Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218797.roa
File: AS218797.roa (raw, json)
Hash identifier: awnstjkp+4jV5mOfG0Io8CN+5ANgGZLts8YxybTIq8U=
Subject key identifier: BD:B0:83:67:A1:12:05:E5:CE:89:33:30:E7:0A:54:24:DD:30:4E:90
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 59D369928993C9AE30661765AC7992B3FF946B1E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218797.roa
Signing time: Wed 30 Sep 2026 09:24:32 +0000
ROA not before: Wed 30 Sep 2026 09:19:32 +0000
ROA not after: Wed 29 Sep 2027 09:24:32 +0000
asID: 218797
IP address blocks: 94.118.7.0/24 maxlen: 24
94.118.21.0/24 maxlen: 24
94.118.23.0/24 maxlen: 24
94.118.51.0/24 maxlen: 24
94.118.83.0/24 maxlen: 24
94.118.85.0/24 maxlen: 24
94.118.89.0/24 maxlen: 24
94.118.91.0/24 maxlen: 24
94.118.93.0/24 maxlen: 24
94.118.94.0/24 maxlen: 24
94.118.98.0/24 maxlen: 24
94.118.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d3:69:92:89:93:c9:ae:30:66:17:65:ac:79:92:b3:ff:94:6b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 30 09:19:32 2026 GMT
Not After : Sep 29 09:24:32 2027 GMT
Subject: CN=BDB08367A11205E5CE893330E70A5424DD304E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:43:01:c0:f2:a7:d7:a1:ae:c6:fc:15:f8:
de:51:e1:ef:b1:f2:b1:72:0e:21:9c:0f:24:63:84:
7d:f3:2d:76:12:bb:10:24:dd:8e:83:e0:54:10:0a:
bf:58:a0:ec:c6:a2:72:0a:fb:ed:d3:17:69:1b:43:
93:cd:88:3f:b9:b0:90:44:a8:4c:6f:8e:fa:77:a7:
2f:bc:b7:01:71:00:37:26:11:ac:e7:f9:cd:39:79:
d0:96:97:76:5b:1b:ed:53:ab:92:ed:ff:2d:4b:68:
e6:4d:00:99:b6:f2:9c:be:25:86:d3:a1:32:e5:85:
f8:51:c6:26:7a:40:fb:ee:2b:a7:73:3b:b2:f8:7f:
78:30:e8:7f:e4:9c:ee:5b:a1:36:64:40:80:43:ec:
c3:88:e0:fe:bd:09:24:11:dc:f2:96:c4:5a:2d:4d:
f6:9d:13:ba:9d:d4:c0:04:86:f9:8c:27:8a:3a:48:
0a:56:b1:f9:5b:0f:6f:77:51:9c:ad:dc:11:ea:95:
72:56:4d:d4:90:ec:0c:65:6d:c3:98:03:e7:09:2a:
f6:38:9b:0c:c1:85:3b:9c:d0:e9:16:da:ff:d0:83:
15:0b:eb:74:b7:a7:47:f3:6f:3e:8a:18:75:b8:d9:
37:75:d8:ae:77:ca:b0:48:24:18:07:99:00:67:be:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:83:67:A1:12:05:E5:CE:89:33:30:E7:0A:54:24:DD:30:4E:90
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218797.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.7.0/24
94.118.21.0/24
94.118.23.0/24
94.118.51.0/24
94.118.83.0/24
94.118.85.0/24
94.118.89.0/24
94.118.91.0/24
94.118.93.0-94.118.94.255
94.118.98.0/24
94.118.121.0/24
Signature Algorithm: sha256WithRSAEncryption
03:be:97:92:f8:98:5b:50:4e:b0:55:56:6f:d1:b7:24:2f:01:
5d:38:ea:56:a9:af:a6:41:ec:22:03:d6:f1:dc:22:97:de:d1:
ef:f9:e9:3f:57:ae:89:b6:8e:bf:d4:c7:82:4f:26:29:01:a1:
de:c8:14:5f:00:3f:02:c8:b4:47:9c:4e:06:9a:fb:f5:70:35:
26:a0:dc:ae:b7:25:79:2f:8b:36:14:03:e0:c6:78:f1:79:80:
2d:ef:d1:c1:70:40:81:42:e8:35:21:08:95:89:30:c0:21:e3:
6c:f0:cb:ce:5c:f9:f4:35:57:dd:6a:d2:1e:d8:ca:c2:bb:81:
04:82:5d:04:f9:06:5d:17:10:9b:13:12:0a:94:06:c9:3e:2e:
56:04:56:cb:89:13:15:dd:97:bf:fc:24:3e:05:42:6a:b6:2c:
6a:cc:24:6d:cb:10:42:7d:61:2d:18:22:d7:c4:14:35:59:a8:
81:15:39:5f:21:33:69:51:86:98:33:b5:e4:89:2f:ff:25:3f:
63:3a:bf:86:e8:7f:75:8b:48:eb:23:00:ed:15:51:4e:0c:fd:
38:94:4a:2f:8b:ef:d1:14:2f:47:ad:ee:ab:e7:e7:a5:b5:ab:
a3:03:26:b6:cf:fa:89:73:87:ab:ae:72:d4:59:c6:1f:25:9c:
38:99:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:42:50 2026 by rpki-client