Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218915.roa
File: AS218915.roa (raw, json)
Hash identifier: FidgHEE1pM7TE7nyqi23N+z33Z+ms7/eaVbFv3OmKHM=
Subject key identifier: 19:00:43:68:6E:66:BA:F1:4F:EF:3C:F6:E7:21:0A:5B:CD:D3:19:DD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4CEEDA9DBD02BC7087B8864D7D9A1D57ABDF1625
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218915.roa
Signing time: Mon 24 Aug 2026 12:59:27 +0000
ROA not before: Mon 24 Aug 2026 12:54:27 +0000
ROA not after: Mon 23 Aug 2027 12:59:27 +0000
asID: 218915
IP address blocks: 95.134.129.0/24 maxlen: 24
95.134.235.0/24 maxlen: 24
178.94.49.0/24 maxlen: 24
178.95.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 11:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ee:da:9d:bd:02:bc:70:87:b8:86:4d:7d:9a:1d:57:ab:df:16:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 24 12:54:27 2026 GMT
Not After : Aug 23 12:59:27 2027 GMT
Subject: CN=190043686E66BAF14FEF3CF6E7210A5BCDD319DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:ba:bd:26:fb:15:f3:1d:c6:70:6f:fd:ef:
6d:57:41:ca:8c:a0:83:74:b4:7a:8b:bf:9d:1a:a3:
a7:69:2b:7e:8a:64:fd:06:e7:ee:e8:8b:b8:c2:6e:
46:e7:10:cb:92:b1:f0:75:56:7b:7f:9f:e4:9a:bf:
26:e8:ee:40:2b:46:80:07:88:d6:94:03:60:23:53:
f7:1c:9a:4a:d3:94:f9:4b:cd:ac:28:ac:92:f3:cd:
48:bc:3d:75:6c:31:a5:48:73:c1:8a:2d:2e:c2:e3:
1a:b2:d9:ba:6c:3f:13:fd:c7:79:aa:67:ba:d8:90:
c9:9e:32:b3:97:0c:6b:d8:34:fe:5e:9b:ac:90:22:
14:b7:84:7c:be:77:d1:4c:e2:e6:e8:8a:fa:d9:51:
c4:ee:56:d3:9e:1f:a1:12:c6:eb:68:85:c3:6b:e8:
2f:b4:e3:4a:02:14:f3:8b:f7:2b:5c:af:3b:41:6d:
6d:87:75:54:68:8f:93:ed:10:99:a2:66:85:98:1c:
0c:cc:4e:f0:0c:09:6f:cf:2b:cb:aa:49:31:dc:df:
aa:c4:45:8f:be:55:39:5f:bc:e9:30:c5:7b:fb:45:
40:65:7b:4e:9c:f9:0a:4c:d9:7b:16:54:0e:a5:79:
00:e1:ba:17:4e:37:9a:7c:47:c2:07:8f:ad:c4:4f:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:43:68:6E:66:BA:F1:4F:EF:3C:F6:E7:21:0A:5B:CD:D3:19:DD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.129.0/24
95.134.235.0/24
178.94.49.0/24
178.95.244.0/24
Signature Algorithm: sha256WithRSAEncryption
21:46:61:2d:26:58:fa:75:fd:69:10:5e:02:d6:9d:1e:11:c0:
8f:c8:f0:7c:5b:2c:2a:c8:63:4d:32:24:52:1a:0f:2a:b5:59:
7b:b1:e9:15:91:3d:f7:8b:2b:5d:b3:3b:44:2d:fc:ec:05:21:
4f:c2:7d:ee:17:b0:39:a5:90:17:ce:c5:86:0a:21:4e:26:93:
dd:34:45:f6:2e:e5:37:ae:4e:ff:8c:51:1a:27:04:d3:70:4b:
1f:39:fd:03:20:7b:79:7d:3e:24:06:fd:38:58:e0:55:a0:71:
21:b9:9c:10:43:84:36:dc:a6:04:c4:ef:78:7b:49:93:5c:78:
9e:72:26:fb:3d:2b:d5:63:ed:f4:55:1b:3e:5f:13:7f:04:43:
e8:f6:2b:fd:ef:e9:06:bd:6a:48:75:d0:ce:b5:cf:dd:0e:7a:
d6:54:fb:d4:49:c6:ee:58:ae:76:b7:9f:a5:44:05:3d:d5:70:
99:b2:c4:d8:64:02:83:61:81:07:f0:b4:eb:37:35:13:ed:40:
5f:9e:65:ba:9b:51:b3:03:c9:4a:e2:6e:45:86:e9:da:6d:cc:
c7:fc:bd:92:97:ff:fa:26:b2:02:13:04:6f:98:ed:80:51:34:
cb:47:8d:f7:60:07:78:27:5a:08:1b:37:f4:b5:9b:6a:d5:ce:
7c:1b:23:fc
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUTO7anb0CvHCHuIZNfZodV6vfFiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA4MjQxMjU0MjdaFw0yNzA4MjMxMjU5MjdaMDMxMTAvBgNV
BAMTKDE5MDA0MzY4NkU2NkJBRjE0RkVGM0NGNkU3MjEwQTVCQ0REMzE5REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQLq9JvsV8x3GcG/9721XQcqM
oIN0tHqLv50ao6dpK36KZP0G5+7oi7jCbkbnEMuSsfB1Vnt/n+Savybo7kArRoAH
iNaUA2AjU/ccmkrTlPlLzaworJLzzUi8PXVsMaVIc8GKLS7C4xqy2bpsPxP9x3mq
Z7rYkMmeMrOXDGvYNP5em6yQIhS3hHy+d9FM4uboivrZUcTuVtOeH6ESxutohcNr
6C+040oCFPOL9ytcrztBbW2HdVRoj5PtEJmiZoWYHAzMTvAMCW/PK8uqSTHc36rE
RY++VTlfvOkwxXv7RUBle06c+QpM2XsWVA6leQDhuhdON5p8R8IHj63ET80bAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUGQBDaG5muvFP7zz25yEKW83TGd0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE4OTE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAX4aB
AwQAX4brAwQAsl4xAwQAsl/0MA0GCSqGSIb3DQEBCwUAA4IBAQAhRmEtJlj6df1p
EF4C1p0eEcCPyPB8WywqyGNNMiRSGg8qtVl7sekVkT33iytdsztELfzsBSFPwn3u
F7A5pZAXzsWGCiFOJpPdNEX2LuU3rk7/jFEaJwTTcEsfOf0DIHt5fT4kBv04WOBV
oHEhuZwQQ4Q23KYExO94e0mTXHiecib7PSvVY+30VRs+XxN/BEPo9iv97+kGvWpI
ddDOtc/dDnrWVPvUScbuWK52t5+lRAU91XCZssTYZAKDYYEH8LTrNzUT7UBfnmW6
m1GzA8lK4m5FhunabczH/L2Sl//6JrICEwRvmO2AUTTLR433YAd4J1oIGzf0tZtq
1c58GyP8
-----END CERTIFICATE-----
Generated at Tue Aug 25 16:34:43 2026 by rpki-client