Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218931.roa
File: AS218931.roa (raw, json)
Hash identifier: EwH6U6yspk+sgOG10QEmfDDC3g9B9ZhoL53cBEwq6XI=
Subject key identifier: 2F:2C:47:A8:37:39:1A:93:85:28:19:AF:34:54:8D:BA:FA:A2:BD:C9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6BAB58918F886B92CFEB775E22F7BB557F7308B0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218931.roa
Signing time: Thu 20 Aug 2026 17:34:26 +0000
ROA not before: Thu 20 Aug 2026 17:29:26 +0000
ROA not after: Thu 19 Aug 2027 17:34:26 +0000
asID: 218931
IP address blocks: 178.93.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ab:58:91:8f:88:6b:92:cf:eb:77:5e:22:f7:bb:55:7f:73:08:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 20 17:29:26 2026 GMT
Not After : Aug 19 17:34:26 2027 GMT
Subject: CN=2F2C47A837391A93852819AF34548DBAFAA2BDC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:6a:c0:17:13:ef:fc:55:2f:60:b2:01:9c:
b8:44:a7:16:a2:7c:6c:4b:bf:d3:e0:8b:e4:9c:4c:
7c:dc:79:7c:11:6c:f1:a8:ed:ec:3a:95:d1:5e:7a:
5d:22:a3:7a:a0:ec:1a:1c:86:d8:ba:e6:7b:a8:1b:
48:c5:6d:b1:f5:a2:e0:04:15:9e:f5:cc:fd:d0:1f:
a4:38:36:74:49:99:58:f6:61:e3:7f:e2:90:85:e8:
dc:64:15:e7:3a:d2:25:0d:b2:d8:41:79:63:a4:29:
dd:55:47:13:b7:ab:cc:da:71:29:18:d4:3b:58:5a:
9e:f8:06:89:a6:e8:47:b3:9f:ec:c7:8d:98:4b:5a:
aa:56:ce:9a:b7:a9:47:f5:00:1d:f6:83:9e:63:bc:
b2:39:93:24:62:39:4d:42:22:9c:5e:c3:7c:01:2b:
8a:df:ce:40:fe:fb:20:a1:c0:11:51:46:5a:fc:cf:
4a:aa:21:19:09:76:32:4a:64:dd:e5:2a:a4:d4:72:
ae:3f:49:cc:fd:a0:4e:8b:f2:ec:16:c1:5c:bb:72:
36:d0:c1:35:f8:56:ff:68:c8:bb:ba:6f:77:cc:0c:
8d:90:41:da:e9:2c:64:e3:11:be:17:eb:bf:52:19:
34:7d:8c:db:50:38:7b:e9:5f:92:6b:74:88:85:4e:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2C:47:A8:37:39:1A:93:85:28:19:AF:34:54:8D:BA:FA:A2:BD:C9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f7:5b:f6:69:86:48:30:1d:cf:ce:8e:2b:da:b4:1b:85:72:
7d:aa:20:24:e9:31:c5:cb:b8:9a:ac:2f:6f:23:04:fa:ec:ad:
f9:7c:81:e6:56:a3:56:f5:15:d1:ca:7d:bc:25:36:db:c2:43:
6e:7c:19:6c:e0:e5:bf:f8:84:54:98:f2:3d:ce:4d:b7:69:2e:
67:28:9c:51:0d:37:1a:c3:a7:10:0f:5d:38:12:8b:12:d3:9c:
e0:6c:fa:7f:fd:aa:b0:81:1a:ae:98:40:50:d2:a8:d6:46:00:
ec:19:78:c6:d8:65:40:05:66:7e:5a:73:dd:74:87:07:15:7d:
c9:7d:f7:ea:7f:d6:55:c0:ec:0b:3c:37:66:b4:fb:87:a7:d4:
d0:58:b3:b8:0c:23:b1:9a:2b:31:ec:fe:65:fd:d0:5f:8a:67:
84:aa:cd:dd:cc:45:62:1a:b9:dc:dd:18:26:1c:5f:14:ac:c3:
0e:ac:6d:88:ce:d0:32:20:b8:b2:9d:ef:36:5c:96:72:8f:30:
ff:b9:43:70:14:9a:87:3c:73:ab:13:3b:a1:19:fb:b4:81:03:
a8:f2:9f:7a:1e:98:1d:e8:72:1e:bd:60:6b:a9:8f:50:3b:85:
10:86:03:6b:3f:2b:51:0c:f8:9b:86:01:24:ff:6f:21:56:d3:
7d:cf:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:11 2026 by rpki-client