Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211130.roa
File: AS211130.roa (raw, json)
Hash identifier: ijm6DZKYMsZxzkWXGoRAA3cT8WRG6dLeYBGqAZvke8M=
Subject key identifier: 0D:80:F4:60:31:63:90:98:89:8E:D9:97:4F:82:67:B4:0C:7E:F5:E2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 634BCB3B52BE5C74C5CCD8FB3E6EF29FC3EF70CA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211130.roa
Signing time: Wed 02 Sep 2026 10:49:32 +0000
ROA not before: Wed 02 Sep 2026 10:44:32 +0000
ROA not after: Wed 01 Sep 2027 10:49:32 +0000
asID: 211130
IP address blocks: 178.95.100.0/24 maxlen: 24
178.95.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:4b:cb:3b:52:be:5c:74:c5:cc:d8:fb:3e:6e:f2:9f:c3:ef:70:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 2 10:44:32 2026 GMT
Not After : Sep 1 10:49:32 2027 GMT
Subject: CN=0D80F46031639098898ED9974F8267B40C7EF5E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:75:2c:c6:6c:58:8e:1f:19:01:db:cd:28:
76:8a:82:84:c6:0c:91:aa:45:07:3b:0a:c3:2a:d4:
e2:62:0f:e3:8c:13:5d:49:92:f1:04:9b:32:6a:78:
98:f5:55:ed:d4:40:57:64:bb:f1:62:6c:c4:7a:29:
be:2e:40:af:05:dc:5c:2f:70:97:6b:8a:f5:d0:2d:
d4:01:da:4b:83:3a:0d:95:03:00:60:84:c2:a0:dc:
a2:14:53:06:3d:87:61:ba:f9:42:06:77:fd:eb:1f:
cc:c2:f0:63:b8:f1:71:c6:37:12:7d:d5:b4:c7:56:
c7:e6:f1:ff:a2:55:94:37:89:7c:7e:18:2d:7d:a1:
20:54:99:0a:da:f2:0e:98:ff:8c:bc:d5:ec:0e:e6:
1c:a6:92:d7:25:c5:ef:06:c2:51:d6:98:a1:f1:b9:
1a:22:93:e1:6f:3b:26:23:79:b5:71:3d:fa:70:26:
20:8c:4b:71:7a:66:eb:6c:4d:d4:ba:9b:91:a7:67:
3d:69:d6:14:c6:27:f8:d9:6e:42:d4:94:b0:5d:e0:
d1:fa:4e:ee:c0:5b:3e:2e:a5:7d:82:3b:32:0f:14:
84:9b:bd:82:00:8f:11:62:4a:7b:be:ef:a5:4c:cd:
98:c1:b2:c8:75:0f:32:1e:1b:93:4a:54:87:bb:96:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:80:F4:60:31:63:90:98:89:8E:D9:97:4F:82:67:B4:0C:7E:F5:E2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.100.0/24
178.95.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0c:2c:64:96:bb:49:10:54:38:8d:58:6a:c9:66:45:c9:88:
56:51:12:6f:39:8e:76:17:4b:3f:90:62:29:2a:a7:0c:d9:a0:
07:0b:c3:9c:26:64:46:75:f0:4a:f0:8b:07:34:71:05:ea:af:
b1:97:3d:56:08:d1:a4:ab:be:66:ee:fb:36:4e:d4:d2:5d:97:
6f:d2:49:d4:aa:e8:40:61:4d:24:84:2c:56:ce:47:b7:ab:f4:
ac:c7:0f:d9:c9:4e:ab:6b:e1:a3:a9:f2:6f:a8:3f:b3:20:73:
77:b4:45:60:e2:6e:c0:02:7a:cf:19:2b:97:6d:d8:a5:e2:67:
89:36:df:24:17:14:4e:31:10:76:f5:3c:5c:32:34:d2:32:e5:
c9:dd:7a:ed:0c:cb:da:dd:ea:2f:a8:6f:2b:b0:3e:80:3b:e2:
d4:b6:3e:98:aa:84:87:ec:f8:40:c8:c9:0e:df:4b:8c:a1:0f:
76:ec:77:a5:f4:a3:19:a9:fc:ec:f2:87:7c:26:65:67:a3:ed:
ba:c8:a7:1a:d0:d0:1c:e1:4d:f3:da:4f:6b:99:59:a1:81:5c:
6d:f4:47:e8:7c:5e:d4:19:ba:91:09:2c:c1:05:c2:f1:f6:a3:
62:af:ab:5c:07:9d:b0:61:f0:9c:44:e2:b2:1e:1d:b5:ba:d3:
8c:b1:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:02:32 2026 by rpki-client