Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218322.roa
File: AS218322.roa (raw, json)
Hash identifier: W4ZvnFtaKuX7Pd7kqfmVEQ5KH7zdkCxa4OzUZ5tpgqk=
Subject key identifier: 77:65:5A:FF:DB:8C:C9:0D:97:A4:D2:86:55:F5:11:9A:F7:27:D7:24
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2FA602C62180FF75B90705D692EDEE6CCC68A5E6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218322.roa
Signing time: Mon 26 Oct 2026 12:12:32 +0000
ROA not before: Mon 26 Oct 2026 12:07:32 +0000
ROA not after: Mon 25 Oct 2027 12:12:32 +0000
asID: 218322
IP address blocks: 178.92.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a6:02:c6:21:80:ff:75:b9:07:05:d6:92:ed:ee:6c:cc:68:a5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 26 12:07:32 2026 GMT
Not After : Oct 25 12:12:32 2027 GMT
Subject: CN=77655AFFDB8CC90D97A4D28655F5119AF727D724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:96:c2:a6:90:84:2f:f4:7a:68:4b:08:b6:
55:df:74:46:8c:4a:b7:db:56:21:16:e2:40:29:09:
a7:9e:77:f0:37:93:d3:bb:96:05:e6:dd:e1:95:ba:
9f:65:b8:f3:50:fe:ca:7a:d7:bc:d8:dc:fc:c6:9c:
57:17:f0:b2:bf:ae:c3:25:af:6b:a0:91:c2:2c:d4:
25:18:8a:86:87:7d:0a:ea:c2:1d:d0:f1:6f:ca:56:
43:fe:f7:a2:6e:7a:93:97:df:5f:6a:eb:75:8f:1c:
da:de:a2:c3:57:14:69:6d:d2:9b:21:ac:bd:d3:63:
0c:c5:f5:e3:12:a9:66:19:d4:3b:20:a1:26:78:41:
f8:d2:0b:8f:c3:bc:ef:00:0c:d7:17:de:d7:ca:64:
72:e2:c1:2a:3a:07:41:2f:15:bb:60:cc:ca:eb:e9:
28:e6:73:0c:7f:ca:2a:08:db:67:87:a5:c2:35:56:
f9:bc:61:88:e1:16:5f:71:0d:29:5e:1d:32:49:d0:
89:9e:48:04:2d:25:a5:b2:08:d0:b3:65:9c:7f:ea:
c3:1e:39:08:1d:58:7e:dd:75:d6:1c:c7:c3:80:d1:
f8:83:4f:c6:b7:3b:16:f2:24:c1:a5:8d:64:46:7e:
7b:03:0d:42:27:87:7b:53:99:60:e7:09:66:17:5d:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:5A:FF:DB:8C:C9:0D:97:A4:D2:86:55:F5:11:9A:F7:27:D7:24
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.13.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6e:88:bf:35:b6:37:3c:a7:be:f3:5f:c4:78:e9:bc:15:2c:
e0:80:a6:56:88:36:eb:f9:58:4c:70:3f:97:06:8a:b5:3d:8b:
ec:45:a3:fd:23:3c:7e:00:ba:22:f0:27:57:b8:ff:b2:e3:73:
66:f1:06:75:6a:8b:b7:c7:54:a9:79:53:cd:81:83:ba:28:22:
61:8d:0c:dc:80:9e:c1:97:fd:50:2b:4c:81:e4:c8:bd:fc:2c:
eb:9f:82:76:94:d7:74:cc:ae:ee:fa:89:ca:cd:35:31:e0:2a:
b3:c2:da:37:13:f6:0c:f1:2a:aa:75:0e:42:67:39:61:2b:25:
00:16:88:93:bb:c5:5c:f5:04:16:02:4b:d2:d8:27:3c:61:25:
9b:96:2b:99:ca:df:2f:fa:73:6b:b5:5f:15:1b:e5:98:c6:3d:
8a:e3:64:03:47:4d:d3:6d:0c:31:8f:40:35:d5:64:05:3d:8e:
ad:8a:82:f3:39:69:22:6e:08:7d:2f:54:08:7e:0b:69:42:79:
1d:86:79:2a:be:e2:42:c4:ea:96:f6:43:ba:fb:0f:bb:1a:8c:
17:5c:65:df:1e:2b:0f:10:03:f1:72:04:a7:dc:28:eb:03:f3:
23:1d:95:b8:81:82:60:7a:80:1b:ef:44:b3:eb:99:2b:c3:2c:
d7:c4:dc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:56:26 2026 by rpki-client