Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8796.roa
File: AS8796.roa (raw, json)
Hash identifier: 6hfiR4rQZLgTu/GYqFLma1qnRMC6sdevgae5LezvNnk=
Subject key identifier: EB:7B:AB:C4:59:3F:BB:91:8B:D9:83:56:E5:F5:10:FE:0C:26:17:D4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0BD02BE2DA2B5CBCA36610F94D750D3ED8144772
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8796.roa
Signing time: Tue 09 Jun 2026 08:53:47 +0000
ROA not before: Tue 09 Jun 2026 08:48:47 +0000
ROA not after: Tue 08 Jun 2027 08:53:47 +0000
asID: 8796
IP address blocks: 178.83.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d0:2b:e2:da:2b:5c:bc:a3:66:10:f9:4d:75:0d:3e:d8:14:47:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 9 08:48:47 2026 GMT
Not After : Jun 8 08:53:47 2027 GMT
Subject: CN=EB7BABC4593FBB918BD98356E5F510FE0C2617D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9e:59:61:87:90:fe:57:76:03:4b:32:4d:b0:
30:54:05:75:62:a0:db:3d:d7:a1:c9:22:6a:22:a6:
e3:f0:87:6d:9e:13:6c:6d:da:48:2d:3d:05:62:21:
4c:13:57:d6:ed:f9:66:ea:0c:c5:1c:2c:5b:3c:24:
9f:30:4d:3e:7d:be:70:b8:58:e5:5a:23:19:6a:c5:
44:08:88:1e:36:87:e6:d7:91:ac:d6:d5:40:41:22:
7c:18:4c:ff:6a:34:68:27:1b:53:b5:0c:2a:2d:bc:
74:85:96:44:30:85:bd:fe:0f:6d:83:45:cd:52:9b:
e9:ba:1c:b8:b0:b5:69:15:bc:0c:9d:9a:d9:10:4e:
fe:e6:33:a1:56:60:e4:16:77:fd:9f:04:62:8d:55:
73:1e:5c:c6:c9:52:bf:12:80:e4:e4:45:4a:62:29:
40:25:6f:dc:ac:bc:f9:49:32:bf:01:35:41:22:b6:
1f:5b:5d:47:37:9f:dd:c6:00:d0:49:e2:3a:c2:8d:
4a:3e:4a:4d:c2:1e:71:04:e7:e7:28:a9:6c:6a:ca:
fa:98:02:7c:38:cf:5b:00:1d:4e:70:15:7d:49:55:
87:ac:cc:20:cf:2a:df:ca:5a:78:04:51:e1:83:b3:
ff:6f:a1:42:16:31:0b:92:f9:9e:82:42:6f:a5:ac:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:AB:C4:59:3F:BB:91:8B:D9:83:56:E5:F5:10:FE:0C:26:17:D4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8796.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:13:dd:03:84:54:00:0a:2a:84:0d:84:63:fc:67:3e:01:7b:
53:d8:0f:00:3b:ce:06:4f:d3:c6:8e:10:92:52:ea:d4:c0:20:
40:3b:2a:c7:a0:72:44:8c:12:56:67:b1:45:61:e2:2c:28:84:
73:8c:a5:f2:e3:60:90:72:eb:59:60:5c:2f:fa:83:76:a8:a8:
cf:fa:15:b8:26:38:9b:81:a3:37:74:23:97:3e:3f:37:28:af:
36:15:07:71:b0:2e:70:5d:99:ed:54:fd:c7:c7:f5:cc:64:35:
a0:3c:ec:e4:95:22:e9:79:0e:36:7e:f2:26:ce:81:7d:9a:b2:
a6:d0:a4:21:d7:8b:ac:e3:6c:d7:e1:9e:a7:69:b9:f9:02:9a:
c3:a9:f2:72:99:d0:60:5c:5e:b4:9a:3a:76:bb:f4:b1:7f:f8:
fd:1b:65:40:95:68:10:81:36:19:55:26:b5:11:92:4a:7e:2e:
32:24:6c:67:88:fa:98:0c:b0:a3:8e:42:d0:ce:71:eb:b3:28:
89:35:93:0e:7c:a2:6d:86:0a:5c:70:d2:86:c1:c2:e1:18:56:
bc:57:db:0a:d6:a8:33:15:98:b5:cb:a0:91:7b:06:58:54:52:
b6:c5:09:29:1d:66:4c:2b:0f:0f:b5:d3:3d:e4:28:41:94:d0:
4d:3d:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:57 2026 by rpki-client