Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: DwrLVGrYeWlsrIXJS5mnZPj9qYZgAJAS3smFMecMBp0=
Subject key identifier: 4D:D0:4E:F4:8B:B8:7C:9A:38:1A:9B:CD:24:80:AB:32:A3:40:BC:39
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 667D857D3EA297F67B13D3CA57CE6EF3326CA368
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
Signing time: Wed 20 May 2026 11:26:13 +0000
ROA not before: Wed 20 May 2026 11:21:13 +0000
ROA not after: Wed 19 May 2027 11:26:13 +0000
asID: 8881
IP address blocks: 51.146.36.0/22 maxlen: 24
51.146.52.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
51.146.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7d:85:7d:3e:a2:97:f6:7b:13:d3:ca:57:ce:6e:f3:32:6c:a3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 20 11:21:13 2026 GMT
Not After : May 19 11:26:13 2027 GMT
Subject: CN=4DD04EF48BB87C9A381A9BCD2480AB32A340BC39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:fb:27:14:87:a1:04:df:44:36:f2:19:60:
73:df:96:6c:8c:10:4a:53:11:57:9b:b0:a9:9a:1e:
2f:35:72:08:d2:a8:22:30:f5:a8:4e:6d:cb:ff:90:
e4:a0:ef:01:8a:15:ba:00:9b:aa:6a:fd:75:5e:d4:
3e:43:03:f9:82:42:4b:dc:fa:11:20:18:65:ae:1b:
c8:8a:1c:3f:3b:54:37:bd:df:06:8a:ac:e2:40:15:
f0:31:7f:96:55:4d:22:f4:91:c6:11:68:d4:3b:1a:
f9:e8:9f:aa:ef:53:98:a0:5c:04:5f:69:f1:4f:09:
ae:15:9e:c1:56:df:b8:5e:0d:de:ac:81:bf:cf:8b:
c5:0a:41:fc:d8:72:90:65:f1:3f:a1:5e:54:de:25:
54:26:c0:23:b7:8b:8d:d8:ca:ed:84:c2:10:3e:df:
14:fd:b4:02:19:68:21:00:0b:fd:c0:fc:cd:96:d8:
24:61:30:68:b0:d8:17:78:3c:ad:3d:28:f1:1b:97:
06:43:7f:25:ef:c4:cf:61:51:74:40:04:6e:3d:a5:
54:08:f6:45:90:e7:17:c4:0a:22:55:3b:58:fd:49:
87:c7:e1:99:6e:21:b6:fb:e0:8f:c5:5c:2e:b3:9e:
a5:b7:56:50:55:c6:1d:d2:85:4c:b6:26:bd:63:09:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:4E:F4:8B:B8:7C:9A:38:1A:9B:CD:24:80:AB:32:A3:40:BC:39
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.36.0/22
51.146.52.0/22
51.146.144.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:07:86:5d:a4:fb:49:0b:4a:5f:f4:35:49:34:0e:50:63:cb:
72:ea:41:a9:e9:b3:1d:99:70:1c:99:41:64:a4:18:b2:a4:ca:
2e:88:8d:3c:3f:8e:b4:81:cc:07:12:a8:49:f3:37:91:f5:33:
f6:da:6c:45:69:33:29:71:c5:f9:c1:97:f1:03:4c:3a:2d:81:
58:eb:9a:c6:62:4d:00:e7:28:19:e7:7c:e0:2f:47:fa:17:92:
a8:5a:36:a2:aa:37:43:70:02:6d:e4:cd:15:1c:91:e4:39:85:
d4:ac:8f:fb:3a:0f:2d:5b:c5:71:2f:eb:e3:0c:b1:f1:a5:f6:
ea:d3:44:a7:58:b8:62:2c:c2:db:79:66:ae:8d:b0:a6:c6:7b:
21:33:c8:e0:85:80:16:df:7a:14:59:98:10:c7:a8:cf:c9:60:
e1:61:b1:ee:e4:1c:bb:83:46:35:f1:a3:bc:21:e4:95:58:0a:
7b:78:04:6f:65:38:27:51:b0:b0:90:a9:66:2d:c9:55:2b:b0:
33:81:57:da:ba:8c:4f:da:37:18:b9:a5:9d:b2:4b:99:38:d5:
f4:3f:ca:2c:ae:f1:ae:17:ef:3b:90:fc:84:54:56:2f:9c:72:
75:7b:9d:e5:8c:e2:07:07:1c:fa:74:03:ea:d0:cf:07:a7:d0:
1a:82:6e:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:22 2026 by rpki-client