Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: HPSWUYcly9koQ7aezylK6IEGQ3lumWJSmByAjilqIic=
Subject key identifier: 8C:E5:FC:F6:81:A9:E2:D4:FC:EC:EE:0C:3F:B9:6C:7D:11:2B:A0:4B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 081B326666CC630E9AC8DC960915E3FD4495F5A7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
Signing time: Thu 02 Apr 2026 07:03:32 +0000
ROA not before: Thu 02 Apr 2026 06:58:32 +0000
ROA not after: Thu 01 Apr 2027 07:03:32 +0000
asID: 8881
IP address blocks: 51.146.36.0/22 maxlen: 24
51.146.52.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
51.146.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1b:32:66:66:cc:63:0e:9a:c8:dc:96:09:15:e3:fd:44:95:f5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 2 06:58:32 2026 GMT
Not After : Apr 1 07:03:32 2027 GMT
Subject: CN=8CE5FCF681A9E2D4FCECEE0C3FB96C7D112BA04B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:76:8c:50:c2:d7:78:00:06:6d:93:f0:7a:
12:db:94:2c:27:d6:7f:10:4c:43:d0:43:e5:ac:2b:
43:bc:ff:eb:a8:9a:23:a6:d7:33:4f:55:0a:92:9f:
09:97:2e:17:69:51:d8:f1:f2:b8:33:e9:5e:a4:84:
3f:fa:64:51:d7:d9:e0:c9:b6:f0:b4:7e:65:a4:77:
59:f6:3a:56:d6:dc:f0:ad:fd:ed:b9:55:c2:cc:d7:
d5:a7:31:4d:96:e5:e7:9f:b2:7d:1e:2a:30:1a:08:
de:08:4a:7c:25:66:fa:c0:27:5e:83:e6:87:d6:96:
15:1a:3b:f3:eb:7b:03:79:c4:93:53:4f:4f:1a:ed:
be:86:eb:02:8b:41:5c:e7:f3:86:38:b1:c5:6c:c3:
9d:28:f5:65:a4:4b:c3:e4:00:72:c9:1c:e3:f6:cd:
b5:62:6e:33:bd:9e:59:b3:15:fa:b0:a5:41:ff:1b:
36:70:38:fd:cf:a5:75:7d:d0:aa:74:4b:fc:d7:fb:
54:20:26:44:18:52:ec:d9:7f:ec:23:12:49:c0:75:
8d:24:80:33:f3:bd:3c:1d:80:37:fd:d3:c2:df:7b:
ba:3a:84:5c:d7:c5:5a:26:de:13:8f:05:eb:1d:79:
db:88:6e:36:a0:76:8b:08:f6:11:2a:17:d6:a9:82:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:FC:F6:81:A9:E2:D4:FC:EC:EE:0C:3F:B9:6C:7D:11:2B:A0:4B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.36.0/22
51.146.52.0/22
51.146.144.0/21
Signature Algorithm: sha256WithRSAEncryption
63:8d:6b:c3:fe:eb:ad:d9:42:35:49:e7:9c:05:fd:c8:ce:98:
9c:74:ec:bb:12:b4:7c:0b:82:bc:a8:6b:f9:c3:98:33:72:ea:
4d:5c:a2:ce:c2:be:f6:d2:37:dd:9c:18:35:db:29:d7:bd:58:
28:f1:ba:3a:6b:d3:b8:8e:cd:51:4d:64:bf:e2:3e:fa:60:0d:
2f:58:99:6f:f5:06:41:86:0c:2e:c1:e7:69:2e:84:f6:0e:b2:
c7:e9:02:f5:8f:b4:81:c6:6d:e2:14:61:81:08:ea:e1:49:38:
d5:05:98:88:d2:b4:57:25:54:96:ae:6c:31:51:65:9f:b5:75:
ce:60:c1:92:62:29:53:73:d6:4f:33:59:3f:e6:2b:53:a5:bb:
d4:f8:b4:34:89:7e:79:f0:ee:65:ed:1f:e0:9e:cf:94:a0:28:
c9:13:b6:d4:62:2c:9e:39:20:8e:52:e9:83:02:fe:a2:f4:6e:
dc:3b:10:aa:e4:5e:4c:f7:21:fd:f2:6b:a2:ea:7f:44:88:74:
18:45:b2:73:0c:e5:23:86:36:9c:8d:41:20:89:8d:32:b7:31:
12:52:51:7d:73:80:eb:f1:bd:6d:6d:c3:7f:93:5b:51:af:cb:
d1:62:de:d8:c9:6e:18:31:13:c1:d2:4c:cc:c0:86:6d:3a:c5:
99:8b:1e:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:48:52 2026 by rpki-client