Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218743.roa
File: AS218743.roa (raw, json)
Hash identifier: 4ZnjNQNeOJmskHhJv6H3acWcmlMnk+1sb2iVKuLVKck=
Subject key identifier: 6D:84:E4:48:BC:1F:07:E9:27:70:49:36:AF:7B:9D:46:CD:6C:7E:4F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 067B32E402A1A55D2AC896272EAF7F183778E331
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218743.roa
Signing time: Tue 13 Oct 2026 02:50:32 +0000
ROA not before: Tue 13 Oct 2026 02:45:32 +0000
ROA not after: Tue 12 Oct 2027 02:50:32 +0000
asID: 218743
IP address blocks: 51.241.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7b:32:e4:02:a1:a5:5d:2a:c8:96:27:2e:af:7f:18:37:78:e3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 13 02:45:32 2026 GMT
Not After : Oct 12 02:50:32 2027 GMT
Subject: CN=6D84E448BC1F07E927704936AF7B9D46CD6C7E4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:10:6f:71:88:36:a3:2a:7d:25:3e:a3:9c:
42:0d:9c:ec:45:fa:c1:01:5a:a4:f8:18:70:8c:63:
cd:c4:74:f5:7a:04:46:e9:d2:60:f9:1a:76:f2:5d:
94:ef:ef:ed:21:7f:a8:3d:f8:40:04:6e:82:d9:48:
c3:93:9e:32:b6:dc:57:97:58:98:4f:0c:d4:5b:eb:
77:bd:69:6c:fa:8e:aa:f1:ff:0b:86:5e:ee:21:90:
27:e8:2f:91:27:97:e2:af:73:22:6b:79:d0:07:e8:
1e:c3:88:de:69:e9:36:0a:1c:b4:81:47:9b:0c:60:
d9:fd:f7:96:0f:87:0a:ca:ba:e6:6a:7d:b2:86:e5:
92:f9:3e:80:9b:a7:37:8d:f2:84:61:6b:60:1d:de:
65:bc:f8:ca:25:7c:22:b4:c4:ef:95:ab:45:fa:99:
8a:a7:26:e8:56:fd:b1:7a:b4:1c:00:b3:c8:03:78:
26:60:cf:52:39:c1:20:be:01:c4:a1:d7:da:f2:b8:
70:a7:24:8a:15:16:f8:eb:7f:21:5c:18:71:0a:6d:
c0:f4:fc:d5:bd:98:82:9b:1f:5d:c6:16:61:f3:4b:
ab:43:63:15:40:85:34:25:7d:29:b7:c0:00:1d:10:
8e:dd:43:a1:c0:1d:0c:71:95:89:0c:2a:bb:f4:c6:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:E4:48:BC:1F:07:E9:27:70:49:36:AF:7B:9D:46:CD:6C:7E:4F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218743.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:1e:3e:55:26:cc:8e:33:06:18:6a:28:92:b4:57:a7:a5:b2:
0f:d0:f3:39:e6:69:2d:c8:d0:8c:e6:41:09:04:0c:a2:d4:ff:
f0:9f:8f:3d:22:b3:2d:c4:76:d1:5e:a3:66:68:4c:af:8c:14:
ec:c7:eb:98:f9:0a:8a:26:b9:53:35:aa:93:b2:66:7f:94:f8:
44:9e:3a:bd:14:19:20:9a:56:1f:f5:e3:c6:a0:0a:fe:f4:7f:
9b:6a:2b:9f:ed:92:d6:f0:4f:c9:80:24:89:39:a7:61:95:49:
8d:fe:84:11:7c:9d:52:ff:5f:5b:0c:7b:a6:72:e3:cd:93:99:
12:39:70:46:7c:49:9d:0d:1e:39:0c:a9:ef:22:45:09:b9:67:
ef:69:fe:e2:1e:4f:54:f6:c9:74:af:23:bc:32:f6:24:a3:93:
de:d9:e4:f0:29:11:d8:23:9d:f6:be:e6:a0:31:83:9f:9b:81:
4a:f0:99:a9:19:6f:2a:09:4b:46:2d:7e:2a:19:c4:15:3d:9d:
83:52:43:dc:0c:0b:dd:5b:35:fa:db:9c:de:bb:d6:08:e0:56:
40:f9:dc:09:08:9e:93:4b:0b:85:1d:97:bb:be:c6:f7:47:0e:
21:08:e4:a8:b9:93:0c:42:a7:d5:b1:5c:c1:7a:2e:3b:22:33:
49:06:c7:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUBnsy5AKhpV0qyJYnLq9/GDd44zEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMTMwMjQ1MzJaFw0yNzEwMTIwMjUwMzJaMDMxMTAvBgNV
BAMTKDZEODRFNDQ4QkMxRjA3RTkyNzcwNDkzNkFGN0I5RDQ2Q0Q2QzdFNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYaBBvcYg2oyp9JT6jnEINnOxF
+sEBWqT4GHCMY83EdPV6BEbp0mD5GnbyXZTv7+0hf6g9+EAEboLZSMOTnjK23FeX
WJhPDNRb63e9aWz6jqrx/wuGXu4hkCfoL5Enl+KvcyJredAH6B7DiN5p6TYKHLSB
R5sMYNn995YPhwrKuuZqfbKG5ZL5PoCbpzeN8oRha2Ad3mW8+MolfCK0xO+Vq0X6
mYqnJuhW/bF6tBwAs8gDeCZgz1I5wSC+AcSh19ryuHCnJIoVFvjrfyFcGHEKbcD0
/NW9mIKbH13GFmHzS6tDYxVAhTQlfSm3wAAdEI7dQ6HAHQxxlYkMKrv0xi+ZAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUbYTkSLwfB+kncEk2r3udRs1sfk8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE4NzQzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAM/Et
MA0GCSqGSIb3DQEBCwUAA4IBAQAeHj5VJsyOMwYYaiiStFenpbIP0PM55mktyNCM
5kEJBAyi1P/wn489IrMtxHbRXqNmaEyvjBTsx+uY+QqKJrlTNaqTsmZ/lPhEnjq9
FBkgmlYf9ePGoAr+9H+baiuf7ZLW8E/JgCSJOadhlUmN/oQRfJ1S/19bDHumcuPN
k5kSOXBGfEmdDR45DKnvIkUJuWfvaf7iHk9U9sl0ryO8MvYko5Pe2eTwKRHYI532
vuagMYOfm4FK8JmpGW8qCUtGLX4qGcQVPZ2DUkPcDAvdWzX625zeu9YI4FZA+dwJ
CJ6TSwuFHZe7vsb3Rw4hCOSouZMMQqfVsVzBei47IjNJBser
-----END CERTIFICATE-----
Generated at Mon Oct 19 21:48:40 2026 by rpki-client