Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218853.roa
File: AS218853.roa (raw, json)
Hash identifier: VO+DTKOFhnQl1feLFNWyEP4/5MqIWL8c9XuV6YQ4c0A=
Subject key identifier: BB:A4:59:E0:65:69:C8:9F:92:6F:05:00:AE:79:B4:C1:57:35:D3:67
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6ABC34DCDD0392EDAF8D2F6B6821FB3CA96C39EA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218853.roa
Signing time: Thu 03 Sep 2026 07:55:16 +0000
ROA not before: Thu 03 Sep 2026 07:50:16 +0000
ROA not after: Thu 02 Sep 2027 07:55:16 +0000
asID: 218853
IP address blocks: 178.92.165.0/24 maxlen: 24
178.92.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 20:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bc:34:dc:dd:03:92:ed:af:8d:2f:6b:68:21:fb:3c:a9:6c:39:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 3 07:50:16 2026 GMT
Not After : Sep 2 07:55:16 2027 GMT
Subject: CN=BBA459E06569C89F926F0500AE79B4C15735D367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:4e:5f:30:e8:2c:29:51:76:0b:04:c8:9c:
aa:b2:79:f3:81:63:fb:7b:88:97:7e:a7:41:14:6b:
76:97:08:67:c2:9e:4d:d2:5e:38:25:0c:51:2a:79:
34:77:4c:16:41:a6:48:d8:1e:10:06:d4:d3:03:5e:
f2:45:b6:00:9e:b5:a6:e5:54:4a:9d:d3:70:a5:ff:
cb:01:18:6e:ed:6a:37:b1:df:14:b6:25:b6:84:03:
e6:81:67:86:5a:37:b9:bf:1c:8c:c6:8f:34:89:3a:
0c:70:48:07:c6:78:e6:25:fc:ff:b2:7c:1e:f3:cc:
48:d4:00:3c:db:ef:5e:97:d7:74:8b:31:d8:4c:15:
b8:4f:f7:22:1f:a4:f9:9a:88:01:cb:3e:e0:4b:ab:
4f:37:c3:b1:2d:6d:0d:81:3a:79:cd:18:92:ca:18:
86:80:74:e9:15:85:0d:9a:18:1d:df:de:21:fa:ce:
b7:61:95:4a:96:c2:9d:7c:49:f3:df:9a:9c:58:44:
32:1d:88:db:fd:07:9c:d1:a0:ce:c3:03:30:e9:a1:
bd:7b:ab:3b:06:52:56:93:2a:99:e1:67:31:9e:32:
42:be:3d:a2:95:01:98:c1:3e:83:b6:a8:06:86:a2:
b3:8f:93:2e:54:24:eb:16:e0:2b:92:7c:de:fe:8d:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:59:E0:65:69:C8:9F:92:6F:05:00:AE:79:B4:C1:57:35:D3:67
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218853.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.165.0/24
178.92.236.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ae:0a:99:4f:ad:e7:6a:16:2d:5f:f4:3f:42:ff:42:c3:69:
c5:f1:ab:8a:0a:12:9f:3d:7c:ed:be:22:8a:16:0e:4b:90:9c:
10:09:59:87:c8:1a:90:69:95:d8:e7:18:97:ae:6c:1a:53:ee:
3d:89:24:f5:fe:66:f4:28:5f:a9:40:de:b1:75:2e:0a:9d:3e:
0e:e7:03:02:39:3d:4d:c8:6d:02:44:18:10:28:c2:1c:19:ee:
f7:a5:f2:17:f2:3d:dc:c7:06:0f:64:48:45:ff:9f:88:56:25:
f2:2f:f6:d4:02:25:4c:4f:4d:62:a0:8d:63:09:45:0c:b2:76:
5f:e8:34:31:82:43:fc:9c:fb:27:61:df:49:bb:df:48:55:ea:
be:be:a0:14:c7:31:69:a3:91:98:0d:94:89:f8:d9:31:57:be:
2c:12:9e:5b:23:aa:20:4c:e7:01:86:54:c6:32:77:e2:47:a3:
40:b3:13:da:52:15:ca:2b:d6:7b:6a:f4:42:c0:39:db:e6:68:
0b:6d:3d:51:d0:c5:5a:ad:4d:4a:36:63:bb:90:f9:51:28:93:
80:c1:1b:ce:49:2f:da:d2:87:1a:21:40:fc:c6:53:f9:43:00:
b2:cd:cc:86:2c:c3:ab:3c:1e:7b:af:3e:62:ce:a5:e4:78:dd:
59:02:50:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:11 2026 by rpki-client