Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9381.roa
File: AS9381.roa (raw, json)
Hash identifier: 6TTmuiVv2dev58Y1ZV8kNSeX8w+sbvMVssh44/db2Co=
Subject key identifier: 6E:9F:76:40:3F:2B:79:2D:8B:E1:B8:CF:01:49:35:70:CE:2F:CF:8B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 09AF906E64ECE406C16E877CD7AC24EBC089EA61
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9381.roa
Signing time: Wed 08 Apr 2026 10:21:35 +0000
ROA not before: Wed 08 Apr 2026 10:16:35 +0000
ROA not after: Wed 07 Apr 2027 10:21:35 +0000
asID: 9381
IP address blocks: 82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:af:90:6e:64:ec:e4:06:c1:6e:87:7c:d7:ac:24:eb:c0:89:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 8 10:16:35 2026 GMT
Not After : Apr 7 10:21:35 2027 GMT
Subject: CN=6E9F76403F2B792D8BE1B8CF01493570CE2FCF8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:97:22:6f:fb:b8:35:54:ed:2f:57:44:3a:
ad:64:9b:06:34:78:23:84:4d:51:1c:01:e5:80:51:
c3:e5:09:62:0e:9f:16:99:79:c5:6d:a3:28:51:fb:
cd:85:58:a8:18:f9:af:74:86:9c:95:0c:eb:93:7a:
3f:e5:3b:93:d4:73:c5:00:64:1a:4d:50:a7:b1:e9:
49:19:cb:ce:8e:13:74:75:3c:bf:cf:b5:b8:2a:a5:
14:a7:1d:c7:f7:38:5d:11:ec:73:20:0f:96:e4:91:
f8:a8:36:9a:52:7e:18:f7:c1:fe:05:ca:2d:6a:82:
b3:cb:53:cf:fd:fb:86:cf:2d:97:19:71:8c:6e:e3:
06:4c:4c:c8:1d:1a:8e:54:f7:99:46:46:35:1c:a9:
b8:46:97:43:f9:f7:08:d5:b6:84:98:9f:0d:ec:2d:
3c:a6:b8:48:86:e7:42:5b:6b:18:01:60:4b:91:21:
c7:26:d1:f9:c4:10:5d:3c:cf:cf:cd:49:0e:e6:c8:
a7:eb:61:df:ea:21:49:90:71:5a:03:6f:a1:45:29:
fd:9d:89:1f:54:0c:f6:a5:db:19:5c:28:57:c6:23:
74:dc:b0:19:02:d0:13:42:81:77:50:9d:de:c9:95:
46:43:c2:58:09:6c:49:bf:3c:cb:ae:e3:81:68:42:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9F:76:40:3F:2B:79:2D:8B:E1:B8:CF:01:49:35:70:CE:2F:CF:8B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9381.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8c:3a:e6:e5:82:5f:ff:c6:8f:98:76:83:03:fb:37:6c:3f:
d9:45:d6:aa:c3:2a:9f:93:16:2e:e5:d7:59:e2:93:de:a8:8c:
02:78:04:36:38:40:47:d0:64:ae:42:e5:a1:f5:77:f4:87:7f:
06:e4:68:15:22:4d:3c:e4:c4:19:44:0d:8f:b0:07:01:b3:bb:
7a:ad:f4:17:34:58:2c:52:b0:18:95:29:48:c7:3a:90:2e:0e:
8e:6d:8a:db:75:2c:01:7c:a1:cd:b2:1b:53:4a:f5:7b:88:c4:
58:f7:c0:1e:0a:aa:cb:1e:e3:80:fa:86:2f:61:18:26:f0:29:
7c:ce:b9:4c:e9:f1:f6:d4:75:f3:5a:43:6d:04:73:d7:7f:9f:
5d:43:4c:5c:48:44:42:56:f4:ee:92:2f:d5:ae:b5:4d:bb:c4:
49:b5:dd:8a:8f:1f:09:42:d1:2b:d4:a7:61:91:e6:88:eb:b4:
b9:ff:53:ab:38:32:e8:23:8e:61:43:37:9c:c2:6b:e9:40:e0:
9d:6d:9b:b5:60:45:1d:12:e4:3c:b1:d2:13:1e:76:18:17:19:
9a:11:84:e7:1f:28:2d:85:4d:8b:c3:94:e4:cf:1b:ed:4d:a1:
90:84:a9:b1:65:22:ec:98:2a:b4:49:20:cb:24:36:93:84:1b:
40:ea:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:36 2026 by rpki-client