Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218601.roa
File: AS218601.roa (raw, json)
Hash identifier: Wicu9rpI8ugkOD3D36aYVi+/vIrID+SgAWOO13y19ns=
Subject key identifier: D7:C8:A2:DB:CA:CA:68:97:9D:D1:03:0F:A7:9B:39:DB:ED:82:FC:C9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 09F7EB61BC9A3312DAB63F3726DE6FDAC35A72E5
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218601.roa
Signing time: Tue 13 Oct 2026 10:10:14 +0000
ROA not before: Tue 13 Oct 2026 10:05:14 +0000
ROA not after: Tue 12 Oct 2027 10:10:14 +0000
asID: 218601
IP address blocks: 51.241.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f7:eb:61:bc:9a:33:12:da:b6:3f:37:26:de:6f:da:c3:5a:72:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 13 10:05:14 2026 GMT
Not After : Oct 12 10:10:14 2027 GMT
Subject: CN=D7C8A2DBCACA68979DD1030FA79B39DBED82FCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:46:46:75:17:50:54:c2:62:ec:46:f2:f8:
3f:60:16:bb:23:3f:ac:a4:1d:59:0c:c9:3b:32:94:
90:64:25:ba:b6:99:51:bd:a7:2a:24:24:0f:7f:88:
67:3f:96:e5:49:fe:c6:a1:7b:29:cd:01:a2:be:b9:
f4:f7:d1:51:8e:34:b7:4b:fc:91:1c:50:d1:1c:82:
48:60:db:60:f1:06:f7:54:75:34:eb:ad:43:5f:2e:
4c:90:7a:49:18:17:62:a2:5f:5f:86:8a:d0:93:64:
8c:78:30:17:fd:0d:2a:dc:b0:d3:4d:6f:a1:7d:81:
db:19:47:6e:aa:87:be:dd:79:a6:c6:8e:9b:2f:bc:
fa:58:f4:63:e7:1e:44:bc:de:f8:f4:7e:13:ac:83:
07:1f:99:01:2c:94:7d:99:be:74:57:f3:46:d4:18:
0d:5f:f6:de:c2:b3:b0:e2:6e:04:91:33:fe:73:c6:
20:d8:58:34:2f:db:61:be:21:01:ec:0a:80:d3:81:
7a:63:e9:d5:f1:15:5a:f3:09:57:f3:f8:3a:d1:91:
28:ef:fb:05:6b:a4:7c:d3:ee:5e:cb:af:d2:ad:5e:
d6:bb:00:1e:0d:9d:b1:6f:2a:34:6a:6e:89:ca:ad:
f4:8e:8b:78:3f:f1:6b:7d:ef:4d:c1:df:0c:bc:bb:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C8:A2:DB:CA:CA:68:97:9D:D1:03:0F:A7:9B:39:DB:ED:82:FC:C9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218601.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:8b:a5:30:57:30:b7:61:37:88:9b:f3:23:2c:1d:b2:b1:71:
4d:34:33:f9:ba:1b:4d:f5:5e:34:8b:9f:a6:62:b0:69:b0:b4:
46:ae:7c:bf:06:6c:76:80:5d:c8:0d:ea:70:4f:d1:6e:de:e4:
36:27:44:f6:2d:5e:00:37:01:c2:c3:d5:c4:24:80:1e:ea:b1:
d1:95:50:f3:8d:48:a9:9a:e1:84:af:b0:e9:23:81:96:d1:5d:
5c:c9:55:8e:e3:3f:49:04:74:a0:4d:9b:b1:47:00:30:d8:4b:
37:ee:ff:bf:41:60:d0:03:af:df:dd:7d:21:d8:e6:39:b9:54:
84:17:37:99:af:6f:3c:75:b4:4c:5f:65:74:44:51:f6:cb:59:
bc:5e:bb:3b:1a:cb:d3:3b:2a:0a:20:64:30:36:6d:31:31:8c:
9f:9e:52:af:03:49:d3:ad:89:7c:f2:3c:0a:7c:d1:88:5f:75:
6f:37:03:cd:16:9e:95:3c:bb:36:e9:45:ca:93:56:ce:e9:c8:
5d:e0:20:5c:5b:bf:38:89:37:73:35:8e:79:0a:3b:1e:ab:e6:
b8:57:1f:ac:ef:42:d5:0f:1f:b1:4f:57:ee:79:9c:06:7a:9c:
7e:70:fb:42:84:ca:b3:68:9a:89:72:e8:29:2a:68:55:38:93:
1b:62:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:49:06 2026 by rpki-client