Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218910.roa
File: AS218910.roa (raw, json)
Hash identifier: vR57dnmuZo532LmZSZ7nB6QLONi8PxOOGvMqy4I7JVc=
Subject key identifier: D0:20:30:DF:84:50:D3:E0:79:C2:60:3A:D5:A0:4A:23:0C:B0:42:A0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 15D13F4C16DE71F3845E238343C0FD9F27C27AA2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218910.roa
Signing time: Wed 30 Sep 2026 09:24:32 +0000
ROA not before: Wed 30 Sep 2026 09:19:32 +0000
ROA not after: Wed 29 Sep 2027 09:24:32 +0000
asID: 218910
IP address blocks: 94.118.7.0/24 maxlen: 24
94.118.21.0/24 maxlen: 24
94.118.83.0/24 maxlen: 24
94.118.85.0/24 maxlen: 24
94.118.89.0/24 maxlen: 24
94.118.91.0/24 maxlen: 24
94.118.93.0/24 maxlen: 24
94.118.94.0/24 maxlen: 24
94.118.98.0/24 maxlen: 24
94.118.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d1:3f:4c:16:de:71:f3:84:5e:23:83:43:c0:fd:9f:27:c2:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 30 09:19:32 2026 GMT
Not After : Sep 29 09:24:32 2027 GMT
Subject: CN=D02030DF8450D3E079C2603AD5A04A230CB042A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:99:3d:84:04:3a:d7:15:a1:74:db:2b:75:
d9:d6:ba:f5:bb:78:a8:6d:41:cc:89:3e:f1:0f:ee:
42:8e:27:e4:41:f3:78:30:e3:cf:45:77:86:35:85:
0f:40:dd:2b:0d:9f:7e:38:43:d2:b3:13:67:92:d7:
46:b4:05:09:96:6f:92:83:b3:e9:11:f1:45:29:de:
d8:f6:18:d4:36:75:89:5b:ee:44:ee:8f:52:b4:6b:
3a:fe:78:6f:6a:e3:79:ff:c5:ee:39:9f:71:77:d4:
ff:92:36:15:61:02:30:50:93:50:31:bf:11:54:8b:
14:c5:4a:07:76:ee:d9:af:79:14:4a:18:22:5c:c1:
a3:34:98:49:dc:e4:db:74:39:dc:65:6a:d0:7e:cc:
cd:a0:3d:75:25:93:94:47:35:be:64:78:79:41:82:
c0:fb:6e:fb:7b:b2:0b:8e:c5:81:98:06:b1:62:59:
4a:42:4f:74:c1:0b:8f:84:ff:cd:1a:c7:58:e9:63:
99:62:d0:57:5c:ec:0e:94:b3:ad:94:ed:2d:1e:df:
b2:bc:50:c2:f1:68:03:dc:bd:e4:dc:76:2a:78:21:
58:49:0f:46:75:e5:6d:a9:a7:54:30:33:b2:ae:2a:
cc:b0:27:da:3a:87:e7:d7:1d:be:dd:58:01:5c:8b:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:30:DF:84:50:D3:E0:79:C2:60:3A:D5:A0:4A:23:0C:B0:42:A0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.7.0/24
94.118.21.0/24
94.118.83.0/24
94.118.85.0/24
94.118.89.0/24
94.118.91.0/24
94.118.93.0-94.118.94.255
94.118.98.0/24
94.118.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:79:ba:21:3c:05:67:c4:e0:02:f1:c6:27:96:79:3e:f8:92:
75:2f:1f:41:84:db:7f:c5:f6:97:25:6b:63:f0:70:6c:a6:30:
07:f4:06:ec:ea:ab:e8:f5:bf:dd:7a:69:f6:40:2f:bb:70:9b:
f1:f6:12:76:d5:e6:25:0b:37:ca:9c:db:eb:60:31:e9:43:36:
28:42:ba:5b:dd:18:60:42:51:2b:f5:ed:78:d5:a5:25:2f:4e:
f3:22:cb:9b:11:d0:3d:f8:f1:da:15:8a:be:88:45:86:66:06:
eb:fe:78:6f:f8:83:09:f6:0c:a4:14:43:51:41:56:1f:0a:fe:
0f:77:85:f1:53:41:51:7b:e1:84:e5:ad:0b:46:d9:e6:be:7f:
57:e7:96:2c:6a:32:f5:4e:21:35:f1:1c:c4:12:f5:08:2a:de:
30:bc:f4:d3:18:21:8e:c0:b8:03:9e:bc:2a:1e:d4:1b:b6:c9:
fd:36:38:75:d7:c0:0b:40:41:00:3b:89:e9:e7:c2:80:eb:3a:
f3:f0:73:4c:2f:ee:e6:3d:3d:e0:e1:33:3b:c0:d3:37:12:61:
85:f2:98:15:81:e1:37:4e:7c:32:54:e3:1a:9e:c2:3d:4a:96:
54:33:f8:95:07:a7:10:b7:a4:ae:88:23:0d:60:61:01:df:f9:
4f:e5:37:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:24:44 2026 by rpki-client