Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218201.roa
File: AS218201.roa (raw, json)
Hash identifier: iJwIYqeVqNA9nlE9qy59WUB4EQj0WDa7BeU1YcHxgxk=
Subject key identifier: A6:01:42:A5:C0:DE:2C:0F:9E:3F:AB:33:0C:0C:A4:89:63:11:8F:8E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6D095AE237BB3B8436B52F530DEB1288AC6CB252
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218201.roa
Signing time: Fri 06 Nov 2026 17:25:47 +0000
ROA not before: Fri 06 Nov 2026 17:20:47 +0000
ROA not after: Fri 05 Nov 2027 17:25:47 +0000
asID: 218201
IP address blocks: 178.92.178.0/24 maxlen: 24
178.93.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:09:5a:e2:37:bb:3b:84:36:b5:2f:53:0d:eb:12:88:ac:6c:b2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 6 17:20:47 2026 GMT
Not After : Nov 5 17:25:47 2027 GMT
Subject: CN=A60142A5C0DE2C0F9E3FAB330C0CA48963118F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:cf:36:d4:e0:22:8a:17:1e:69:15:38:7c:
16:87:4e:98:05:e0:c5:4f:03:4a:16:0c:df:eb:9e:
75:8e:2e:b4:94:1c:c5:4b:4b:9a:66:63:13:65:18:
7a:62:04:42:6c:2c:db:48:17:61:4e:c7:3c:57:e2:
16:21:1c:d1:e7:c1:85:d8:b2:13:19:bc:33:19:61:
d0:88:00:db:63:c1:6a:fb:35:6d:3a:4a:3b:92:80:
c9:7e:ae:08:3f:ec:75:9a:22:e7:6c:c4:8e:6f:58:
e8:6d:94:46:73:f3:37:5e:55:3c:1e:a4:a0:4e:d0:
4b:b6:58:dd:a2:1e:e5:21:40:42:b6:86:9b:bf:7f:
c0:9e:a6:1a:98:54:4d:5f:93:3a:1e:93:cf:de:88:
96:b3:1d:ef:82:7d:eb:de:8a:9a:f4:a6:fb:1d:e9:
86:d2:c1:e2:6f:a0:44:9f:25:cd:46:db:36:48:94:
67:dc:79:37:39:67:86:7b:21:08:4d:2a:ba:86:c7:
c4:8e:38:cd:67:8c:db:19:73:ed:d1:a1:89:e5:e9:
34:ec:cb:ec:b3:b0:9f:bf:ff:9d:40:a4:c5:86:8a:
6f:cc:27:f7:7d:c6:d5:f0:39:c6:22:38:1d:dd:b1:
9c:52:44:8a:7b:54:f0:0c:c2:bf:dc:b9:09:2a:05:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:01:42:A5:C0:DE:2C:0F:9E:3F:AB:33:0C:0C:A4:89:63:11:8F:8E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.178.0/24
178.93.191.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4a:72:be:0f:1a:94:76:75:dd:f9:d9:62:c6:42:2d:63:5e:
1e:e9:2c:e2:db:9d:8a:52:6f:45:26:a0:91:31:70:c8:30:37:
0a:13:3c:d3:9b:36:5a:99:22:38:f1:fa:08:0c:9a:02:c0:db:
69:4c:42:a9:d6:ac:fa:42:63:82:6e:28:36:22:03:f6:de:53:
06:80:7f:50:f5:f3:66:22:66:53:48:23:dd:a6:84:9c:22:99:
c4:5a:ae:6f:ae:a3:cf:76:4e:2d:b1:b8:b4:f0:89:89:71:1e:
4c:22:37:7e:ce:62:7d:1d:46:ec:9d:11:5e:5b:a5:78:7c:09:
16:d1:ae:f6:a3:bf:74:77:c3:46:7e:68:cd:75:5a:d0:6b:c1:
2f:bd:0b:eb:8a:4d:e3:af:56:bb:ce:3f:6f:d2:1c:97:f2:d4:
c8:14:a6:63:02:54:18:2f:d8:38:a9:45:8c:f6:1d:5a:df:3c:
57:85:97:4d:a1:bc:db:8e:b9:d5:af:d2:02:e3:dd:3d:14:1d:
ac:df:ec:8e:75:fc:83:f3:18:8a:55:00:e6:71:2f:60:26:06:
63:bf:50:24:64:05:07:ab:cd:2e:c4:32:40:07:7c:20:dd:47:
3f:79:06:a5:c3:83:99:56:03:36:4d:5e:31:94:94:36:80:9c:
35:d5:22:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 07:05:34 2026 by rpki-client