Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218911.roa
File: AS218911.roa (raw, json)
Hash identifier: LLbXshzjlniYM7Iq+MkpRITeOt8w5edgmnwmxXR8Hp0=
Subject key identifier: 81:77:7D:AB:CA:22:0A:9D:BF:51:A3:56:8A:5C:42:CD:DC:22:1D:F3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2904F2D651A1B0A3EE6EF7BC33AB49E494A13387
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218911.roa
Signing time: Wed 30 Sep 2026 09:24:32 +0000
ROA not before: Wed 30 Sep 2026 09:19:32 +0000
ROA not after: Wed 29 Sep 2027 09:24:32 +0000
asID: 218911
IP address blocks: 94.118.23.0/24 maxlen: 24
94.118.51.0/24 maxlen: 24
94.118.83.0/24 maxlen: 24
94.118.85.0/24 maxlen: 24
94.118.89.0/24 maxlen: 24
94.118.91.0/24 maxlen: 24
94.118.93.0/24 maxlen: 24
94.118.94.0/24 maxlen: 24
94.118.98.0/24 maxlen: 24
94.118.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:04:f2:d6:51:a1:b0:a3:ee:6e:f7:bc:33:ab:49:e4:94:a1:33:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 30 09:19:32 2026 GMT
Not After : Sep 29 09:24:32 2027 GMT
Subject: CN=81777DABCA220A9DBF51A3568A5C42CDDC221DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:62:49:29:70:27:c7:5c:2e:1a:ed:a4:bf:
41:b1:b4:26:12:4c:58:25:75:76:96:b2:cd:82:95:
a7:62:a0:22:a6:11:15:a6:fd:b4:38:8a:71:c7:69:
d1:4f:b7:6f:9e:01:cc:ab:c7:2d:51:d3:b3:64:0c:
3a:6a:9d:17:aa:55:4b:52:b0:cf:89:64:fe:79:d3:
79:10:05:ce:2e:45:ca:a3:70:60:6d:bb:83:84:46:
04:e2:4a:72:06:9a:23:1d:67:15:9c:95:74:61:d7:
03:fe:89:1d:73:9e:fa:b7:3b:52:ce:07:3d:bd:4c:
0d:fa:c0:22:8f:a1:7b:92:6f:8f:c0:bd:9a:92:9a:
68:5f:32:b5:8f:81:08:98:9e:04:b6:1e:e1:d2:9d:
22:0c:1a:39:1c:54:94:b0:c9:9e:4b:fd:03:6d:01:
e9:d8:16:d9:9a:75:cb:c1:90:a0:61:59:ce:2d:98:
95:d6:9f:4f:08:4d:d7:1d:d5:b8:aa:01:9e:e2:83:
02:95:84:43:d3:99:3b:0a:a2:fb:2f:c1:08:07:ac:
a5:58:cf:cb:8e:92:df:92:8b:ec:2c:b4:b4:01:c7:
fc:b3:e3:a1:6f:9b:0c:f8:be:55:8a:a9:53:7c:64:
b6:48:61:dc:37:16:05:c8:92:a4:44:5e:97:6c:1f:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:77:7D:AB:CA:22:0A:9D:BF:51:A3:56:8A:5C:42:CD:DC:22:1D:F3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.23.0/24
94.118.51.0/24
94.118.83.0/24
94.118.85.0/24
94.118.89.0/24
94.118.91.0/24
94.118.93.0-94.118.94.255
94.118.98.0/24
94.118.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2b:4f:1a:2b:2c:b0:1a:de:b1:47:ac:8a:c4:74:91:7f:4d:
39:f0:23:81:07:0a:23:19:52:e7:56:38:99:23:74:22:e7:4e:
fa:f6:92:d8:53:f0:a2:65:1c:15:ad:06:6d:04:ef:7e:ef:06:
76:98:58:94:e4:81:3d:bd:07:da:bd:7b:ac:d8:9a:e0:19:1c:
0f:08:7f:89:26:55:17:af:04:d0:5e:6d:7f:5b:64:6f:bc:aa:
8a:c6:ea:5c:05:6f:70:1a:44:4f:1a:0e:af:bc:49:23:01:1d:
7f:ef:e2:d2:f8:02:b6:7e:e5:f6:b1:32:82:9f:52:60:bd:2f:
93:3d:ce:1f:03:b7:f2:4e:b7:32:f2:6c:86:97:37:89:56:d3:
10:c7:84:4e:9f:93:da:15:ff:a4:44:f2:2d:55:9f:55:2b:7d:
a0:f4:e1:79:6f:50:e5:9d:fe:3b:ac:f7:e8:48:74:99:76:de:
4c:7b:56:47:9a:57:86:dc:3f:8f:90:98:52:29:6c:62:44:16:
8b:ab:ad:66:3c:b1:08:e0:bc:a0:f6:26:22:3f:7a:78:84:46:
2f:03:87:a4:6a:36:5c:03:5d:c3:28:71:f3:f6:17:9b:18:6c:
9d:20:91:1a:91:bc:0a:48:7a:50:1c:2c:1e:2f:da:b4:6e:16:
b4:1b:98:b6
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUKQTy1lGhsKPubve8M6tJ5JShM4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MzAwOTE5MzJaFw0yNzA5MjkwOTI0MzJaMDMxMTAvBgNV
BAMTKDgxNzc3REFCQ0EyMjBBOURCRjUxQTM1NjhBNUM0MkNEREMyMjFERjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYmJJKXAnx1wuGu2kv0GxtCYS
TFgldXaWss2CladioCKmERWm/bQ4inHHadFPt2+eAcyrxy1R07NkDDpqnReqVUtS
sM+JZP5503kQBc4uRcqjcGBtu4OERgTiSnIGmiMdZxWclXRh1wP+iR1znvq3O1LO
Bz29TA36wCKPoXuSb4/AvZqSmmhfMrWPgQiYngS2HuHSnSIMGjkcVJSwyZ5L/QNt
AenYFtmadcvBkKBhWc4tmJXWn08ITdcd1biqAZ7igwKVhEPTmTsKovsvwQgHrKVY
z8uOkt+Si+wstLQBx/yz46Fvmwz4vlWKqVN8ZLZIYdw3FgXIkqREXpdsHwzLAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUgXd9q8oiCp2/UaNWilxCzdwiHfMwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE4OTExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAXnYX
AwQAXnYzAwQAXnZTAwQAXnZVAwQAXnZZAwQAXnZbMAwDBABedl0DBABedl4DBABe
dmIDBABednkwDQYJKoZIhvcNAQELBQADggEBAKQrTxorLLAa3rFHrIrEdJF/TTnw
I4EHCiMZUudWOJkjdCLnTvr2kthT8KJlHBWtBm0E737vBnaYWJTkgT29B9q9e6zY
muAZHA8If4kmVRevBNBebX9bZG+8qorG6lwFb3AaRE8aDq+8SSMBHX/v4tL4ArZ+
5faxMoKfUmC9L5M9zh8Dt/JOtzLybIaXN4lW0xDHhE6fk9oV/6RE8i1Vn1UrfaD0
4XlvUOWd/jus9+hIdJl23kx7VkeaV4bcP4+QmFIpbGJEFourrWY8sQjgvKD2JiI/
eniERi8Dh6RqNlwDXcMocfP2F5sYbJ0gkRqRvApIelAcLB4v2rRuFrQbmLY=
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:24:33 2026 by rpki-client