Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218799.roa
File: AS218799.roa (raw, json)
Hash identifier: 77gXE1U88GOB6khOYhXEQIoI0NfzmjCiQ5B/YzjN0Hg=
Subject key identifier: 85:5C:87:D0:A3:A8:BB:40:F4:3F:F1:A2:A3:FE:7E:46:90:F5:B5:82
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 164E8D38F7A8AE5F754D0016EAAE93FB5867E0E3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218799.roa
Signing time: Thu 03 Sep 2026 18:50:37 +0000
ROA not before: Thu 03 Sep 2026 18:45:37 +0000
ROA not after: Thu 02 Sep 2027 18:50:37 +0000
asID: 218799
IP address blocks: 178.92.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4e:8d:38:f7:a8:ae:5f:75:4d:00:16:ea:ae:93:fb:58:67:e0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 3 18:45:37 2026 GMT
Not After : Sep 2 18:50:37 2027 GMT
Subject: CN=855C87D0A3A8BB40F43FF1A2A3FE7E4690F5B582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:60:34:f7:07:c8:71:bd:0f:0c:80:d8:e5:
92:a7:65:c3:4b:b2:6f:55:1d:fd:ed:00:ac:03:69:
33:71:61:8d:6e:4e:80:09:2e:0a:a3:e3:e3:ee:1b:
6b:bf:d6:71:90:46:32:8f:00:67:24:84:76:d3:41:
3d:6a:65:3f:65:88:31:5e:d7:8c:44:33:89:4d:9c:
61:68:1e:a5:fa:e8:f2:e1:9e:c0:5b:3b:ce:c4:d9:
54:ce:0d:72:1b:2f:87:ba:85:ae:9a:1d:2e:c9:c4:
6e:d9:ce:ed:79:92:0d:90:ca:df:6c:ec:38:b6:6e:
7b:35:2e:79:5a:ba:c2:7f:95:82:ab:a1:fd:1b:74:
bc:79:b8:42:5c:c5:12:68:a2:e5:83:f7:5e:33:6b:
df:9c:6f:7b:6b:51:cb:ca:9d:71:62:0b:44:21:3e:
99:f2:e1:04:19:67:4c:c6:c9:e6:37:49:39:34:5a:
32:ad:46:47:82:f0:8f:d6:a0:22:bb:3d:72:92:2f:
5d:bf:ca:71:15:44:2a:00:cf:9f:0e:01:71:11:17:
b3:55:7a:20:ee:a6:d8:29:ef:f8:e1:a8:93:eb:cf:
ca:e8:28:c6:a5:96:b3:87:0c:c3:5b:40:ab:b5:76:
71:66:c1:20:d3:b0:ba:6b:ee:bd:b2:3c:69:fe:f0:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5C:87:D0:A3:A8:BB:40:F4:3F:F1:A2:A3:FE:7E:46:90:F5:B5:82
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.29.0/24
Signature Algorithm: sha256WithRSAEncryption
74:cb:30:66:8c:7c:fd:b8:ce:14:7e:18:b5:c4:77:21:e4:19:
0c:e8:76:3e:c1:4c:9f:16:85:93:7f:88:f2:3a:66:65:c2:8b:
b3:de:ef:de:32:91:89:de:a3:06:56:6a:80:24:88:6f:37:f3:
ad:6a:0d:d8:6b:85:cd:c8:2f:f2:3b:79:65:8c:34:e6:40:dc:
b9:15:30:29:ee:4a:ea:6a:03:54:1e:e6:3d:e4:4d:62:86:7a:
92:1f:98:f4:11:d3:bf:8d:93:75:e8:c0:70:8f:ec:bc:77:b1:
8e:dd:38:35:41:e4:89:9c:de:94:f6:1d:62:8b:a8:14:56:53:
3a:33:82:4a:9c:aa:8a:23:5b:4e:79:38:08:c3:c3:04:76:c2:
c9:57:98:c9:bd:92:3d:f2:31:c5:95:31:29:07:99:94:0d:df:
5f:55:62:3e:85:d4:a9:64:fa:84:8d:49:b0:55:6b:f6:73:61:
4c:a2:8f:67:da:2c:f2:26:d8:81:77:7d:49:56:a0:9f:f9:22:
af:26:40:95:c1:de:f7:f0:66:90:e1:4d:51:34:7e:59:12:5c:
89:50:4a:9c:5f:e8:2c:bc:76:30:5b:52:bf:8f:09:59:d7:7a:
fd:35:a0:40:08:88:b6:0f:0d:94:be:24:e2:a3:ed:06:95:aa:
62:12:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:14 2026 by rpki-client