Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: Te7pyeT7ovugs5lYD556zf20bq3sggIr7mqNncBRhWU=
Subject key identifier: 32:3B:7C:52:1C:04:2D:90:90:DB:86:D5:57:2B:16:B4:63:99:97:05
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0EAF413AD4B8A67708A8C43AA0CFD12AFB111809
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
Signing time: Tue 03 Nov 2026 15:46:53 +0000
ROA not before: Tue 03 Nov 2026 15:41:53 +0000
ROA not after: Tue 02 Nov 2027 15:46:53 +0000
asID: 8881
IP address blocks: 51.146.52.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
94.192.160.0/20 maxlen: 24
94.192.160.0/24 maxlen: 24
94.194.28.0/22 maxlen: 24
94.194.64.0/22 maxlen: 24
94.194.68.0/22 maxlen: 24
94.194.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:af:41:3a:d4:b8:a6:77:08:a8:c4:3a:a0:cf:d1:2a:fb:11:18:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 3 15:41:53 2026 GMT
Not After : Nov 2 15:46:53 2027 GMT
Subject: CN=323B7C521C042D9090DB86D5572B16B463999705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:f3:47:cf:6f:6b:bf:95:20:8c:d8:88:0c:
51:3d:fc:e7:20:59:ee:d7:77:58:64:14:e9:df:30:
13:c3:5d:9e:eb:33:29:63:6e:58:c0:fc:ba:d7:b5:
18:b9:69:ca:66:e2:4a:ac:95:33:d7:b5:4b:c3:7d:
89:f0:34:0f:4d:98:75:03:4e:27:df:42:97:3a:aa:
d4:36:6c:80:8e:98:7f:8a:e1:89:d5:0b:6a:38:b6:
94:9b:ff:2a:a7:3f:92:43:b7:e2:74:81:7c:3d:d0:
d1:0e:50:62:2c:3e:40:85:4b:2b:96:40:bb:0e:89:
af:6d:07:44:75:b0:5f:c0:b5:6a:5c:7a:08:de:f9:
f7:42:b8:8d:8c:bf:55:e0:c9:fd:ba:1f:b3:bd:8c:
c5:f2:2b:f1:29:75:11:34:21:cc:b0:9b:3f:0e:00:
0b:0a:ed:ec:b6:fe:44:ff:c9:97:5e:83:6c:0b:e8:
99:41:3c:01:8c:36:7c:c9:6f:d0:20:df:61:8d:70:
a7:bf:d5:c8:f2:e8:34:38:58:90:fa:2e:53:68:d0:
02:15:ac:de:d3:d0:4b:f5:2a:3c:5e:9d:54:84:e3:
ac:be:b6:35:80:c3:c9:4d:46:22:73:dc:f6:8c:0a:
d8:d4:df:26:f9:99:b1:a8:08:82:75:a8:52:51:74:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:7C:52:1C:04:2D:90:90:DB:86:D5:57:2B:16:B4:63:99:97:05
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.52.0/22
51.146.144.0-51.146.149.255
94.192.160.0/20
94.194.28.0/22
94.194.64.0/21
94.194.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:68:d4:96:a3:10:f6:d7:e6:20:8a:f3:74:72:c9:33:bb:b4:
f0:30:11:3e:ec:21:a8:57:47:91:f1:96:21:03:a6:57:ee:05:
75:1e:36:e2:bb:9f:60:52:6c:f3:ed:76:39:ba:00:01:b3:3f:
6b:b8:bf:81:af:b1:7a:13:9a:cb:88:4b:3f:51:ab:6c:ab:6e:
80:dc:25:72:15:87:f8:36:31:04:cb:10:b3:35:2f:38:09:ba:
a7:dd:9a:08:bf:69:57:05:67:be:6e:b0:a9:72:27:8d:99:43:
aa:c3:ca:ee:5e:cc:f5:46:b3:78:cc:24:3b:5b:d3:83:eb:0d:
8b:ab:e4:41:df:d0:60:b4:c0:8d:a9:23:6b:35:c4:13:88:b9:
11:e8:94:71:90:83:0a:96:0d:da:3c:a3:ab:4e:7a:7c:5f:8a:
ab:bf:19:bd:9d:9d:ef:b3:5e:5f:72:d4:e6:cf:da:4d:32:f9:
35:0f:99:60:20:e5:c3:ce:db:a2:7f:25:99:e4:7d:93:75:c9:
a2:8e:80:ed:e7:6c:d5:1e:b6:0c:88:b2:fe:29:36:e4:cd:ec:
4f:50:19:3a:01:ad:48:a3:d2:18:d7:7d:ad:eb:fb:9d:79:a5:
46:13:af:45:7b:74:0b:dc:cd:49:d8:e3:41:a1:98:d8:6b:be:
ab:5e:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:18:39 2026 by rpki-client