Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218829.roa
File: AS218829.roa (raw, json)
Hash identifier: njbS9PvIs0nqKj06nMJYBlFAw5Is28PF9h+zN3Hcs6o=
Subject key identifier: C6:B6:FF:1B:D0:85:67:F1:4A:B6:EB:FE:FF:2E:7B:A3:55:0A:66:76
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4C7E64B965E7911C899CE9B0ECA6EF755A8B4A8F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218829.roa
Signing time: Mon 14 Sep 2026 05:54:45 +0000
ROA not before: Mon 14 Sep 2026 05:49:45 +0000
ROA not after: Mon 13 Sep 2027 05:54:45 +0000
asID: 218829
IP address blocks: 188.220.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:7e:64:b9:65:e7:91:1c:89:9c:e9:b0:ec:a6:ef:75:5a:8b:4a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 14 05:49:45 2026 GMT
Not After : Sep 13 05:54:45 2027 GMT
Subject: CN=C6B6FF1BD08567F14AB6EBFEFF2E7BA3550A6676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:b6:f5:eb:47:89:25:c8:91:e9:24:df:e2:
6e:3e:79:d3:cd:a5:b2:72:0e:97:14:66:b7:ba:31:
91:1b:3c:3e:86:39:9b:59:23:d4:34:a1:f6:6a:84:
94:01:06:f0:fb:68:48:b1:80:43:be:09:8d:78:57:
24:37:26:d9:aa:14:c6:e9:e6:f1:ec:78:bc:a3:3e:
85:d3:77:5f:6a:16:74:01:e9:81:1c:30:d7:fe:db:
03:6b:99:8e:4d:48:55:32:7a:6f:80:df:18:4e:76:
bc:bd:c8:ae:db:59:4b:00:46:ec:12:cc:4c:2b:04:
0c:2f:a0:80:65:7c:81:0c:c1:2e:ea:7b:12:33:92:
19:f7:80:cb:b4:07:4c:1e:5f:e1:98:13:5d:ab:8c:
12:a2:29:d5:e6:1f:98:d5:7f:d9:dd:ee:b8:d6:9c:
37:0b:99:c0:cc:d3:cd:87:ed:d3:86:44:1c:95:6c:
6f:b4:40:ac:83:3f:a2:7a:99:39:e6:98:2a:c5:a4:
e1:26:e4:e6:f1:a4:ec:50:53:00:09:7f:59:ab:3a:
55:28:a8:c0:88:ff:ce:27:8e:ae:54:50:f8:5b:db:
e0:08:4c:38:fb:13:10:b1:42:f7:41:b5:6a:33:f5:
b8:ec:99:27:c0:12:a6:a0:0e:66:b8:52:86:7f:ec:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B6:FF:1B:D0:85:67:F1:4A:B6:EB:FE:FF:2E:7B:A3:55:0A:66:76
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.110.0/24
Signature Algorithm: sha256WithRSAEncryption
52:01:9a:8c:9c:b4:49:57:2a:55:a0:30:7c:0b:52:4d:c2:92:
18:0f:ee:25:c2:98:c9:ec:e3:db:b5:6d:bd:d9:2b:ce:58:dc:
97:92:79:d9:69:66:53:61:cc:fa:7f:9f:48:29:d9:0f:ca:6a:
ca:e2:89:f4:ab:eb:b8:82:d0:98:e8:c2:47:60:ce:5a:5e:0a:
49:19:97:bd:93:cf:36:90:1a:45:a6:31:25:35:54:64:aa:16:
28:68:7f:25:30:d9:ba:9b:0b:c6:18:cf:d2:4a:9a:b0:76:83:
21:05:74:4c:a6:1a:61:44:47:50:9d:56:3d:b2:fd:8b:47:56:
64:11:a9:a3:cc:05:e8:5d:2a:6f:61:d9:f6:5d:5e:7d:31:1e:
53:8c:62:7e:91:ce:f8:96:f9:41:a2:bb:34:f6:16:3c:4c:79:
bd:2b:89:53:f0:39:d9:b4:16:c8:73:bc:28:d1:d6:8f:29:a7:
ce:46:11:c5:27:6d:be:f2:1c:5c:26:5b:6f:60:a1:1c:e7:3e:
43:41:85:7e:fb:84:fe:ac:d6:ab:e1:f7:eb:2b:b6:92:00:f4:
54:0d:59:ae:62:fe:2c:42:3a:a6:fe:fc:d1:f5:2a:97:a4:36:
fe:9d:4d:ca:88:0a:9b:3f:92:5e:b0:a1:33:e1:aa:6f:5c:f1:
07:f3:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:37 2026 by rpki-client