Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218911.roa
File: AS218911.roa (raw, json)
Hash identifier: +U71RHg4dhlFNb5YCJCBonXenLSk8WPvppJOR/Hqado=
Subject key identifier: 56:17:76:88:E2:6F:66:5C:3D:91:ED:79:DF:DB:7E:FE:73:A8:B3:01
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 35F7E2DE0FB02D1D1F13F5E93673E0A668CE99AF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218911.roa
Signing time: Fri 23 Oct 2026 09:25:34 +0000
ROA not before: Fri 23 Oct 2026 09:20:34 +0000
ROA not after: Fri 22 Oct 2027 09:25:34 +0000
asID: 218911
IP address blocks: 178.93.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f7:e2:de:0f:b0:2d:1d:1f:13:f5:e9:36:73:e0:a6:68:ce:99:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 23 09:20:34 2026 GMT
Not After : Oct 22 09:25:34 2027 GMT
Subject: CN=56177688E26F665C3D91ED79DFDB7EFE73A8B301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:d1:23:2e:10:29:d8:61:01:0c:f3:79:70:
64:db:d4:b9:2b:65:e2:d6:e8:0c:5d:bf:0b:9f:37:
67:db:a6:3a:8e:1a:67:fe:c7:b1:9c:88:f1:5a:d1:
c5:82:b2:99:bc:83:ed:7a:83:87:e7:16:97:88:cc:
2a:17:a9:f1:dd:d0:36:5d:b4:da:94:72:cc:85:c7:
0f:c7:eb:39:4c:3b:e4:b3:e5:73:dc:90:bc:90:a5:
79:b7:9e:84:80:ae:d9:96:c2:05:77:2c:1f:f4:67:
13:10:0a:99:08:be:23:d4:a2:2d:1d:e7:95:da:7c:
3d:a2:77:b9:18:26:96:7a:1a:cc:61:31:93:67:b1:
f5:4c:55:21:35:00:c0:90:8e:45:11:ba:66:b4:40:
ec:ee:12:a7:54:9a:57:3e:70:ea:13:79:b1:d9:ac:
d9:55:ae:8b:81:5d:4c:ce:fe:b7:6f:04:fb:b9:79:
6a:51:f1:22:65:a2:11:09:27:0f:89:5a:49:da:d3:
bd:5c:d0:50:e9:e5:1d:ad:dd:60:b7:b7:ba:50:73:
d5:56:66:af:18:aa:65:d3:1c:74:76:fb:7d:33:34:
40:ac:20:ce:7f:43:1d:da:d2:ef:66:a3:a3:06:47:
41:b6:fd:6b:04:fb:cf:78:6e:b4:f7:0c:ee:c1:8b:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:76:88:E2:6F:66:5C:3D:91:ED:79:DF:DB:7E:FE:73:A8:B3:01
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ee:47:c2:28:46:05:c2:1a:78:12:7b:7d:43:a9:a1:61:70:
87:73:80:8a:b1:b8:3a:3b:01:0b:aa:0f:e1:e5:63:b7:c4:f4:
55:81:ed:3c:48:db:02:dc:d1:35:50:df:f8:52:fd:af:41:0e:
f7:b1:d0:8a:3c:ac:48:3e:64:c5:ed:9e:c6:3c:3c:74:a5:a8:
fa:92:37:96:9c:8d:25:a2:4f:66:dc:9c:57:69:94:07:ba:ce:
1d:74:4b:4a:e9:bc:20:51:61:d2:ed:36:e9:dc:dc:23:be:21:
5b:a7:6b:7b:02:17:19:e0:3d:2c:fb:b2:f4:9e:4d:c6:89:8c:
1c:4e:91:ce:49:5e:b4:e8:b0:68:23:0f:b3:9a:76:c7:9a:17:
c7:3c:ed:14:26:54:b4:cb:06:39:45:7b:69:90:6c:77:82:7a:
b3:db:06:ba:1b:d7:a5:5a:73:25:e8:43:9f:34:1f:a5:4a:af:
50:9e:c4:4b:2c:94:a8:73:38:9c:76:f6:cd:a2:2b:d3:b3:13:
d9:7d:0d:ac:06:3f:2d:6c:50:06:ee:e0:53:83:90:72:7c:be:
14:51:6d:f6:8a:98:d8:46:c4:ed:61:bd:53:40:9a:ec:8a:ff:
e7:bd:6e:30:c3:15:f4:9e:23:fc:e7:e2:65:ce:1f:74:2c:67:
dc:47:fc:56
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNffi3g+wLR0fE/XpNnPgpmjOma8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMjMwOTIwMzRaFw0yNzEwMjIwOTI1MzRaMDMxMTAvBgNV
BAMTKDU2MTc3Njg4RTI2RjY2NUMzRDkxRUQ3OURGREI3RUZFNzNBOEIzMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66tEjLhAp2GEBDPN5cGTb1Lkr
ZeLW6AxdvwufN2fbpjqOGmf+x7GciPFa0cWCspm8g+16g4fnFpeIzCoXqfHd0DZd
tNqUcsyFxw/H6zlMO+Sz5XPckLyQpXm3noSArtmWwgV3LB/0ZxMQCpkIviPUoi0d
55XafD2id7kYJpZ6GsxhMZNnsfVMVSE1AMCQjkURuma0QOzuEqdUmlc+cOoTebHZ
rNlVrouBXUzO/rdvBPu5eWpR8SJlohEJJw+JWkna071c0FDp5R2t3WC3t7pQc9VW
Zq8YqmXTHHR2+30zNECsIM5/Qx3a0u9mo6MGR0G2/WsE+894brT3DO7Bi9sJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUVhd2iOJvZlw9ke1539t+/nOoswEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE4OTExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl3Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBe7kfCKEYFwhp4Ent9Q6mhYXCHc4CKsbg6OwEL
qg/h5WO3xPRVge08SNsC3NE1UN/4Uv2vQQ73sdCKPKxIPmTF7Z7GPDx0paj6kjeW
nI0lok9m3JxXaZQHus4ddEtK6bwgUWHS7Tbp3NwjviFbp2t7AhcZ4D0s+7L0nk3G
iYwcTpHOSV606LBoIw+zmnbHmhfHPO0UJlS0ywY5RXtpkGx3gnqz2wa6G9elWnMl
6EOfNB+lSq9QnsRLLJSoczicdvbNoivTsxPZfQ2sBj8tbFAG7uBTg5ByfL4UUW32
ipjYRsTtYb1TQJrsiv/nvW4wwxX0niP85+Jlzh90LGfcR/xW
-----END CERTIFICATE-----
Generated at Fri Oct 23 20:28:12 2026 by rpki-client