Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218797.roa
File: AS218797.roa (raw, json)
Hash identifier: KT/tCC/8mu+rc5jGGwznnUuTjZ6sXy1QJbT9s7jAcxA=
Subject key identifier: A0:55:45:D4:1D:E6:6A:D2:4E:11:96:C2:7C:D2:91:60:D1:56:BC:60
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 62F1A8B3A58F9090DB8681068D8921BB6C7D55B9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218797.roa
Signing time: Sat 24 Oct 2026 10:22:27 +0000
ROA not before: Sat 24 Oct 2026 10:17:27 +0000
ROA not after: Sat 23 Oct 2027 10:22:27 +0000
asID: 218797
IP address blocks: 46.202.222.0/24 maxlen: 24
91.124.210.0/24 maxlen: 24
91.124.211.0/24 maxlen: 24
95.135.6.0/24 maxlen: 24
178.94.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f1:a8:b3:a5:8f:90:90:db:86:81:06:8d:89:21:bb:6c:7d:55:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 24 10:17:27 2026 GMT
Not After : Oct 23 10:22:27 2027 GMT
Subject: CN=A05545D41DE66AD24E1196C27CD29160D156BC60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:24:00:5f:36:8e:e1:4b:b3:7c:a6:de:45:
16:51:b4:38:76:f5:0f:af:44:23:7e:b2:57:ed:c3:
09:ab:dc:24:fe:2c:33:eb:56:e3:23:53:1d:b0:6c:
a6:81:fa:7f:16:21:98:f3:2c:1e:bc:3f:aa:69:68:
29:2e:4c:2d:45:9e:c7:d6:22:04:a2:8d:1f:4b:70:
33:8f:82:62:54:87:94:c0:92:f1:8d:65:56:24:e7:
08:44:b2:c5:35:11:6d:d6:69:05:8c:54:a1:7a:8d:
30:70:d1:6f:b4:81:db:ff:1c:04:97:3f:48:c2:66:
0b:90:4a:1b:cd:c9:50:55:bb:e0:86:58:a8:23:77:
fc:6c:ea:49:a3:9f:f0:77:c7:0c:0e:20:e6:66:dc:
ab:fe:e5:55:1a:8b:59:ce:ee:e5:2f:69:a7:ee:20:
51:9e:2a:9b:32:44:bf:f5:04:1c:5a:71:e8:7e:25:
ec:e9:38:48:6c:7a:3d:df:74:17:ab:ed:71:ae:62:
86:88:19:4a:11:5f:25:c7:15:d9:54:9a:2a:b2:42:
d6:78:26:d1:ab:70:bf:ae:34:d9:47:43:89:15:0e:
6e:4e:dd:44:87:16:f3:ef:4e:1d:2d:85:3d:50:82:
7a:c4:95:37:0d:c2:37:8c:30:ad:b9:e4:c5:45:c6:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:55:45:D4:1D:E6:6A:D2:4E:11:96:C2:7C:D2:91:60:D1:56:BC:60
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218797.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.222.0/24
91.124.210.0/23
95.135.6.0/24
178.94.1.0/24
Signature Algorithm: sha256WithRSAEncryption
93:46:d0:75:69:39:39:60:1e:59:60:c6:98:dd:fb:c0:8d:04:
a0:8a:5e:1d:37:43:6b:eb:f7:6a:b9:da:6a:22:de:6e:a1:fb:
7b:1a:6d:44:ed:1f:80:f2:86:db:fe:c5:61:5f:84:48:24:c4:
99:1d:02:cd:36:ac:e6:5f:ec:19:7e:08:c4:e1:6b:f7:d6:fb:
5a:03:f2:4b:e8:4e:e9:af:12:98:b8:28:d3:d1:6b:26:84:78:
de:7a:0a:41:8b:f2:2b:48:cf:00:65:a5:a0:98:91:d0:7c:c6:
a8:79:10:eb:08:a4:35:e3:49:87:81:e3:41:81:9c:54:87:c8:
a5:88:d4:53:11:39:86:73:52:9d:11:3d:ec:fd:4e:ec:15:24:
23:57:b7:07:10:1a:bf:55:87:09:9a:99:9b:c9:f3:df:05:0b:
23:bb:19:e9:dc:e2:ae:74:7d:14:5c:9b:fe:7a:ac:f5:b8:8a:
f5:28:33:07:c9:49:ae:58:8e:45:c2:a6:dc:d3:80:d2:20:7b:
6f:7d:9a:89:2e:1a:7d:6c:e7:ac:3a:2b:be:cf:52:df:51:60:
f5:a0:9c:ea:d2:f7:d3:74:40:9a:d5:7f:de:e7:23:88:2a:8e:
70:1d:c9:28:7f:8a:f5:04:1c:b4:b0:75:00:44:2b:84:90:e9:
28:24:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:45 2026 by rpki-client