Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218911.roa
File: AS218911.roa (raw, json)
Hash identifier: 6Zqj9rudCZaXh499r7AREq83ncDdTrgF3zZS+sqLDcQ=
Subject key identifier: 58:34:FB:B4:FB:5E:CA:8E:D6:0F:67:4E:14:CB:C8:AC:E4:54:BC:86
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3B26B1502A468ED6C6238D34EA31DB283CED400A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218911.roa
Signing time: Wed 28 Oct 2026 12:29:50 +0000
ROA not before: Wed 28 Oct 2026 12:24:50 +0000
ROA not after: Wed 27 Oct 2027 12:29:50 +0000
asID: 218911
IP address blocks: 91.124.107.0/24 maxlen: 24
178.93.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:26:b1:50:2a:46:8e:d6:c6:23:8d:34:ea:31:db:28:3c:ed:40:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 28 12:24:50 2026 GMT
Not After : Oct 27 12:29:50 2027 GMT
Subject: CN=5834FBB4FB5ECA8ED60F674E14CBC8ACE454BC86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:c1:b4:1e:25:78:c3:2f:aa:38:d1:e1:d1:
62:0a:6b:d2:88:32:43:a6:51:aa:2c:ee:90:f3:ba:
86:3d:b7:cb:7c:49:ed:1d:91:05:e7:05:48:54:bd:
fa:9b:39:5d:4d:97:b0:3d:b4:1e:4b:45:89:49:f6:
a8:d7:d0:a0:61:39:8b:1f:a4:07:40:a8:a3:16:b1:
ac:25:34:a4:86:41:d7:49:a6:9b:b7:0b:d8:35:21:
27:2e:b0:b3:f9:5f:c0:8e:81:45:5f:f7:a4:f9:03:
57:77:97:f5:02:74:cc:99:15:94:09:55:30:fb:ba:
fb:06:a4:68:24:97:d0:a0:53:5f:67:87:35:fb:94:
3d:6f:37:25:99:b1:0e:e9:ce:ef:b5:50:a7:71:eb:
21:29:36:ba:76:ff:f3:a8:05:3d:0d:a9:1a:3e:db:
7f:7a:41:5e:22:c6:78:d0:a5:0f:e3:d6:df:ad:2f:
6d:dc:72:15:bb:cc:e9:33:c6:5a:f6:9d:cb:c2:52:
24:12:4d:4b:db:80:3b:89:1c:05:46:96:91:ae:f0:
8b:df:4a:5b:41:01:14:b1:69:a4:30:e4:b3:13:44:
63:d7:7b:1e:77:70:47:91:e9:3a:b1:c5:b7:d7:fe:
69:9d:3f:8d:9f:95:55:42:cd:26:fb:97:c5:6e:87:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:FB:B4:FB:5E:CA:8E:D6:0F:67:4E:14:CB:C8:AC:E4:54:BC:86
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.107.0/24
178.93.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a2:9c:f8:63:0b:5d:b4:a4:0b:35:74:b0:6f:7e:10:77:a3:
1a:15:80:13:7c:a1:95:6d:3b:03:68:0d:8f:3c:27:ee:bc:c1:
ba:61:9a:e9:8a:8f:da:5c:35:94:b5:21:46:a3:7b:ec:93:68:
43:f0:d6:92:f2:94:f5:2a:74:ec:0e:3e:89:38:87:06:44:fd:
dd:ea:67:f3:f0:17:58:d3:d6:70:9d:a7:96:8d:cd:48:0d:55:
8a:03:ee:1e:dd:78:69:00:5d:2b:b3:54:0d:a2:50:3a:2e:7c:
27:af:37:f9:74:99:f9:cd:d1:7b:19:a8:10:33:48:19:95:82:
70:fd:d1:4e:a2:25:7f:c8:b7:0b:a5:2d:79:89:f9:21:c5:fa:
33:31:59:62:d4:7f:cb:fc:ea:57:07:33:82:bd:df:7d:9a:f3:
27:8a:45:e0:f9:1b:54:8d:b7:df:d8:fe:d5:29:93:3e:ae:1f:
8c:4f:02:ea:b3:9c:b9:c8:63:51:5b:0a:c8:3a:da:f5:1f:10:
ce:0e:81:78:6e:70:66:f2:a2:d8:c4:56:5d:24:83:d0:2c:09:
ca:0c:c9:0e:ec:c0:d3:ff:6f:58:5b:d2:0f:d9:5b:4b:9a:b7:
a4:75:48:8d:2b:35:d5:3d:eb:bb:7f:bf:b1:b1:0b:4a:3e:ee:
bf:44:4e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:00:34 2026 by rpki-client