlT3jR8FQeh7hE0Pi2TH73xitRuCOTtxMpsQw7laDX22fttSc+w8hqw9msc+M6z
BYQfVOzrG3oKyNXVQnRHEWAOJMtpB1oAcfgU2zqjyqpARhr5ELfE8lQC8N/MYNTh
1vgOpOLH783JP4pzsGCqXyrrUsUh7HUk0gqFsoB45UmhoJI1nb38UZjl5Wsy8rTf
cw0iwj7HOIfKW3hP7SS0ZBwwWRHLEPyVFC5v+NpXsJPiDejb
-----END CERTIFICATE-----
Generated at Sun Sep 13 05:55:08 2026 by rpki-client