Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218965.roa
File: AS218965.roa (raw, json)
Hash identifier: ekpM3f8mPOtM7IeVDoEpXpSTqOgrIou+7EC9gG1EeQU=
Subject key identifier: 6E:18:C0:D9:3F:FF:B1:B3:C9:84:B9:37:D6:0D:22:94:8F:49:2A:51
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0D363636D52C414895478806ECB5FF12BACE468B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218965.roa
Signing time: Wed 02 Sep 2026 05:33:21 +0000
ROA not before: Wed 02 Sep 2026 05:28:21 +0000
ROA not after: Wed 01 Sep 2027 05:33:21 +0000
asID: 218965
IP address blocks: 51.146.140.0/24 maxlen: 24
51.241.106.0/24 maxlen: 24
188.221.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:36:36:36:d5:2c:41:48:95:47:88:06:ec:b5:ff:12:ba:ce:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 2 05:28:21 2026 GMT
Not After : Sep 1 05:33:21 2027 GMT
Subject: CN=6E18C0D93FFFB1B3C984B937D60D22948F492A51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:86:85:ba:86:5d:f7:5a:5c:81:b9:d7:ec:
a6:0e:14:98:23:72:a7:e6:b5:71:07:a8:68:ad:cd:
48:3a:91:de:1a:3a:c5:3c:51:1d:83:cd:fb:26:ff:
4f:73:50:c6:46:d6:27:f1:77:a7:70:bf:e3:11:b2:
a4:e5:67:2e:15:1c:3f:a6:dd:c9:41:00:e8:7c:d3:
71:5e:dd:2d:ec:e9:c8:1f:b9:83:ff:ee:6e:aa:66:
dd:92:0d:47:ba:a0:98:63:94:1d:09:69:f3:ad:97:
69:68:5b:79:ab:ef:2f:98:ee:8a:d4:d8:90:ae:d3:
b8:cb:4a:a4:f7:b6:1f:37:f6:97:4f:c9:77:db:0d:
e3:49:1b:6f:60:89:c2:13:53:c9:e0:ee:2a:1c:77:
75:40:cd:db:e5:e1:73:ac:97:3c:ef:11:80:6b:0f:
3c:8e:fd:d6:c4:3b:0f:54:d3:fe:f9:95:75:1c:b6:
61:c6:cb:f5:c3:ac:6c:56:54:3a:85:d5:91:cd:6a:
35:e6:f7:64:92:d5:19:65:6f:bb:ea:e9:15:6f:5b:
04:9e:0a:8c:11:de:2c:0e:9b:57:bc:7c:8a:e3:d4:
8b:c3:46:7f:6a:9e:e3:86:6e:da:d4:fd:17:e9:51:
1a:bf:cf:10:d3:fc:ac:21:76:1a:26:76:ce:53:18:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:18:C0:D9:3F:FF:B1:B3:C9:84:B9:37:D6:0D:22:94:8F:49:2A:51
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.140.0/24
51.241.106.0/24
188.221.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:59:d1:c5:e6:83:0b:cc:7c:28:3f:9c:98:c9:71:af:0d:99:
9e:5f:33:83:f3:c8:62:d7:84:e0:ba:87:38:2c:58:71:f8:44:
a6:9e:9b:23:f0:42:33:b3:0e:d5:2b:d0:96:23:25:8a:56:5e:
5c:d1:40:8c:7b:3e:8a:f5:8c:6b:38:e7:2c:1a:44:24:31:f6:
90:34:fc:fd:bf:3d:80:74:cf:6b:41:94:21:3a:06:77:8c:43:
19:4c:a9:41:cf:2c:39:60:b6:4d:a8:61:8e:7c:98:7c:6d:3a:
9d:e2:0d:ef:3c:50:5e:7c:89:ae:39:95:42:88:a6:d0:a7:e9:
1d:df:fd:0c:46:86:f9:3f:67:1d:bb:5b:99:b9:ec:7a:be:a0:
4c:9c:60:61:71:d1:fd:9f:b8:52:66:be:24:d1:49:8a:fa:d8:
b2:6f:10:63:0d:e0:2d:9d:df:3b:69:62:7f:1f:45:2c:7a:35:
62:4f:62:da:67:a1:39:25:dc:4c:e9:3b:7f:34:75:a2:81:28:
9f:99:a4:47:a4:86:b6:fc:8f:bd:41:5b:2e:d1:f0:1b:69:20:
a2:82:f7:9d:3a:1d:fc:a4:d4:9b:b3:4d:d4:74:81:83:cd:73:
b4:cd:6b:a1:c4:69:5e:6b:64:6e:f4:50:ad:3a:d0:e8:cc:56:
6b:9b:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:33 2026 by rpki-client