Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: tKOqeqAJ78Hubjk/FGKS13+K75AdWJMNdK/9OKRf26A=
Subject key identifier: BB:82:B0:29:D0:4B:C0:4C:15:FB:7F:06:BC:7B:56:04:A4:E1:19:4F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7EFA1B8CA92B99777FE364851F1F2823D24B87A3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
Signing time: Wed 08 Jul 2026 00:03:50 +0000
ROA not before: Tue 07 Jul 2026 23:58:50 +0000
ROA not after: Wed 07 Jul 2027 00:03:50 +0000
asID: 8881
IP address blocks: 51.146.36.0/22 maxlen: 24
51.146.52.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fa:1b:8c:a9:2b:99:77:7f:e3:64:85:1f:1f:28:23:d2:4b:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 7 23:58:50 2026 GMT
Not After : Jul 7 00:03:50 2027 GMT
Subject: CN=BB82B029D04BC04C15FB7F06BC7B5604A4E1194F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:36:cd:d5:0e:cd:61:c0:e4:cd:6c:ee:47:
a5:de:c7:7f:b0:3f:96:71:e8:bd:d3:cf:52:7a:d2:
98:1e:35:b9:26:68:03:23:d1:0c:46:56:8b:ae:40:
48:41:7e:67:ae:e9:9d:a6:cd:42:19:f4:f3:56:83:
9f:d8:36:a0:c5:24:d9:3c:27:24:38:e5:b4:1c:a7:
b3:bd:f6:22:58:b2:f6:1e:7b:cf:6a:c4:a2:9d:f3:
9f:09:f9:9c:f8:3f:1b:d3:d1:11:95:81:e4:d2:e1:
2a:8a:9f:40:7b:40:2a:46:26:f6:27:59:bb:92:51:
12:f0:54:e5:60:37:46:97:28:09:9e:d5:c8:3f:41:
6e:da:90:3d:ad:df:45:90:2b:01:9b:09:7d:41:16:
40:f6:89:4d:25:ed:af:cf:14:e5:f6:22:2f:2a:b0:
34:89:8a:bf:f3:3c:5f:66:35:68:23:cc:21:2b:7b:
ad:54:13:15:a7:87:55:a0:55:0c:26:91:93:f1:44:
7e:ff:c4:8c:ac:57:7f:66:38:dd:cf:e4:83:0b:ef:
79:c6:d9:bc:92:b4:89:c5:74:9c:60:d8:88:9a:08:
5c:41:f4:4b:12:5b:e7:9d:3f:15:c0:a1:d9:57:39:
0e:1a:a0:1f:ed:6d:57:e5:db:5c:8f:60:10:14:65:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:82:B0:29:D0:4B:C0:4C:15:FB:7F:06:BC:7B:56:04:A4:E1:19:4F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.36.0/22
51.146.52.0/22
51.146.144.0-51.146.149.255
Signature Algorithm: sha256WithRSAEncryption
2b:cc:cc:93:86:e2:82:51:1a:bd:f5:c1:84:28:7d:bc:5f:ab:
7d:d0:76:33:38:26:4e:00:da:73:ad:a5:32:e3:ec:41:8a:f8:
21:90:d5:17:c1:a6:ae:4d:8c:e3:43:ab:8f:05:df:61:de:ee:
eb:dd:29:e2:a7:e1:d3:0d:f3:28:cd:aa:b2:1a:f1:58:bd:eb:
21:da:a6:da:59:e5:94:3e:f9:61:b0:a7:13:c2:83:82:56:4f:
d3:f3:0a:7b:f5:a6:66:3a:f7:cd:43:04:4e:b2:43:d3:21:a9:
8a:27:3e:ab:26:50:6f:76:24:94:c2:6b:8b:cf:17:8b:11:96:
8c:4b:f4:e2:99:a2:e5:ff:e9:a8:f0:89:72:0f:15:10:0d:32:
26:4a:51:a6:1e:ee:1a:df:f0:8d:f4:26:7a:63:c9:43:fd:4c:
a1:ef:f3:2b:75:19:bf:e4:45:93:41:6b:42:1b:d5:77:0b:21:
7a:c9:21:15:36:e6:7b:b2:2c:45:7d:0f:4b:50:fc:96:1c:0f:
60:69:67:94:41:1e:79:6d:fd:74:2d:97:e0:da:a8:36:4c:1b:
c0:e3:c0:c9:53:f0:28:b7:50:bd:f7:3d:b2:c9:9a:27:a4:3c:
99:e0:3d:b3:13:89:21:a0:14:1b:46:69:c6:bc:83:f9:f5:d6:
0f:0e:e1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:44:58 2026 by rpki-client