Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218780.roa
File: AS218780.roa (raw, json)
Hash identifier: dGft3JO0LBiMLXl8DU5IluRsCXfWjYmdRy5VQYM7xtY=
Subject key identifier: CD:53:38:B5:48:6C:FD:EA:91:5B:1D:19:99:45:2F:B3:71:66:6E:43
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4F19229ABEE1357CC6F175E7724CB5E2838B7BF9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218780.roa
Signing time: Sat 24 Oct 2026 10:22:27 +0000
ROA not before: Sat 24 Oct 2026 10:17:27 +0000
ROA not after: Sat 23 Oct 2027 10:22:27 +0000
asID: 218780
IP address blocks: 46.202.222.0/24 maxlen: 24
91.124.210.0/24 maxlen: 24
91.124.211.0/24 maxlen: 24
95.135.6.0/24 maxlen: 24
178.94.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:19:22:9a:be:e1:35:7c:c6:f1:75:e7:72:4c:b5:e2:83:8b:7b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 24 10:17:27 2026 GMT
Not After : Oct 23 10:22:27 2027 GMT
Subject: CN=CD5338B5486CFDEA915B1D1999452FB371666E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:c0:96:76:03:36:06:7d:c3:da:d5:51:86:
c0:c2:32:7d:b4:62:b3:ef:d6:35:3f:6b:07:fb:24:
51:cb:f0:e5:5c:33:f2:df:ed:9c:05:a9:c1:cc:55:
1c:13:ff:b9:3b:6c:8a:e5:68:a1:53:00:db:9c:00:
0f:6b:ac:b7:55:51:5b:8e:38:04:0e:98:c0:b9:be:
92:bf:44:b1:56:56:64:94:84:88:24:ee:a5:df:e9:
ae:9e:ec:10:3c:a1:33:69:d0:b0:b2:01:9d:2c:ef:
31:b2:4d:e1:4a:56:d7:ef:ad:ae:58:d4:aa:5c:7c:
f5:51:a9:ce:64:d2:e2:5b:46:df:d8:1d:93:10:66:
3a:cc:b6:ef:9e:9b:99:46:c1:b8:b2:8c:69:31:51:
4c:32:9e:11:ec:e5:a9:dd:25:74:c0:b5:07:35:be:
5a:a2:a2:84:71:c8:a1:7d:dc:4b:88:0c:98:e0:31:
31:c0:f0:0e:db:89:c5:66:69:98:b9:fb:6d:13:7a:
01:94:17:25:f5:b8:db:33:71:ac:73:ec:43:b6:3e:
4d:f1:85:a8:4a:15:4c:5a:2b:57:41:49:83:99:f0:
b6:b8:87:46:27:70:3b:4e:24:8f:0d:19:fd:f1:e9:
ab:82:e3:1d:ef:81:55:b3:2e:74:91:26:85:60:e8:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:38:B5:48:6C:FD:EA:91:5B:1D:19:99:45:2F:B3:71:66:6E:43
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.222.0/24
91.124.210.0/23
95.135.6.0/24
178.94.1.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b8:7b:a3:ea:40:54:e9:1c:05:03:a7:cd:46:5a:76:cb:2c:
83:18:d1:1b:12:c8:b0:82:9b:ae:62:d2:2b:9e:a1:c2:a2:9e:
d9:79:55:e0:a7:c1:70:90:09:95:6c:dc:dd:44:f9:80:ea:73:
aa:a4:27:9f:8e:cb:02:65:ff:f5:d3:bc:93:23:43:fd:fa:ae:
0c:a8:65:d2:f6:f6:c3:af:80:ee:92:9d:3e:62:63:49:33:9d:
8d:d7:05:22:70:b7:35:ef:b5:2c:c5:6f:2f:83:09:c9:fd:75:
e4:e5:44:f5:61:bb:db:05:47:ce:83:a3:63:a4:da:42:3d:88:
e2:38:74:c8:7e:00:c6:a2:f9:23:9d:2c:0a:8a:95:63:ab:84:
3b:4f:23:4d:94:e6:ab:5c:f9:1b:03:ef:e8:b2:02:ed:c3:ff:
6f:4e:7a:db:85:9d:e7:3f:7e:8f:3e:70:61:12:ad:81:e3:1b:
55:ce:5d:3c:d8:ab:c7:6f:2a:7a:15:91:5a:06:f0:9c:46:77:
77:28:8e:a4:2c:84:cf:5f:ff:18:19:0a:e5:5b:80:3e:07:23:
64:01:a0:d6:af:cb:45:54:dc:cd:25:53:33:b9:71:e1:f7:33:
65:4b:5a:bb:35:06:03:23:91:45:89:21:27:82:21:e9:16:f0:
91:d4:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:43 2026 by rpki-client