Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: ZaE3Spq4vtQsjkoiGw2RJaiiwtWzOQqz447zajokiL8=
Subject key identifier: 1B:BE:37:75:37:B3:95:1F:BA:4B:71:B4:D0:D6:B4:C8:06:36:29:09
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6154CBF66B40786E156C8FBF9532FE98320ABB30
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218965.roa
Signing time: Fri 02 Oct 2026 05:29:07 +0000
ROA not before: Fri 02 Oct 2026 05:24:07 +0000
ROA not after: Fri 01 Oct 2027 05:29:07 +0000
asID: 218965
IP address blocks: 51.241.106.0/24 maxlen: 24
188.221.86.0/24 maxlen: 24
188.221.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:54:cb:f6:6b:40:78:6e:15:6c:8f:bf:95:32:fe:98:32:0a:bb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 2 05:24:07 2026 GMT
Not After : Oct 1 05:29:07 2027 GMT
Subject: CN=1BBE377537B3951FBA4B71B4D0D6B4C806362909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:bc:06:e8:fa:7d:48:ae:85:36:dd:57:66:
6d:3a:06:26:52:47:15:03:04:15:95:29:d1:2b:b5:
4e:0d:43:6b:99:d2:5c:bc:83:8f:de:87:88:6d:d1:
97:e2:c3:ba:22:dc:b3:1a:91:61:f2:1a:6f:ce:f2:
e0:8b:e4:0d:24:af:94:46:a6:54:70:06:3f:6c:42:
36:45:d1:47:38:c1:00:57:ab:86:34:df:de:c5:19:
47:16:b9:d0:31:be:40:2e:a8:02:8e:bb:57:8b:5a:
09:3c:58:fa:db:38:11:aa:37:d3:d2:fc:2c:b3:86:
cd:3d:a8:66:3a:0d:5e:9e:a3:7a:af:9d:ba:af:a6:
9d:4b:de:da:0d:47:42:8b:f1:46:fc:07:a9:e3:d8:
69:67:53:2f:12:9e:8e:32:17:29:4d:90:22:15:68:
aa:fc:a1:3a:a2:ec:40:5f:3e:67:c3:3d:04:d6:66:
7a:f8:8e:1c:ce:cd:f3:22:99:61:13:68:f8:6f:f6:
64:1f:13:a0:28:67:57:80:47:34:cb:40:d6:bf:2f:
8a:e7:27:cd:cc:a5:3d:18:12:fb:f6:44:ce:6b:a8:
1e:5d:62:2c:9f:d4:53:de:1b:8b:cb:87:86:32:e8:
fd:fa:97:0d:b4:66:78:67:5c:e2:19:aa:0f:8d:77:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:37:75:37:B3:95:1F:BA:4B:71:B4:D0:D6:B4:C8:06:36:29:09
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.106.0/24
188.221.86.0/24
188.221.129.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fa:12:3c:99:90:01:f1:d9:13:52:c0:4e:19:13:49:13:e0:
69:d6:f2:7f:4c:1f:48:ed:02:55:66:fe:d7:20:0a:0e:22:92:
51:5a:4c:e7:51:5a:e7:7d:73:65:1a:86:05:4e:02:68:cc:d5:
69:0b:b6:a5:54:3a:d1:8f:69:93:b0:cf:0e:7b:7b:72:04:1b:
56:3a:31:87:ba:27:f3:27:35:c3:2d:be:f2:7e:a3:02:d4:cb:
c4:33:87:f3:37:b6:80:9a:06:6d:f4:20:1b:89:31:01:f2:29:
83:d1:f1:b5:c8:7d:ee:39:d8:9a:99:c0:56:1d:15:f1:d4:84:
05:87:66:a9:29:68:ea:0c:79:e8:83:6a:6a:32:a6:ed:ba:66:
48:54:f3:eb:f8:12:2d:31:bc:da:40:9a:02:4b:a3:74:a7:b1:
fa:c8:52:77:53:a3:e1:60:d2:eb:9e:10:96:43:49:00:14:17:
33:b9:ce:af:13:37:86:f2:c1:31:fd:01:a6:50:ba:bb:de:aa:
8c:4a:e9:87:dc:fb:1c:92:d7:2d:3f:d4:2f:c1:1b:54:e4:03:
c0:2d:e9:05:7a:62:bc:99:71:a1:23:85:92:2e:30:27:82:77:
3e:9a:02:bd:55:c8:43:a0:bf:83:94:78:0d:3e:d5:0a:de:19:
54:61:6f:ec
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUYVTL9mtAeG4VbI+/lTL+mDIKuzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMDIwNTI0MDdaFw0yNzEwMDEwNTI5MDdaMDMxMTAvBgNV
BAMTKDFCQkUzNzc1MzdCMzk1MUZCQTRCNzFCNEQwRDZCNEM4MDYzNjI5MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX37wG6Pp9SK6FNt1XZm06BiZS
RxUDBBWVKdErtU4NQ2uZ0ly8g4/eh4ht0Zfiw7oi3LMakWHyGm/O8uCL5A0kr5RG
plRwBj9sQjZF0Uc4wQBXq4Y0397FGUcWudAxvkAuqAKOu1eLWgk8WPrbOBGqN9PS
/Cyzhs09qGY6DV6eo3qvnbqvpp1L3toNR0KL8Ub8B6nj2GlnUy8Sno4yFylNkCIV
aKr8oTqi7EBfPmfDPQTWZnr4jhzOzfMimWETaPhv9mQfE6AoZ1eARzTLQNa/L4rn
J83MpT0YEvv2RM5rqB5dYiyf1FPeG4vLh4Yy6P36lw20ZnhnXOIZqg+Nd0x5AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUG743dTezlR+6S3G00Na0yAY2KQkwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE4OTY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAM/Fq
AwQAvN1WAwQAvN2BMA0GCSqGSIb3DQEBCwUAA4IBAQAz+hI8mZAB8dkTUsBOGRNJ
E+Bp1vJ/TB9I7QJVZv7XIAoOIpJRWkznUVrnfXNlGoYFTgJozNVpC7alVDrRj2mT
sM8Oe3tyBBtWOjGHuifzJzXDLb7yfqMC1MvEM4fzN7aAmgZt9CAbiTEB8imD0fG1
yH3uOdiamcBWHRXx1IQFh2apKWjqDHnog2pqMqbtumZIVPPr+BItMbzaQJoCS6N0
p7H6yFJ3U6PhYNLrnhCWQ0kAFBczuc6vEzeG8sEx/QGmULq73qqMSumH3Pscktct
P9QvwRtU5APALekFemK8mXGhI4WSLjAngnc+mgK9VchDoL+DlHgNPtUK3hlUYW/s
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:10:17 2026 by rpki-client