Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: lIYe8Ns/Y0Ar/KG1nj1zGZdkJ/tm9eyNLeVb/j77vug=
Subject key identifier: 6E:0C:6E:BD:4D:FA:6D:F8:2C:91:6A:75:6A:3B:47:A3:B4:B9:57:CC
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 47F3EDD37D88A5BA413D3AF9B80A1345EC4A7A7A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218965.roa
Signing time: Mon 14 Sep 2026 05:58:13 +0000
ROA not before: Mon 14 Sep 2026 05:53:13 +0000
ROA not after: Mon 13 Sep 2027 05:58:13 +0000
asID: 218965
IP address blocks: 51.146.140.0/24 maxlen: 24
51.241.106.0/24 maxlen: 24
188.221.86.0/24 maxlen: 24
188.221.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f3:ed:d3:7d:88:a5:ba:41:3d:3a:f9:b8:0a:13:45:ec:4a:7a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 14 05:53:13 2026 GMT
Not After : Sep 13 05:58:13 2027 GMT
Subject: CN=6E0C6EBD4DFA6DF82C916A756A3B47A3B4B957CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0e:a8:bf:f4:9d:cf:dd:bb:e4:a7:b3:f3:45:
b8:dd:5e:45:32:55:9a:20:ba:27:a8:fe:8b:b5:24:
fb:78:ae:b0:dc:9a:a2:04:11:5a:ae:4b:30:39:22:
c4:1f:b6:da:2c:d7:96:23:43:ab:f0:e7:3c:e4:8c:
58:57:19:d7:e8:3a:1c:96:01:a1:73:58:3f:6e:9f:
ba:73:aa:f0:42:14:8b:50:64:35:90:d0:80:60:86:
33:0a:1a:ef:18:7d:b1:f5:bf:82:b2:21:80:6e:b1:
f9:1e:8c:5a:f9:26:80:50:0a:3e:67:3f:64:fe:cd:
38:e8:04:d0:b5:08:fe:87:8d:27:d5:9e:a1:ee:c6:
a5:25:f5:69:ad:39:05:9d:33:8c:26:52:55:18:c1:
0d:21:70:d1:e9:f2:26:f9:80:9c:29:f4:5f:c9:9e:
3b:5a:df:02:c3:a7:a0:80:3c:ca:58:55:12:e1:31:
05:ba:45:f1:29:5e:7c:a2:fa:03:4a:b2:e7:fe:c8:
c0:8d:90:be:e1:2b:a7:bd:b3:6f:7f:d1:c7:64:1f:
df:5f:ae:00:f6:7c:aa:84:3e:03:21:85:33:4f:1d:
fd:e8:aa:01:24:cb:e7:b9:b6:00:e6:98:1a:2f:c5:
a3:fb:f4:67:aa:81:01:af:22:db:4d:2b:e3:42:ef:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:6E:BD:4D:FA:6D:F8:2C:91:6A:75:6A:3B:47:A3:B4:B9:57:CC
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.140.0/24
51.241.106.0/24
188.221.86.0/24
188.221.129.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4e:cc:36:6b:4b:36:d1:d6:fd:3e:8e:bc:31:e3:bb:0e:7c:
51:0c:1b:5e:7b:d4:83:5e:c5:9a:85:02:5e:ac:59:9c:37:51:
3d:c3:eb:58:5d:46:a4:27:e4:fe:a9:e4:06:04:54:a9:71:bb:
89:e1:f4:5a:2d:b9:a7:66:49:1d:92:22:f6:55:d2:e6:47:60:
ad:64:d3:b8:e6:50:1f:9b:77:b0:6a:0e:8c:4c:a3:4b:8d:7f:
d5:2d:a2:29:d0:67:0a:2d:82:7f:08:6f:16:98:1b:db:f1:f3:
f3:dd:43:62:70:99:56:4c:29:d7:20:77:1c:2c:1b:ab:78:93:
95:af:c7:77:08:83:34:cb:05:5c:b2:5b:79:fb:a8:1d:be:d7:
06:a0:55:ff:24:f2:f6:bd:c9:6f:e7:99:8c:89:6f:67:fd:48:
e0:ec:9a:07:29:c3:0b:c8:ad:04:f8:07:32:16:df:f9:c8:89:
0b:95:68:53:2a:5b:82:9e:48:a1:6a:16:0b:09:33:1a:ee:d0:
7d:ff:bc:a1:26:c4:fd:c2:b9:97:7a:b1:5c:a4:93:3e:05:a5:
bc:ba:95:8a:41:db:5a:a8:eb:ba:4a:10:6b:16:fd:a8:c7:9e:
9e:9d:55:98:50:a0:40:71:7b:be:39:a5:28:bd:91:54:cb:49:
1e:a4:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:34 2026 by rpki-client