Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215418.roa
File: AS215418.roa (raw, json)
Hash identifier: eDMrhz/9ehvdbnAb2VIpV0ByC5QQ9jGRfZlD6FfOT0M=
Subject key identifier: DE:76:FC:89:0C:EA:83:7F:66:84:C7:F2:7E:3A:01:F0:4C:FD:3A:C2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4CB6D569C9ECB6E678BDAD48BB49A82DCB079361
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215418.roa
Signing time: Tue 08 Sep 2026 14:49:33 +0000
ROA not before: Tue 08 Sep 2026 14:44:33 +0000
ROA not after: Tue 07 Sep 2027 14:49:33 +0000
asID: 215418
IP address blocks: 185.36.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b6:d5:69:c9:ec:b6:e6:78:bd:ad:48:bb:49:a8:2d:cb:07:93:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 8 14:44:33 2026 GMT
Not After : Sep 7 14:49:33 2027 GMT
Subject: CN=DE76FC890CEA837F6684C7F27E3A01F04CFD3AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:3b:4a:14:e4:29:ff:0c:ef:ff:b1:72:a6:
55:aa:4a:f0:a9:78:51:9f:a8:d4:e8:6c:24:a3:2e:
12:10:b5:06:1a:7b:a6:62:a2:27:51:08:56:ed:f2:
f5:cf:82:80:80:88:4e:ab:e2:88:cd:2d:3a:a6:80:
21:2f:85:f2:ff:77:e6:4c:e7:d5:0b:78:03:7a:b5:
67:47:8b:23:d5:27:79:ef:cc:64:40:7e:0b:14:01:
c1:67:94:90:9a:75:ae:23:a1:cd:71:63:c8:ec:c3:
32:dc:74:d1:42:13:73:43:1f:25:fc:49:5d:62:b9:
c4:d1:cf:ba:7d:f6:19:79:4e:dd:5d:e5:12:c5:48:
42:ff:54:5f:ab:9d:a0:04:57:97:90:e6:de:23:bf:
c1:d5:10:a4:6d:3d:a5:c0:1a:19:18:16:4b:26:5c:
70:f0:92:e3:eb:94:9c:fc:52:84:d0:a1:dc:2d:fb:
be:96:fe:2f:05:e4:9c:fb:49:8b:6a:3f:5d:12:1f:
1e:6a:30:a1:ef:6f:43:bb:02:7b:f5:7d:3b:e7:7c:
6e:f3:6c:6a:63:95:e6:8d:80:a7:ca:be:5e:a7:56:
36:ac:f5:44:b7:f1:4a:8e:f4:9b:cc:8d:ca:cf:bb:
ed:12:c4:16:d4:1d:f9:bc:da:98:ad:0a:b4:e2:04:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:76:FC:89:0C:EA:83:7F:66:84:C7:F2:7E:3A:01:F0:4C:FD:3A:C2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215418.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.58.0/24
Signature Algorithm: sha256WithRSAEncryption
39:3b:8d:ab:64:21:9f:f4:b9:b8:9a:fa:66:0f:84:1b:4f:e5:
72:dc:12:c8:61:61:a8:73:7e:96:bc:4a:30:fd:a5:f0:6e:61:
de:f3:3d:f6:00:a8:d3:1a:6d:14:75:51:6c:d3:71:8d:e8:88:
c0:c9:61:38:e3:a7:74:e6:3f:37:16:92:93:74:9c:6b:8d:2f:
2f:f1:d3:dd:64:28:30:7a:b0:a2:51:6b:9a:d4:dd:fe:f9:79:
66:42:82:63:64:31:d3:a9:3c:3e:b8:17:16:21:e4:0b:a5:0b:
74:bf:e9:e3:e3:49:e6:49:2e:ac:4a:d4:3a:a4:7b:77:e5:3c:
68:45:a4:fc:7f:7d:92:fd:21:a5:c4:fd:f3:00:11:8a:52:6f:
04:2c:ac:4b:f9:3d:1a:ad:3e:44:fa:d3:ef:17:f1:a4:7d:b8:
04:3d:bd:d5:32:b3:4a:e5:54:68:f2:73:b6:3c:72:2d:d4:7b:
d0:a1:20:78:36:1a:ba:d7:d0:f0:53:bd:02:69:6f:f6:d8:e5:
38:95:a7:ef:43:11:e7:62:38:08:32:6f:15:e4:a6:13:11:fa:
1e:aa:52:7a:5b:3d:20:90:4c:18:89:8a:52:5a:45:96:d1:7f:
42:90:37:60:bc:f4:fc:50:37:9d:85:91:53:be:9d:5f:a1:a2:
63:ac:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:58:22 2026 by rpki-client