Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218780.roa
File: AS218780.roa (raw, json)
Hash identifier: m146tc+in0+zvk4ZO0oaE0rByxfFVIK6RhKB+j/cqmU=
Subject key identifier: A9:99:9F:1C:D8:48:91:DD:9A:E0:15:F7:17:E4:12:9D:71:7A:ED:B3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6CE1C8248DE67BE017EB40C33D1BB83BAD8CB96E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218780.roa
Signing time: Tue 03 Nov 2026 06:06:34 +0000
ROA not before: Tue 03 Nov 2026 06:01:34 +0000
ROA not after: Tue 02 Nov 2027 06:06:34 +0000
asID: 218780
IP address blocks: 46.202.222.0/24 maxlen: 24
91.124.210.0/24 maxlen: 24
91.124.211.0/24 maxlen: 24
95.135.6.0/24 maxlen: 24
178.94.1.0/24 maxlen: 24
178.95.191.0/24 maxlen: 24
178.95.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e1:c8:24:8d:e6:7b:e0:17:eb:40:c3:3d:1b:b8:3b:ad:8c:b9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 3 06:01:34 2026 GMT
Not After : Nov 2 06:06:34 2027 GMT
Subject: CN=A9999F1CD84891DD9AE015F717E4129D717AEDB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:b9:2a:ea:c9:91:3b:12:69:af:0f:85:56:
3a:cb:2f:0e:35:cf:f0:13:ef:fc:0f:56:67:d6:14:
06:a2:1d:ab:ca:6f:dc:35:f9:a6:46:cc:4b:4b:32:
68:a8:74:84:30:1d:8d:68:27:42:06:64:39:9d:c9:
ff:55:5f:10:65:0a:2f:48:e6:ff:95:e3:50:41:bf:
c9:48:6a:d0:10:6e:10:bc:34:9e:a0:07:43:d6:54:
77:ea:05:af:8c:15:bb:c3:94:db:86:cb:af:a7:a9:
f4:08:58:b9:1c:a9:84:17:e6:c3:b7:06:57:04:10:
c9:0e:24:68:f6:95:6c:ac:fc:25:eb:a0:50:49:3d:
d9:e4:dc:95:53:d0:e6:c5:d5:cb:aa:c7:fe:a5:68:
3d:62:05:ce:62:65:7f:8b:d1:d7:64:9f:da:13:0d:
f0:1d:59:00:2a:8b:77:c2:7d:f1:7f:56:ad:c5:4a:
d3:0c:44:31:be:ee:01:51:b6:22:f7:1d:66:a2:59:
f1:c6:ee:1a:32:98:c9:bb:08:cf:b8:aa:9b:cb:79:
0f:39:57:44:e2:82:ba:63:f3:f1:59:ed:58:7f:95:
38:c9:25:28:04:f8:22:15:cb:92:9a:9f:27:cc:9b:
b6:94:2e:5a:9b:8e:6b:22:f9:1d:51:c3:af:07:8a:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:99:9F:1C:D8:48:91:DD:9A:E0:15:F7:17:E4:12:9D:71:7A:ED:B3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.222.0/24
91.124.210.0/23
95.135.6.0/24
178.94.1.0/24
178.95.191.0/24
178.95.216.0/24
Signature Algorithm: sha256WithRSAEncryption
83:23:e6:e4:d3:8f:ed:fd:2b:9b:87:38:09:03:fc:47:b1:8a:
2e:c1:97:c2:76:82:9c:ea:2e:de:87:bb:6a:2d:a7:a4:ed:6e:
56:b0:cc:bb:91:68:ac:00:26:06:a4:97:1f:2f:0f:01:5d:f8:
08:59:9f:6f:c1:5d:c7:9d:36:22:65:34:3c:6a:4f:f5:a4:97:
4d:f2:2a:c8:1a:2e:e9:c2:62:41:d1:f0:0e:d7:b3:19:83:68:
32:db:88:c9:dc:de:19:e2:05:a4:aa:2a:36:b2:b1:6a:47:85:
24:47:1b:58:86:32:9e:2b:cb:b5:d2:02:84:8c:54:59:d7:49:
fd:91:7e:b3:fb:96:f3:da:1c:c6:b9:1f:c2:56:d6:00:74:bf:
af:6c:a2:66:32:54:99:45:2d:e7:92:8e:24:c7:43:65:4e:cb:
9f:34:4f:d7:0f:52:f0:8a:07:b0:f4:75:29:1c:9b:ac:ea:5c:
c6:0f:4a:1f:13:fe:b0:82:8e:9f:bd:c9:fe:12:48:ac:5b:48:
96:6f:a0:d3:2f:42:5c:d4:b8:3f:9b:85:95:c3:af:6c:b6:e4:
e3:e7:74:4c:58:5e:72:84:16:32:da:20:96:96:eb:ab:fc:73:
3e:80:58:92:ef:fe:e9:ab:59:fa:8a:ca:cd:7d:de:67:60:db:
b6:e9:2b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:58:46 2026 by rpki-client