Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218887.roa
File: AS218887.roa (raw, json)
Hash identifier: xy4sxSHYRgSHcUJad5pymELC0lN4/FlC7gXEmv4vt0Q=
Subject key identifier: 68:72:37:86:F4:E3:71:1A:22:18:E5:8A:73:64:45:D2:2F:12:92:BD
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5F9FC12483B21E450CF8FE48CD6BEADB1DA0FC01
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218887.roa
Signing time: Mon 14 Sep 2026 05:44:36 +0000
ROA not before: Mon 14 Sep 2026 05:39:36 +0000
ROA not after: Mon 13 Sep 2027 05:44:36 +0000
asID: 218887
IP address blocks: 51.194.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9f:c1:24:83:b2:1e:45:0c:f8:fe:48:cd:6b:ea:db:1d:a0:fc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 14 05:39:36 2026 GMT
Not After : Sep 13 05:44:36 2027 GMT
Subject: CN=68723786F4E3711A2218E58A736445D22F1292BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:82:f5:98:19:3c:8d:74:5a:4d:b4:48:f5:
b7:27:18:60:77:82:35:82:68:68:46:f9:d4:e1:e6:
40:34:08:bb:bf:11:a2:a7:6e:70:41:00:df:84:75:
f2:e6:ae:c1:df:8b:f9:3e:98:67:a7:83:17:c6:55:
60:80:19:35:76:21:b8:4d:97:82:96:0f:2b:d3:89:
20:ac:0c:5d:bd:c8:53:53:6f:d1:8a:6d:97:0b:3c:
df:e8:50:7f:ca:21:f9:be:48:db:ad:70:0b:2c:cc:
52:b2:8e:fa:2b:c0:dd:29:39:e7:00:81:08:3e:d0:
d6:b3:c3:48:8c:c8:0f:d4:b2:dd:c0:73:9e:27:48:
18:b5:00:56:d4:2b:16:0b:f7:bf:9b:ad:d5:74:15:
b5:0a:f0:a4:5e:fc:e5:70:6d:08:9f:71:c2:5d:4d:
45:df:7d:8e:d2:1a:29:99:c9:99:82:27:c2:a5:8b:
48:29:40:f7:26:8f:42:c6:ea:92:c9:68:2a:d4:19:
2e:a7:87:72:49:09:44:04:3c:51:f0:73:14:bd:37:
bf:63:18:fc:79:4e:5d:b7:d7:ad:3a:db:5d:6d:df:
92:c3:a1:87:20:b3:dc:a5:2e:df:ac:93:db:d0:d2:
d7:21:a3:a9:ce:57:d9:4e:7a:ec:f9:05:bf:9b:04:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:72:37:86:F4:E3:71:1A:22:18:E5:8A:73:64:45:D2:2F:12:92:BD
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.94.0/24
Signature Algorithm: sha256WithRSAEncryption
14:15:74:d5:5c:96:d8:7d:a2:a1:6e:36:a6:f2:6e:fa:a4:6d:
95:3c:40:1e:a3:a4:29:e1:11:92:13:6b:34:c6:02:08:c3:e8:
ff:96:20:24:bc:0a:f3:d2:0f:fa:73:45:bb:f9:bb:9a:62:3f:
a7:f8:3b:62:a8:7c:24:e9:b8:55:69:32:68:9b:f4:54:69:9a:
64:01:27:58:05:dd:85:38:d9:9b:ee:32:20:e0:72:b8:4e:9d:
ae:04:81:c2:0f:9d:08:c9:e1:d0:c3:46:3c:56:05:39:ca:aa:
f9:c3:6d:f0:d7:2a:d1:9b:7d:93:39:25:df:9a:f8:64:22:8b:
da:06:cc:81:96:95:47:9c:3f:72:13:2b:75:8e:c5:ab:da:01:
d2:1d:3a:9c:eb:9a:a1:7e:13:4f:33:53:4b:53:31:b2:1d:c7:
4f:0b:8d:20:ae:39:77:26:34:7c:8b:ec:95:cd:11:df:63:02:
e6:b9:f9:f6:34:b2:20:39:ea:8f:64:c0:4d:03:d0:39:98:66:
03:e1:c6:fb:34:ea:f8:97:1f:c9:84:da:70:6e:f8:19:29:cb:
61:35:f5:3a:d3:bc:1c:00:bf:d4:7f:41:48:5c:c8:cc:cf:15:
6a:3e:89:7d:ff:46:f0:be:2c:1c:d6:ea:dc:62:06:6b:61:57:
39:0d:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:31:55 2026 by rpki-client