Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213476.roa
File: AS213476.roa (raw, json)
Hash identifier: 9sRBfowHA4XIscnU7koKTisf2Hz7Risy4bZ/15EmlPg=
Subject key identifier: 0B:D5:5C:EC:DE:9F:A9:9E:EF:A5:64:CF:11:7C:39:7E:58:02:AD:EE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6F0504E0F1F382A216F1F383663FE96C53FF644D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213476.roa
Signing time: Mon 07 Sep 2026 08:28:25 +0000
ROA not before: Mon 07 Sep 2026 08:23:25 +0000
ROA not after: Mon 06 Sep 2027 08:28:25 +0000
asID: 213476
IP address blocks: 46.203.189.0/24 maxlen: 24
92.113.42.0/24 maxlen: 24
178.92.34.0/24 maxlen: 24
178.92.43.0/24 maxlen: 24
178.93.90.0/24 maxlen: 24
178.93.115.0/24 maxlen: 24
178.93.234.0/24 maxlen: 24
178.94.136.0/22 maxlen: 24
178.94.150.0/24 maxlen: 24
178.94.151.0/24 maxlen: 24
178.95.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:05:04:e0:f1:f3:82:a2:16:f1:f3:83:66:3f:e9:6c:53:ff:64:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 7 08:23:25 2026 GMT
Not After : Sep 6 08:28:25 2027 GMT
Subject: CN=0BD55CECDE9FA99EEFA564CF117C397E5802ADEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:08:97:a6:34:62:fa:ba:ed:06:56:fb:38:
07:fa:1b:cc:a6:b7:bb:15:49:d2:ee:96:20:cf:c9:
14:a4:c1:a8:ad:a5:7f:d3:f3:f9:ea:01:56:73:56:
f7:94:75:04:be:dd:7e:b6:3b:6e:1e:c5:85:b3:f7:
cd:5c:4c:b1:24:ad:4b:96:28:5b:08:3b:32:17:06:
e2:a1:7a:ce:9a:70:13:d8:87:61:ea:f1:3f:8f:95:
95:02:c3:3e:bb:f3:18:f2:b6:9d:d8:cd:65:93:d8:
50:41:cc:15:a0:23:74:b0:a8:b8:12:e4:d7:9a:15:
25:4a:9c:6d:0d:d9:45:3e:97:b0:a6:e2:13:8b:69:
21:52:f2:9a:9c:ea:29:53:3b:66:90:b9:8c:9f:b1:
07:6c:a3:5d:70:5a:50:88:27:cc:af:ff:30:fb:ef:
8a:ba:b9:43:6f:5c:42:74:6a:3d:09:00:bc:40:9c:
ee:98:c1:93:a5:aa:87:0d:b4:89:46:8f:11:d3:a9:
fe:4c:fe:26:37:35:0b:28:af:15:43:4c:ca:65:13:
23:1f:4f:04:7c:8f:58:4d:be:b9:a3:19:bb:66:3f:
20:e4:07:8a:c4:79:74:ef:d2:7b:e5:45:36:65:c3:
44:69:66:92:96:cb:e5:e6:87:f7:fe:cf:30:a5:e3:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D5:5C:EC:DE:9F:A9:9E:EF:A5:64:CF:11:7C:39:7E:58:02:AD:EE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.189.0/24
92.113.42.0/24
178.92.34.0/24
178.92.43.0/24
178.93.90.0/24
178.93.115.0/24
178.93.234.0/24
178.94.136.0/22
178.94.150.0/23
178.95.57.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1f:f5:16:8e:53:4f:7c:ff:6a:80:28:70:d4:d4:bc:a7:71:
8e:6c:4a:cf:2a:6b:ff:59:67:cb:74:34:ce:3d:34:3e:ec:6d:
1d:c2:99:04:b6:fe:84:89:f9:7d:ee:bc:99:7a:71:d3:8a:ea:
17:f7:70:91:76:e6:cb:02:75:82:16:92:af:49:b5:9f:fc:d8:
3b:32:d4:ac:e2:48:0b:e1:cf:5b:a2:89:13:81:90:ab:11:2e:
4d:9b:35:2d:4e:df:89:96:53:15:d6:08:d7:df:44:d2:c5:67:
54:c1:fd:a0:04:cc:da:f0:97:80:bd:c7:e8:f6:15:59:5b:dc:
58:7b:a0:da:b6:d2:ad:9a:fc:8f:38:09:83:dd:79:7f:f9:ab:
44:9b:b1:34:90:6f:c3:be:30:13:6a:41:23:dd:1f:43:b4:aa:
5a:84:51:a9:b2:c7:68:5e:fc:a2:b4:06:67:a0:52:7a:72:11:
1e:7e:fc:b4:47:4e:35:6e:d1:91:28:f6:dd:93:9a:b0:10:83:
d4:81:12:31:68:50:a8:e5:61:fb:3e:aa:a3:6c:44:a5:00:ce:
85:64:d8:7a:ce:45:82:d3:84:c8:69:26:d6:7d:06:8e:4f:da:
f0:06:e0:f4:b8:64:c7:de:3c:b1:1a:12:de:1e:7f:26:6f:e1:
23:d1:62:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:24:00 2026 by rpki-client