Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218301.roa
File: AS218301.roa (raw, json)
Hash identifier: 77fvNwoJwlBRjeCqaBgmbhAqlPwR0iu/rHQhGvAYifQ=
Subject key identifier: 96:09:13:FB:BF:1D:AD:2C:67:1E:49:A1:50:F1:FF:D8:70:96:9E:C4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 395768BE260902173BB33C715829DA72C801712E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218301.roa
Signing time: Thu 29 Oct 2026 11:38:36 +0000
ROA not before: Thu 29 Oct 2026 11:33:36 +0000
ROA not after: Thu 28 Oct 2027 11:38:36 +0000
asID: 218301
IP address blocks: 95.135.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:57:68:be:26:09:02:17:3b:b3:3c:71:58:29:da:72:c8:01:71:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 29 11:33:36 2026 GMT
Not After : Oct 28 11:38:36 2027 GMT
Subject: CN=960913FBBF1DAD2C671E49A150F1FFD870969EC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:1f:de:b2:3c:16:d6:a4:34:f1:89:7a:52:
14:d5:7c:08:9d:b5:43:82:67:d3:fb:3d:4a:4e:63:
4f:dd:aa:a2:7b:4d:c3:de:d1:69:24:11:ac:df:38:
59:cf:18:4d:95:62:3d:8e:ac:97:57:9e:67:ee:b9:
f6:9d:bc:fd:1d:a9:c5:3e:95:98:5f:c3:45:50:41:
c4:77:03:b7:ac:17:d2:a0:11:a2:9b:96:1b:0f:a9:
90:07:5b:c7:f9:68:3b:b0:5a:26:e4:aa:cb:e0:c5:
e8:56:c9:c7:e6:ec:cf:8e:e3:a6:b4:ab:f0:9d:b2:
b2:3d:f6:c5:34:3c:7e:dd:95:97:6c:ab:38:8c:08:
ea:26:7d:c0:6a:0c:f9:a6:2e:e2:59:50:17:67:f2:
2e:a4:5f:54:fa:04:6c:00:6e:79:53:9b:9f:d3:2c:
d1:6c:8d:73:72:2c:fc:e5:b4:0d:9f:ef:5f:a2:d6:
8c:e7:83:ba:00:e4:36:c0:4d:bc:87:97:92:5a:7a:
0c:92:ed:d1:33:f2:4f:74:a3:64:90:17:ce:2a:92:
a2:f7:c0:1a:47:54:61:57:13:fd:27:03:d0:fc:6a:
37:87:66:85:82:b9:25:26:1b:98:a3:fa:51:69:99:
c1:f9:4e:f3:bc:ec:e9:5b:13:3f:91:11:1a:e4:c9:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:09:13:FB:BF:1D:AD:2C:67:1E:49:A1:50:F1:FF:D8:70:96:9E:C4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.92.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ac:f1:f7:fb:39:30:05:19:3d:cf:4e:07:6e:96:9c:47:73:
2a:d8:fe:b5:83:b0:c3:0a:f8:ed:e6:bd:e2:0f:b1:b0:bb:ac:
f4:8e:05:57:c9:14:8b:ec:4a:f1:cd:45:69:bb:1a:08:43:1e:
f0:98:17:51:96:03:95:2c:7d:af:a3:c5:32:7e:cc:75:3a:5a:
6b:71:b9:20:f2:7a:3f:ce:46:e7:dc:8c:b9:6d:d7:c4:fd:02:
44:98:47:69:c8:f8:10:a0:53:df:82:c4:c3:ee:66:90:d9:4b:
16:76:d0:5b:81:fa:ff:4b:07:d1:a0:7d:92:7b:e6:6a:0a:36:
a6:7e:49:dc:11:75:3f:4d:3b:13:d1:22:58:d6:0b:af:f5:4e:
00:f1:61:17:12:5d:ee:b3:10:12:91:5b:46:dd:40:30:48:54:
30:77:63:d5:fa:df:4a:27:1e:4c:91:d0:be:68:7c:82:ff:cf:
6a:69:6d:77:ef:e3:1f:cc:f7:a6:be:e7:39:a1:9e:33:d9:91:
3e:12:69:9b:92:37:ad:54:c9:b9:0d:ce:14:27:07:d7:a3:a4:
88:cd:64:8c:1a:75:24:7c:a7:c4:9e:9a:e2:84:4c:8d:84:5d:
b5:a5:31:63:28:33:bc:83:73:f0:d2:d3:10:f3:00:c7:0a:a0:
ff:27:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:50:39 2026 by rpki-client