Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218661.roa
File: AS218661.roa (raw, json)
Hash identifier: nMV2djxGU9tVuKQp+jl6D8NPbjQijDDsZ7OFIpGKwtk=
Subject key identifier: A5:A0:A9:AC:15:DF:2A:67:30:7D:7D:3E:0D:D5:A3:2D:D8:84:70:44
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 53191DC78AA1DD9FD6A01AB5F3A641B9332A211F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218661.roa
Signing time: Thu 24 Sep 2026 16:38:30 +0000
ROA not before: Thu 24 Sep 2026 16:33:30 +0000
ROA not after: Thu 23 Sep 2027 16:38:30 +0000
asID: 218661
IP address blocks: 51.194.54.0/24 maxlen: 24
94.118.128.0/24 maxlen: 24
94.118.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:19:1d:c7:8a:a1:dd:9f:d6:a0:1a:b5:f3:a6:41:b9:33:2a:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 24 16:33:30 2026 GMT
Not After : Sep 23 16:38:30 2027 GMT
Subject: CN=A5A0A9AC15DF2A67307D7D3E0DD5A32DD8847044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:b7:6b:a2:36:ad:fa:2d:b2:cf:5b:82:fb:
c5:6a:12:57:ef:e1:f2:c5:8b:ac:9c:49:5b:9c:65:
17:58:89:59:12:19:c2:a8:dd:9d:87:f5:1a:1d:24:
65:63:b4:34:e5:4c:d2:5d:49:57:85:58:92:b2:1c:
45:8c:b4:ec:52:83:53:e6:2d:14:5e:01:d1:ad:d5:
20:f5:98:ab:dd:b2:fe:d4:89:8f:35:09:94:6f:66:
4e:20:26:7d:9f:ea:ee:3f:80:c3:05:29:9a:14:cb:
ba:cd:c9:fb:3e:8e:6b:fd:9d:a4:09:cf:71:7a:44:
d4:36:3f:a9:6f:06:4c:fb:26:af:54:e4:af:98:05:
24:ed:5a:ec:00:39:25:c4:99:43:70:ff:ca:00:a2:
78:70:ae:65:35:e8:87:4d:21:a7:b3:dd:67:08:52:
26:c9:58:8a:e7:9c:10:c1:46:13:ae:05:87:82:3d:
fa:b1:3f:72:b4:18:23:4e:5e:61:4f:9b:1d:86:1f:
bd:dc:d1:58:c6:72:f9:b9:b2:e4:2e:1e:05:a4:a3:
e1:62:2d:6c:6a:a7:6c:f0:ec:32:c2:6b:a3:1d:b9:
29:1a:89:5c:0d:b8:98:04:c3:58:e3:69:80:3a:6d:
52:78:2b:a2:72:c7:e9:98:31:f8:2a:75:16:ea:09:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:A9:AC:15:DF:2A:67:30:7D:7D:3E:0D:D5:A3:2D:D8:84:70:44
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.54.0/24
94.118.128.0/24
94.118.130.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d4:88:4c:03:b3:95:15:7c:3e:f0:6d:b4:44:47:2a:07:03:
cb:55:80:2d:b1:4c:51:f9:a9:cc:39:0a:ab:d7:a9:94:ce:a4:
b5:62:2f:de:44:1e:40:3a:75:b5:db:74:9d:23:2c:e9:a0:df:
ff:49:8d:6c:fd:75:bd:2c:d8:e3:1e:03:49:97:37:5f:0f:62:
e4:68:46:fd:d8:cb:ba:b6:47:da:30:5b:15:29:52:b1:9f:16:
d8:20:b1:e0:14:fc:9a:60:76:77:46:31:69:a2:3c:88:43:61:
f5:c2:f5:22:33:14:7a:70:a0:22:ed:71:5e:65:84:9a:43:92:
4a:92:60:36:9b:08:44:b7:e8:bc:58:33:cd:cb:f2:84:3b:3d:
d8:85:94:a5:0e:92:57:b8:c9:b1:67:a4:2b:29:92:14:73:8b:
72:86:a2:da:ec:aa:87:78:f1:dd:15:0d:5b:02:c6:98:77:42:
2a:a3:1b:fa:a4:0c:05:78:c2:19:fa:6c:bc:f1:5f:67:34:79:
70:b5:7c:dc:20:1f:87:08:9d:ec:34:7d:b6:d8:29:e6:89:7a:
2a:a7:56:7e:1a:bd:31:a2:9b:06:bd:5c:e1:98:ec:2e:40:62:
fb:80:59:ec:ac:25:51:99:5a:b0:11:7e:12:a6:1a:e0:1c:e8:
52:48:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:58:52 2026 by rpki-client