Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218979.roa
File: AS218979.roa (raw, json)
Hash identifier: +omhEfbvfGBrOXxWcMP/g96LbIxYK1aC4/gkH6o8l8w=
Subject key identifier: 34:30:1D:55:F8:CB:04:F2:CF:8E:F6:F8:48:21:5F:BA:74:33:C3:9D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4B89F539B64F570E7C29498F1C534C6F6ED0B2AE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218979.roa
Signing time: Thu 24 Sep 2026 06:07:29 +0000
ROA not before: Thu 24 Sep 2026 06:02:29 +0000
ROA not after: Thu 23 Sep 2027 06:07:29 +0000
asID: 218979
IP address blocks: 188.220.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:89:f5:39:b6:4f:57:0e:7c:29:49:8f:1c:53:4c:6f:6e:d0:b2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 24 06:02:29 2026 GMT
Not After : Sep 23 06:07:29 2027 GMT
Subject: CN=34301D55F8CB04F2CF8EF6F848215FBA7433C39D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:9d:c2:bb:58:01:56:38:7d:cc:75:6b:25:
44:a5:ac:e6:8c:a6:3f:ae:dc:b9:b8:54:ab:da:5c:
4a:14:65:29:96:a3:1f:0a:fc:25:fa:a8:6f:00:b1:
34:89:6b:e3:71:2d:67:29:83:0f:77:4f:0f:9e:b3:
06:2e:68:a7:cf:7a:90:5c:f0:28:ee:af:66:73:81:
fe:1f:93:0d:26:5c:b1:60:c0:40:ba:40:fe:37:ea:
4f:cc:10:33:83:46:ef:57:4a:e4:13:ec:5d:ff:da:
b2:72:17:8d:ef:0d:1d:01:3a:11:7c:0c:09:93:f4:
c6:20:9b:9d:01:39:91:4a:6a:a2:75:78:d2:ba:c8:
99:80:2d:c1:c2:fc:5b:e8:9a:9d:2f:e7:f2:fb:9c:
ff:ed:6f:5e:b2:11:93:40:d1:3e:cd:15:a8:5e:50:
47:e9:ae:14:4c:e1:2d:60:11:b0:28:7f:36:3b:24:
6d:ef:d8:b2:29:c3:12:b5:5e:9c:9d:b9:39:6e:f5:
2c:06:f2:61:7d:e9:19:bc:35:b2:0d:21:ee:d9:00:
57:b9:29:cc:90:90:2a:fd:78:6c:5b:0c:22:11:e9:
62:47:c4:08:61:06:db:65:0d:cc:28:be:ee:cc:71:
8f:e2:a5:1b:bd:f5:b0:c3:35:1e:41:b2:ff:48:d1:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:30:1D:55:F8:CB:04:F2:CF:8E:F6:F8:48:21:5F:BA:74:33:C3:9D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.16.0/24
Signature Algorithm: sha256WithRSAEncryption
47:92:7a:d4:2e:66:42:db:a0:03:ab:56:48:9d:c1:c2:7e:d3:
67:47:72:4b:2c:4a:f7:14:7e:1f:e6:dc:e5:78:47:eb:ae:ba:
18:76:9b:5f:2d:03:6b:bb:a5:47:1e:f1:84:98:e6:9d:5d:1f:
0a:dc:4c:da:a2:f9:5a:e9:e6:24:a4:f4:9c:51:c5:78:4e:04:
10:ea:60:ab:6f:a5:e6:62:af:d4:eb:71:13:01:20:72:35:14:
d2:96:77:df:31:60:74:f7:52:57:7d:e4:27:19:92:4c:33:f4:
95:d3:be:d1:50:b3:9c:93:bf:01:a7:e8:e3:9b:01:b6:d1:92:
04:ed:7c:57:03:b4:ee:76:8b:7a:ba:8e:e7:96:f3:6f:04:bb:
cd:a1:12:c7:4e:ef:9f:93:ae:8c:9d:67:95:0e:9e:14:44:b3:
92:04:bf:74:4a:68:bc:81:4d:b3:68:53:cd:7c:a1:0d:f9:d2:
3c:9a:1a:61:ec:02:ed:c7:81:3d:4c:a3:0b:c8:bc:da:20:84:
c5:3c:e2:ec:ce:fd:d0:d1:93:8b:ad:34:82:5f:a0:8f:0e:34:
d6:41:72:fb:ba:2d:4b:bf:8a:37:f0:40:46:13:70:11:b6:f1:
e0:33:99:8f:8d:50:7a:ea:88:14:24:9a:1f:4c:0f:7b:82:3a:
9e:4a:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:44:02 2026 by rpki-client