Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218702.roa
File: AS218702.roa (raw, json)
Hash identifier: Fb5cORjgYa71mAy8lF1g9F3JbflP+qjuyPiBtaVvzVs=
Subject key identifier: DA:84:E0:56:D6:3E:49:99:E7:8D:DD:B8:D3:69:A9:DA:13:5B:A0:D4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 417FAAE270E535B6FD665407F93C641D4471EBBD
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218702.roa
Signing time: Fri 02 Oct 2026 20:21:45 +0000
ROA not before: Fri 02 Oct 2026 20:16:45 +0000
ROA not after: Fri 01 Oct 2027 20:21:45 +0000
asID: 218702
IP address blocks: 95.135.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7f:aa:e2:70:e5:35:b6:fd:66:54:07:f9:3c:64:1d:44:71:eb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 2 20:16:45 2026 GMT
Not After : Oct 1 20:21:45 2027 GMT
Subject: CN=DA84E056D63E4999E78DDDB8D369A9DA135BA0D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:25:34:ef:ec:1f:e0:b5:11:b8:9c:52:5d:
c0:f7:d2:dc:98:71:57:80:f8:04:33:e8:b9:b6:97:
f6:51:9c:ef:64:20:c7:57:5c:11:a8:e9:91:e1:9c:
65:46:c0:4b:92:93:08:06:4a:8c:c2:e3:5c:fd:85:
a0:47:ad:0a:f5:07:51:6a:4c:2a:89:52:7f:26:f1:
9d:8d:0a:79:2e:ba:4d:29:d2:40:b8:d2:8c:8d:91:
ac:6e:41:3d:e1:01:30:50:34:b8:91:b4:6f:93:c9:
69:02:d7:2d:04:f0:64:78:32:28:ac:b5:f0:6e:fe:
5d:12:bb:8b:7e:63:eb:3e:9c:d5:90:63:25:bb:8a:
7c:e9:b4:e4:31:d7:9a:f4:a5:7b:2d:01:84:7a:fe:
da:16:d1:ab:5b:c7:dc:c2:91:25:83:85:35:f3:13:
89:c0:1d:40:7d:a6:67:e2:55:47:62:5d:82:5a:d5:
44:c0:67:b5:44:ef:1a:dd:9f:8b:00:31:52:31:4e:
28:07:fd:41:e3:7e:82:95:2b:a3:f8:02:27:65:f5:
e8:af:71:91:a8:9a:52:fd:42:f3:4e:1c:16:f4:25:
42:15:fa:14:ab:a6:bd:ad:97:e5:d8:5d:52:1c:18:
f4:c3:fb:67:3a:07:cc:ba:78:54:55:56:84:39:ec:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:84:E0:56:D6:3E:49:99:E7:8D:DD:B8:D3:69:A9:DA:13:5B:A0:D4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:56:0f:08:b7:6e:90:63:76:63:cc:a1:71:1b:a0:1b:9f:41:
62:0c:5b:4c:e6:9f:b8:c7:05:37:9f:4c:85:9d:dd:74:db:d6:
0c:1c:a8:6c:2d:70:88:47:cf:6f:c6:77:90:e6:e6:04:ee:9a:
6f:ed:79:08:a2:13:b6:a4:69:21:15:e7:4f:7f:43:71:fe:16:
69:ed:fb:57:cc:97:e8:2d:db:5d:1f:b2:31:38:60:d7:fe:b1:
93:62:95:02:4c:d7:75:bd:cb:9a:74:68:d0:d7:7d:3e:45:c3:
3c:13:1d:70:ab:bf:45:aa:e0:cd:f3:ef:4e:db:1c:eb:ee:21:
f0:47:ff:cf:ec:f4:55:70:ba:52:96:04:53:6e:e2:f9:d6:94:
64:27:1e:b7:e2:ef:6c:10:8f:8c:1c:18:87:4c:61:a3:58:22:
fd:95:82:92:5c:cd:ae:79:6a:5c:11:1b:64:f2:7e:9f:1b:a3:
a8:65:57:97:09:ff:3f:29:09:60:40:c5:1b:18:98:72:43:9d:
76:7e:5e:e7:df:b7:4c:0f:d3:b2:e8:0a:9d:07:51:7a:af:92:
79:b0:56:04:5f:a1:f8:97:84:13:1e:23:5c:0f:1e:ae:69:10:
2e:33:fd:bc:f1:f1:a5:72:05:13:14:f5:de:b1:8e:63:d4:16:
28:60:33:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:13:44 2026 by rpki-client