Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218919.roa
File: AS218919.roa (raw, json)
Hash identifier: YmDMB1A+QUrAKhMMA4iPSNWKGhg/5GXBUonzsKe/L8o=
Subject key identifier: 55:78:A9:17:3D:C3:C9:03:22:31:FE:75:15:E4:29:2C:B4:8F:96:36
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6226A40076DE15BA8B5AC72F99705E7C49216EB7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218919.roa
Signing time: Mon 12 Oct 2026 12:08:20 +0000
ROA not before: Mon 12 Oct 2026 12:03:20 +0000
ROA not after: Mon 11 Oct 2027 12:08:20 +0000
asID: 218919
IP address blocks: 46.202.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:26:a4:00:76:de:15:ba:8b:5a:c7:2f:99:70:5e:7c:49:21:6e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 12 12:03:20 2026 GMT
Not After : Oct 11 12:08:20 2027 GMT
Subject: CN=5578A9173DC3C9032231FE7515E4292CB48F9636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:e9:ae:f4:b5:94:c7:42:21:6f:eb:01:9f:
ca:62:2a:af:46:6c:89:40:62:88:02:50:49:a8:0c:
5d:50:59:f6:ec:17:ac:bb:c5:1c:8c:aa:2e:e3:83:
78:43:9c:9a:0f:ac:78:17:a3:b6:0a:8a:69:ad:88:
a2:42:ec:4c:ca:7d:b9:af:db:eb:1b:50:cc:0a:ae:
e2:ef:88:29:ba:8d:b6:c7:ab:8b:ea:51:b2:c1:77:
83:56:31:b6:86:ff:df:0d:a3:7b:24:7d:f4:8f:a6:
47:de:d3:5b:a7:e1:cc:5a:96:f8:ca:09:fb:7e:70:
1c:f1:a8:b2:74:46:13:60:64:9d:55:dd:59:8b:09:
90:e5:23:04:a3:33:fc:08:a9:85:9f:e9:78:5b:5d:
b4:c2:a6:ff:fc:93:a8:1f:26:e3:16:10:6c:11:61:
6d:b4:a0:5f:5d:8c:64:b0:60:b0:ef:a1:09:3a:3d:
a3:be:25:c5:49:8f:08:25:81:4b:3c:95:52:ec:ef:
a1:f7:5e:d0:c2:7b:b6:61:44:c3:b5:f6:a0:20:5d:
c3:de:7b:91:d4:ed:a0:fd:44:6d:a0:98:af:28:55:
2a:72:3d:0c:cd:47:c8:1c:26:ef:cd:5e:d2:94:07:
4c:15:ca:05:02:cd:b1:6b:93:6b:8d:fa:b8:16:da:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:78:A9:17:3D:C3:C9:03:22:31:FE:75:15:E4:29:2C:B4:8F:96:36
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.100.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a5:e0:d4:02:a5:75:ef:ca:5c:59:47:ed:e5:06:1e:82:5b:
5d:40:ee:93:72:c5:b6:92:78:6c:90:ce:90:7d:49:55:eb:2f:
02:ba:15:a8:7b:50:7c:3b:49:7b:1e:8d:e4:61:61:bb:25:cd:
08:ba:64:02:9a:56:44:69:93:cc:b6:f1:52:b1:b9:4c:9b:77:
f0:ea:6d:29:78:88:96:67:49:b0:6d:eb:b5:56:bc:64:dc:d3:
c3:be:c4:81:80:0a:a6:73:79:e3:27:d4:36:23:e5:70:0b:8e:
13:5d:74:68:ce:6d:3e:0b:dd:c4:f1:cb:b9:2b:c5:e9:a3:bf:
ff:66:5f:67:1c:c2:62:2e:35:9f:8f:7e:93:06:37:2c:4d:95:
c8:b6:2b:6d:c5:24:ae:24:76:b5:2e:aa:a2:a7:66:42:df:3d:
e3:5f:5c:e4:5c:23:77:4a:d6:2b:bd:f6:30:af:de:a7:fb:8d:
ab:7a:6f:00:f3:5e:53:fd:b8:0d:df:5b:3a:1d:fc:a0:c0:2d:
a2:20:eb:c3:63:b8:ac:e8:2f:50:74:fb:43:9b:c2:d6:13:b8:
fd:c1:c2:d2:ce:c5:23:2e:a7:96:c3:89:12:78:2f:cb:8e:f7:
c6:fb:49:04:00:6e:5a:2f:65:c1:85:4a:72:4f:d9:b7:6a:9c:
fd:e3:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:54:50 2026 by rpki-client