Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218700.roa
File: AS218700.roa (raw, json)
Hash identifier: k7GfvN3ME+uAGdXujtJI0vgsN43/R72Yqz+pLqvsil8=
Subject key identifier: 92:30:14:6A:56:22:82:80:BD:34:8B:A1:E0:03:98:FD:51:54:D4:04
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1E6A540A1BB35173E8AB4698CBCF4A0E02A1A231
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218700.roa
Signing time: Mon 21 Sep 2026 12:28:25 +0000
ROA not before: Mon 21 Sep 2026 12:23:25 +0000
ROA not after: Mon 20 Sep 2027 12:28:25 +0000
asID: 218700
IP address blocks: 94.118.5.0/24 maxlen: 24
94.118.10.0/24 maxlen: 24
94.118.18.0/24 maxlen: 24
94.118.19.0/24 maxlen: 24
94.118.32.0/24 maxlen: 24
94.118.35.0/24 maxlen: 24
94.118.36.0/24 maxlen: 24
94.118.45.0/24 maxlen: 24
94.118.50.0/24 maxlen: 24
94.118.55.0/24 maxlen: 24
94.118.57.0/24 maxlen: 24
94.118.58.0/24 maxlen: 24
94.118.60.0/24 maxlen: 24
94.118.63.0/24 maxlen: 24
94.118.76.0/24 maxlen: 24
94.118.87.0/24 maxlen: 24
94.118.100.0/24 maxlen: 24
94.118.101.0/24 maxlen: 24
94.118.104.0/24 maxlen: 24
94.118.105.0/24 maxlen: 24
94.118.122.0/24 maxlen: 24
94.118.126.0/24 maxlen: 24
94.118.131.0/24 maxlen: 24
94.118.136.0/24 maxlen: 24
94.118.140.0/24 maxlen: 24
94.118.141.0/24 maxlen: 24
94.118.153.0/24 maxlen: 24
94.118.157.0/24 maxlen: 24
94.118.159.0/24 maxlen: 24
94.118.171.0/24 maxlen: 24
94.118.172.0/24 maxlen: 24
94.118.182.0/24 maxlen: 24
94.118.183.0/24 maxlen: 24
94.118.184.0/24 maxlen: 24
94.118.207.0/24 maxlen: 24
94.118.218.0/24 maxlen: 24
94.118.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:6a:54:0a:1b:b3:51:73:e8:ab:46:98:cb:cf:4a:0e:02:a1:a2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 21 12:23:25 2026 GMT
Not After : Sep 20 12:28:25 2027 GMT
Subject: CN=9230146A56228280BD348BA1E00398FD5154D404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:08:6c:73:e3:36:f4:73:b3:a9:98:13:6b:
09:24:23:49:2a:0f:05:4c:30:38:e8:22:9f:98:5b:
a4:9a:bb:07:1c:5f:4c:48:55:17:3c:29:e6:82:d4:
a1:a8:00:a7:92:d3:ad:a5:83:e5:db:c0:83:d6:bd:
f4:f2:35:81:1c:a3:49:2b:05:61:64:a0:45:4a:8c:
d2:37:0d:1c:82:40:0b:09:ff:ec:25:35:45:9e:03:
fd:3a:ea:ff:15:0d:3c:91:78:5a:54:a2:b4:15:df:
c0:8c:a4:bf:d9:f0:84:35:a1:cc:9e:dd:45:45:7a:
4b:ff:b2:58:df:30:fd:5e:b9:c3:f8:26:8f:d1:a4:
68:58:bd:64:4d:52:70:09:6f:9a:20:cf:6c:4d:de:
bc:b3:12:94:b8:0e:79:00:90:74:a8:ea:4b:96:10:
b2:2c:82:c4:c5:09:76:d8:59:54:e6:5a:d1:99:49:
5e:d9:7d:b9:d5:5f:44:9e:60:59:ca:d8:50:80:96:
57:2f:b5:7c:20:ba:fd:73:0d:26:89:85:c2:1e:c8:
9c:bc:e5:89:59:2b:b8:5e:76:2a:fb:ee:5c:44:74:
3c:be:0e:d2:3d:57:c3:a0:77:8c:1c:a2:1c:18:25:
e5:5e:27:94:6d:94:10:4c:79:07:be:28:a7:71:46:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:14:6A:56:22:82:80:BD:34:8B:A1:E0:03:98:FD:51:54:D4:04
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.5.0/24
94.118.10.0/24
94.118.18.0/23
94.118.32.0/24
94.118.35.0-94.118.36.255
94.118.45.0/24
94.118.50.0/24
94.118.55.0/24
94.118.57.0-94.118.58.255
94.118.60.0/24
94.118.63.0/24
94.118.76.0/24
94.118.87.0/24
94.118.100.0/23
94.118.104.0/23
94.118.122.0/24
94.118.126.0/24
94.118.131.0/24
94.118.136.0/24
94.118.140.0/23
94.118.153.0/24
94.118.157.0/24
94.118.159.0/24
94.118.171.0-94.118.172.255
94.118.182.0-94.118.184.255
94.118.207.0/24
94.118.218.0/24
94.118.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:36:19:5f:a4:ea:fd:24:6b:25:3c:bc:62:21:03:97:dc:6f:
66:a2:4c:9c:d3:0b:e4:ee:4d:a7:0a:05:e3:65:5a:d1:0c:95:
ad:a6:f8:b5:a0:74:63:54:f7:52:a3:88:ff:25:f4:80:23:85:
d0:f7:3c:f3:4b:f4:69:0b:80:39:26:40:ad:f8:0b:e2:c1:37:
a7:a2:76:e2:12:a4:46:58:cd:84:8b:ff:ff:76:b3:e2:d0:58:
48:34:3f:7f:81:c6:e1:86:29:70:7e:6b:20:1b:f8:98:ad:12:
7b:0e:78:18:c7:ea:da:05:68:42:a4:a5:e5:30:19:70:e4:78:
67:4f:54:0f:7e:07:76:ab:9a:e7:6d:a3:58:94:a9:31:35:50:
da:12:6d:31:9b:4a:be:cb:aa:91:b0:4c:30:9b:c2:78:83:9a:
9f:5b:4e:92:50:28:44:c2:0a:8c:37:22:64:39:6c:87:d4:72:
b2:f5:4f:57:43:df:21:3f:c3:93:c5:91:0b:bb:d5:9f:cf:bf:
a2:41:ef:87:f7:a6:31:a1:f9:38:73:af:88:46:76:f8:f0:65:
39:b5:ee:e9:35:20:db:21:41:8a:66:cb:e1:c5:67:21:c0:11:
37:21:4d:18:03:08:8e:54:2d:5e:59:97:3e:c1:68:62:33:13:
ce:2a:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:39 2026 by rpki-client