Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: 9qksZyDhsOZkTu72CKvoB9D0Ph6e2Kx8jGtydkeRfx8=
Subject key identifier: 90:58:16:98:B3:75:F7:AA:80:1A:39:A6:00:BF:F1:56:5D:E5:9C:3F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7E75DD49F747B9DE0D371868343294427BE9278D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
Signing time: Wed 26 Aug 2026 07:00:37 +0000
ROA not before: Wed 26 Aug 2026 06:55:37 +0000
ROA not after: Wed 25 Aug 2027 07:00:37 +0000
asID: 8881
IP address blocks: 51.146.52.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
94.192.160.0/20 maxlen: 24
94.192.160.0/24 maxlen: 24
188.222.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:75:dd:49:f7:47:b9:de:0d:37:18:68:34:32:94:42:7b:e9:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 26 06:55:37 2026 GMT
Not After : Aug 25 07:00:37 2027 GMT
Subject: CN=90581698B375F7AA801A39A600BFF1565DE59C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:02:cb:c4:13:df:c1:4b:35:0c:c7:c7:56:8c:
a9:44:1a:22:3c:08:f0:56:a0:91:3c:8a:d7:a1:4f:
d4:c1:74:57:8b:47:b4:17:59:9b:ca:06:f4:9e:89:
6f:93:5f:1d:dc:3d:fb:de:c4:eb:49:11:e5:49:01:
2f:2b:1a:04:1b:c3:7c:72:91:e5:8e:5b:42:f1:63:
16:24:a7:5f:95:f3:1e:bf:4b:66:39:3b:a5:72:fa:
e9:95:51:a2:7f:5e:77:4d:66:4f:35:d2:4a:51:d9:
2f:bc:0b:40:ef:1a:d6:85:85:7a:2a:c3:2b:68:3d:
f4:d3:f4:ed:45:0a:06:f2:a3:02:22:3d:a7:95:74:
c3:af:da:53:bb:2b:3a:d5:78:ba:96:83:5a:7c:5d:
9f:0e:44:58:df:a3:26:4c:4d:89:8c:90:00:a5:b6:
67:2f:2e:c6:64:5e:78:38:bb:56:48:ad:be:80:e8:
fd:46:bd:89:fc:4d:cb:d8:a9:c9:51:47:46:f8:de:
3b:2b:ca:4f:a0:c4:33:01:6a:0f:aa:6b:14:14:24:
39:57:e4:92:f7:f8:b4:60:6d:6d:8d:ea:f7:28:12:
d4:cd:f0:49:5b:cb:2c:fa:5e:f8:68:8b:f2:c9:93:
1d:72:7b:d4:99:05:f0:9c:a3:aa:31:e2:1c:55:ad:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:16:98:B3:75:F7:AA:80:1A:39:A6:00:BF:F1:56:5D:E5:9C:3F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.52.0/22
51.146.144.0-51.146.149.255
94.192.160.0/20
188.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:c0:3c:d5:39:e7:c2:1c:96:30:b1:9c:19:74:e4:8d:03:0c:
a3:d2:fa:fb:78:8f:58:40:3b:87:b5:bb:5a:c7:57:4c:d5:a8:
13:9c:7d:6a:fa:2a:ac:70:c1:2a:6f:99:6f:70:7a:48:6c:0e:
8c:de:78:d9:3a:12:c0:1e:45:e9:ba:6f:47:6b:da:2c:f9:b2:
c0:8f:5b:9d:82:dd:e1:ae:8a:97:01:6f:d7:ea:55:29:ce:c4:
c7:3c:66:0f:2a:45:66:50:5d:6f:9d:ea:50:aa:f3:6b:71:82:
e4:e3:9b:a5:e1:3a:23:5b:89:7c:8f:c0:6d:af:7f:b2:16:95:
bd:00:ad:fc:7c:a1:21:da:00:00:f6:8e:ad:5a:36:72:54:81:
16:89:a2:8b:24:48:f3:4b:5c:95:66:6f:81:86:57:6b:2e:f6:
34:a9:80:d2:a6:55:fb:c6:69:c1:0d:52:fd:36:55:b2:89:4e:
f5:52:74:fd:57:0e:60:3d:a0:f0:04:60:68:9c:17:c9:8b:f2:
3f:32:bc:31:c0:df:cb:83:75:d2:9e:bc:24:87:39:2c:2d:6a:
95:15:05:5e:3e:bd:95:69:d3:a0:53:66:db:0b:79:2d:5b:fe:
e6:7b:e0:75:6f:9c:88:f3:f2:2a:50:f1:6c:13:8d:ca:69:c8:
fa:bf:ba:7e
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUfnXdSfdHud4NNxhoNDKUQnvpJ40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjYwNjU1MzdaFw0yNzA4MjUwNzAwMzdaMDMxMTAvBgNV
BAMTKDkwNTgxNjk4QjM3NUY3QUE4MDFBMzlBNjAwQkZGMTU2NURFNTlDM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFAsvEE9/BSzUMx8dWjKlEGiI8
CPBWoJE8itehT9TBdFeLR7QXWZvKBvSeiW+TXx3cPfvexOtJEeVJAS8rGgQbw3xy
keWOW0LxYxYkp1+V8x6/S2Y5O6Vy+umVUaJ/XndNZk810kpR2S+8C0DvGtaFhXoq
wytoPfTT9O1FCgbyowIiPaeVdMOv2lO7KzrVeLqWg1p8XZ8ORFjfoyZMTYmMkACl
tmcvLsZkXng4u1ZIrb6A6P1GvYn8TcvYqclRR0b43jsryk+gxDMBag+qaxQUJDlX
5JL3+LRgbW2N6vcoEtTN8Elbyyz6Xvhoi/LJkx1ye9SZBfCco6ox4hxVrXMrAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUkFgWmLN196qAGjmmAL/xVl3lnD8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTODg4MS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA4BggrBgEFBQcBBwEB/wQpMCcwJQQCAAEwHwMEAjOSNDAM
AwQEM5KQAwQBM5KUAwQEXsCgAwMAvN4wDQYJKoZIhvcNAQELBQADggEBAD7APNU5
58IcljCxnBl05I0DDKPS+vt4j1hAO4e1u1rHV0zVqBOcfWr6KqxwwSpvmW9wekhs
DozeeNk6EsAeRem6b0dr2iz5ssCPW52C3eGuipcBb9fqVSnOxMc8Zg8qRWZQXW+d
6lCq82txguTjm6XhOiNbiXyPwG2vf7IWlb0Arfx8oSHaAAD2jq1aNnJUgRaJoosk
SPNLXJVmb4GGV2su9jSpgNKmVfvGacENUv02VbKJTvVSdP1XDmA9oPAEYGicF8mL
8j8yvDHA38uDddKevCSHOSwtapUVBV4+vZVp06BTZtsLeS1b/uZ74HVvnIjz8ipQ
8WwTjcppyPq/un4=
-----END CERTIFICATE-----
Generated at Thu Sep 3 07:12:53 2026 by rpki-client