Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218968.roa
File: AS218968.roa (raw, json)
Hash identifier: V4H5EVNcOMxskIdAeyCUeeydymTy0rM+rcfl0gfkZ70=
Subject key identifier: F6:E0:66:7F:24:0B:6B:F1:7E:2A:09:CC:E6:24:D3:CA:77:B8:E9:E4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4E3341524A2F88A1A87FDFCF7006A47665F5F0BF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218968.roa
Signing time: Thu 27 Aug 2026 05:43:52 +0000
ROA not before: Thu 27 Aug 2026 05:38:52 +0000
ROA not after: Thu 26 Aug 2027 05:43:52 +0000
asID: 218968
IP address blocks: 95.134.231.0/24 maxlen: 24
178.92.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:33:41:52:4a:2f:88:a1:a8:7f:df:cf:70:06:a4:76:65:f5:f0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 27 05:38:52 2026 GMT
Not After : Aug 26 05:43:52 2027 GMT
Subject: CN=F6E0667F240B6BF17E2A09CCE624D3CA77B8E9E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:1c:e6:26:c0:5d:8e:5a:99:01:f7:ee:ad:
11:00:ac:a5:81:c6:a3:42:e5:b5:cc:a7:4d:4e:3c:
b5:0f:af:aa:5d:f1:9f:33:d8:9d:02:27:45:d2:6d:
48:70:ba:15:fd:44:23:f3:e5:5b:48:93:35:9e:5e:
c8:05:65:04:11:c4:25:e4:45:71:7f:b1:f2:2d:c3:
dc:de:91:0b:01:4c:4a:0b:8e:f4:51:ad:7f:97:84:
e7:c1:66:12:c0:6f:c8:69:26:75:92:09:22:51:ee:
92:54:b4:71:ba:92:2b:9f:80:49:28:d4:1d:e6:38:
b7:c4:f1:8e:f6:75:db:c1:c3:5c:ef:97:2b:b7:d3:
c7:44:0f:a7:0c:bc:11:18:ab:68:20:86:20:39:d0:
c9:94:48:8f:f7:90:46:d4:bb:55:26:28:ba:a1:ec:
eb:5e:83:43:30:90:cd:74:1d:81:13:6c:0e:72:a3:
e4:19:c8:8a:5b:f0:cb:11:ff:47:12:bc:c7:e1:40:
cf:91:e8:91:b5:ea:44:f2:3e:36:10:66:f8:85:2a:
04:3a:29:d4:80:0b:40:46:49:39:23:a2:99:10:69:
1c:04:23:48:88:27:a2:b8:3e:98:f7:9f:58:57:86:
79:6d:fc:e5:c7:df:9a:ce:b0:2c:17:54:be:04:72:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E0:66:7F:24:0B:6B:F1:7E:2A:09:CC:E6:24:D3:CA:77:B8:E9:E4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.231.0/24
178.92.91.0/24
Signature Algorithm: sha256WithRSAEncryption
20:fc:6d:0e:6d:40:d9:99:53:8e:4d:57:04:59:2b:32:53:6c:
03:ed:95:a2:45:d8:d0:f2:14:2e:b7:e7:6d:b5:3d:71:cd:65:
a1:bf:03:93:38:5e:3e:fb:c0:18:15:71:20:cb:ed:56:28:72:
3e:55:75:38:c3:ca:3b:a7:60:40:ff:2d:c8:22:6b:ff:17:b4:
ff:58:ba:06:5b:ee:ad:ac:cd:6c:75:3f:54:54:64:58:d6:66:
36:27:b7:0c:0f:17:2f:c4:46:ad:b1:b1:81:6b:6c:8e:d5:bc:
0c:d9:93:4e:55:0a:d3:e8:36:91:1a:80:a1:74:2d:59:fb:41:
73:de:57:fd:45:89:46:22:8a:e3:05:b6:9d:b3:67:37:7e:9a:
8c:cc:91:b7:ea:fd:f7:98:82:88:c4:06:5a:1e:df:82:c4:cd:
3e:47:66:7b:bd:60:d4:cc:0b:e0:60:c9:23:e0:d0:7e:04:c7:
73:75:ab:ff:05:d8:4c:db:7c:c4:ce:42:f2:81:16:14:61:12:
d1:9f:fe:7f:7d:fc:ed:cc:52:66:b9:35:94:c0:a4:2d:cb:33:
46:57:9f:eb:db:56:0f:be:56:4e:c2:3d:6e:50:ea:8f:6e:e0:
cb:66:66:71:2b:60:a4:98:f2:cb:b4:f6:ec:68:51:5d:c5:97:
64:44:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:27:19 2026 by rpki-client