Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218780.roa
File: AS218780.roa (raw, json)
Hash identifier: sqqWV//5iGYSJTpoK/0nCvZ1kQbn5cywl6tUhauAo0k=
Subject key identifier: E1:C8:80:D1:26:5C:40:21:C1:F1:52:99:0E:EC:96:7B:AE:74:7D:5E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4384BCB23D3728CE48452BFC05D89AD3FC20EDDC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218780.roa
Signing time: Tue 10 Nov 2026 04:06:08 +0000
ROA not before: Tue 10 Nov 2026 04:01:08 +0000
ROA not after: Tue 09 Nov 2027 04:06:08 +0000
asID: 218780
IP address blocks: 46.202.222.0/24 maxlen: 24
46.203.208.0/24 maxlen: 24
91.124.210.0/24 maxlen: 24
91.124.211.0/24 maxlen: 24
95.135.6.0/24 maxlen: 24
178.94.1.0/24 maxlen: 24
178.95.191.0/24 maxlen: 24
178.95.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:84:bc:b2:3d:37:28:ce:48:45:2b:fc:05:d8:9a:d3:fc:20:ed:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 10 04:01:08 2026 GMT
Not After : Nov 9 04:06:08 2027 GMT
Subject: CN=E1C880D1265C4021C1F152990EEC967BAE747D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:91:99:6a:4a:2f:9a:21:88:7d:11:58:60:
83:fc:c0:e7:8f:7f:a8:1b:e1:b0:62:44:d6:e1:6b:
d8:69:b5:53:0c:50:97:fd:e6:22:b8:2c:af:78:75:
cb:3a:f3:5a:1b:76:d1:0d:70:77:74:2d:b9:06:26:
8f:a4:92:ff:e7:32:f2:85:df:30:ea:2d:a8:b4:d5:
38:2f:f5:b7:77:a5:c8:cf:4d:73:a0:cd:f3:6b:dc:
70:37:c4:5f:ec:bb:dd:de:d2:53:7c:46:b3:ad:e7:
dd:bd:df:36:e0:e3:a5:9c:6c:69:d2:49:3e:ed:57:
2a:e6:d9:89:69:8b:64:2e:5f:ef:14:09:92:19:2c:
50:0a:4e:c7:16:21:b4:cf:11:7a:b6:45:70:fa:65:
88:3b:67:25:26:dc:84:54:90:d2:f3:31:a4:a1:63:
4c:51:90:e3:78:fd:93:18:ec:96:aa:68:8a:c9:93:
38:8d:91:f3:8e:c9:44:65:b3:0e:fe:59:6c:7a:f7:
77:25:c0:67:10:ce:76:d9:3e:c9:af:97:60:4f:c8:
fe:a3:83:78:15:51:74:ce:23:8d:af:04:53:d6:95:
2a:31:c7:50:a4:8a:72:e4:3e:e7:a3:15:8f:94:eb:
17:5e:17:19:ba:7e:7a:b2:f6:97:6f:fc:bd:d5:b2:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C8:80:D1:26:5C:40:21:C1:F1:52:99:0E:EC:96:7B:AE:74:7D:5E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS218780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.222.0/24
46.203.208.0/24
91.124.210.0/23
95.135.6.0/24
178.94.1.0/24
178.95.191.0/24
178.95.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6a:6f:9c:55:62:5c:af:e8:36:29:07:fb:c1:33:7b:80:63:
0d:f8:32:03:58:24:4b:fe:c1:9c:1c:5a:27:fe:a3:3d:b5:40:
ac:0c:9b:ed:1b:5e:36:de:7b:c4:a8:65:bd:87:15:29:56:89:
40:fe:dc:06:b2:46:8a:51:c5:00:08:6d:aa:00:ed:17:f2:d3:
0b:17:a6:e6:98:36:5e:1d:95:aa:a2:c3:a8:09:6c:be:75:5d:
93:f8:5f:3b:1e:ac:c6:ac:62:97:7b:33:cd:7f:19:b0:dc:11:
78:14:c8:9c:31:59:33:f4:db:8b:9f:15:d6:97:68:5f:c7:dc:
c6:5d:66:5e:26:65:d7:68:b2:42:fe:d0:ad:2f:5b:1d:4c:b8:
32:b4:63:e0:93:ac:8c:61:5b:3f:e1:fd:70:a6:b1:c7:5f:08:
a4:6e:14:b1:53:52:0a:73:99:83:a5:58:75:55:13:20:2d:51:
cb:17:b6:e0:0b:db:d7:b4:f2:74:44:70:61:2e:67:7e:fb:a0:
9f:9b:9c:e9:6a:78:69:af:d3:df:81:a6:2e:24:76:87:04:4e:
8f:a4:f9:aa:d2:1e:7c:f5:20:e6:d9:20:7b:6d:e2:39:94:a2:
8e:0f:f2:38:31:86:2c:e1:ed:22:f6:af:89:df:b8:b7:33:28:
03:90:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:07:20 2026 by rpki-client