Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: n75v/k0B1t2lXavWLvTcWQTR5c0hIofKLBvUDxQYIgY=
Subject key identifier: 58:29:F3:0E:E9:4B:A8:9F:F5:B4:14:75:A3:00:8A:8E:F7:BE:AC:54
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 452D45E40F4AD4C330D664CCBF21E50F8DD4B519
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
Signing time: Fri 11 Sep 2026 12:12:13 +0000
ROA not before: Fri 11 Sep 2026 12:07:13 +0000
ROA not after: Fri 10 Sep 2027 12:12:13 +0000
asID: 8881
IP address blocks: 51.146.52.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
94.192.160.0/20 maxlen: 24
94.192.160.0/24 maxlen: 24
94.194.28.0/22 maxlen: 24
94.194.64.0/22 maxlen: 24
94.194.68.0/22 maxlen: 24
94.194.80.0/22 maxlen: 24
188.222.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:2d:45:e4:0f:4a:d4:c3:30:d6:64:cc:bf:21:e5:0f:8d:d4:b5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 11 12:07:13 2026 GMT
Not After : Sep 10 12:12:13 2027 GMT
Subject: CN=5829F30EE94BA89FF5B41475A3008A8EF7BEAC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:45:4c:96:25:e8:25:d2:67:93:b9:d9:a1:
61:aa:d0:84:ae:31:0f:91:67:81:a4:03:50:8a:57:
99:20:d7:67:fd:b5:52:1a:4c:57:44:ce:c8:2f:e4:
8a:8b:75:c5:15:b6:b7:ba:3b:eb:9b:8a:20:66:42:
97:78:9d:56:31:b6:3a:94:7f:d4:84:72:70:fc:1f:
17:20:d0:64:96:7c:d3:8d:30:b0:22:01:7a:90:c8:
d6:6d:d8:e5:fb:02:16:77:88:19:7e:25:fc:bd:49:
9a:12:7a:5c:0a:23:c6:5f:f5:55:0d:04:f6:00:21:
10:95:5e:e4:3b:b3:26:74:34:3a:1c:84:b3:f4:10:
15:48:50:64:86:d8:22:d1:fd:9b:14:7c:cf:75:1a:
bb:fd:59:22:53:4d:4d:d0:2a:ee:15:f7:e4:f6:60:
c8:41:ba:c0:a7:95:b5:23:8f:a0:c0:92:35:86:e4:
95:e9:1f:a0:8a:f8:35:b6:07:7f:4d:0a:25:1c:32:
99:30:66:53:12:c3:fb:57:e9:d4:47:c7:32:f8:f7:
32:b3:b6:87:d9:07:8a:84:1f:72:c0:a0:ac:01:d8:
de:f2:16:ce:87:69:26:f9:a8:eb:aa:f1:a7:51:72:
50:f0:97:cf:55:d2:75:76:be:2a:f9:e9:b1:9a:9b:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:29:F3:0E:E9:4B:A8:9F:F5:B4:14:75:A3:00:8A:8E:F7:BE:AC:54
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.52.0/22
51.146.144.0-51.146.149.255
94.192.160.0/20
94.194.28.0/22
94.194.64.0/21
94.194.80.0/22
188.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:1c:f5:2c:03:28:ec:d6:38:9b:78:b4:f7:e9:c0:22:c9:34:
e9:c1:f7:7d:91:a2:cd:f5:2b:eb:3a:a8:39:76:cd:34:bb:9c:
3f:ba:7f:f1:db:6b:1b:ff:82:35:29:36:10:97:1c:ff:08:c2:
c6:3e:b1:da:9f:b7:9f:b6:72:d6:1b:5c:13:92:1e:cd:e3:75:
18:ae:ef:6b:83:36:e0:ec:9c:bb:ef:be:90:be:13:b2:d6:be:
e3:21:e3:73:72:55:f6:8c:a1:ea:06:ab:1d:96:15:46:c6:d3:
ba:c8:4c:5f:9a:31:7f:64:6b:84:95:42:f0:e2:80:8a:a3:3d:
b0:12:af:b8:60:8e:5f:c0:96:50:10:6b:7c:c6:5b:91:f0:b0:
b9:43:13:c8:ae:70:e2:3f:8e:87:f9:a2:92:68:8b:0f:93:ab:
6d:5d:88:d5:cd:9f:2d:18:f3:26:f2:59:c2:ae:9f:7c:f7:29:
95:fa:ed:6c:0b:af:25:3b:75:2b:e0:30:b3:53:cb:86:0a:7f:
c5:4f:99:8a:85:c6:26:c5:fc:f8:06:b4:1b:0a:bf:3a:26:b8:
98:6c:b9:79:eb:64:15:e5:6c:75:88:ee:29:7d:ad:d1:0b:68:
1a:11:68:4c:7e:a6:78:4c:a8:0f:a7:d0:c5:f6:18:e7:90:d1:
a6:5a:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:08:21 2026 by rpki-client