Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218113.roa
File: AS218113.roa (raw, json)
Hash identifier: gOCJNLzT9V0zsEXFnmvErooQt/FrOpS3lHS+WjsqlSw=
Subject key identifier: AB:C5:B6:48:0A:0C:DF:2B:DE:7E:E9:8A:01:C6:9E:37:D4:8A:99:5A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 73A70ADDC223951233BDFDD3CD49D5B8C0E1C081
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218113.roa
Signing time: Fri 13 Nov 2026 06:38:31 +0000
ROA not before: Fri 13 Nov 2026 06:33:31 +0000
ROA not after: Fri 12 Nov 2027 06:38:31 +0000
asID: 218113
IP address blocks: 94.118.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a7:0a:dd:c2:23:95:12:33:bd:fd:d3:cd:49:d5:b8:c0:e1:c0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 13 06:33:31 2026 GMT
Not After : Nov 12 06:38:31 2027 GMT
Subject: CN=ABC5B6480A0CDF2BDE7EE98A01C69E37D48A995A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:f4:10:3b:e3:62:a1:e0:02:cf:29:38:6a:
52:66:94:2a:7e:a9:88:f2:bf:6a:1a:ac:19:6d:15:
38:cc:34:e7:2f:fd:86:34:af:07:87:8c:23:a5:7c:
7d:8e:2c:d8:8c:8c:08:44:af:61:c2:1e:ba:c4:20:
27:20:02:a2:df:e2:73:a6:da:39:49:d9:54:5f:a4:
dc:95:a4:69:17:69:7a:ad:36:ae:9e:e2:93:19:a7:
60:f4:2d:42:2d:e6:9a:b1:73:65:21:f9:13:73:85:
16:5b:66:f1:72:90:68:09:e4:7b:89:08:4d:4f:e4:
5a:4f:2f:96:80:e1:aa:ae:ca:17:7b:f5:1c:64:d5:
57:c1:06:d1:f7:04:33:dd:16:11:cd:86:52:b3:fc:
9c:ba:7e:85:b7:4f:d3:b6:4c:49:6c:47:03:7f:bc:
5a:bb:5e:54:4b:05:bc:b1:91:9a:ab:01:82:d1:0e:
e4:9f:2e:7f:1e:e6:fa:93:66:11:85:7c:f8:a3:fd:
fc:d3:21:94:13:3e:ab:2b:e7:b1:de:4c:98:01:a8:
06:c0:d6:6c:aa:de:6d:19:70:91:32:89:1a:ab:e2:
86:5e:43:93:18:fa:76:6a:6f:27:a4:c2:84:95:1c:
ad:0a:66:48:0e:eb:0d:0b:ba:9e:48:76:60:6c:04:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C5:B6:48:0A:0C:DF:2B:DE:7E:E9:8A:01:C6:9E:37:D4:8A:99:5A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.161.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f1:3b:cc:5a:67:c5:15:d9:c6:ff:d4:9a:d9:cf:b9:40:05:
fc:15:13:23:4d:ad:7c:d6:e9:b4:d3:97:8f:79:9c:ed:59:4f:
ea:ea:eb:0f:ef:df:cc:56:cb:50:54:33:4e:09:0d:65:db:32:
cf:7d:34:7a:c9:d2:f2:87:c6:c1:30:c8:05:de:38:80:10:2e:
37:ed:c7:2f:e0:36:de:37:b6:9d:c3:d5:70:6c:7a:96:07:c7:
5f:ba:5f:5f:10:02:dd:71:5e:a9:a7:12:0d:8e:bd:e2:ab:ec:
61:44:1e:38:cb:2a:ff:fc:08:26:5d:e0:5a:7c:c8:58:1b:94:
27:c1:9c:93:b3:3f:29:60:1a:91:a9:95:39:27:3d:d3:4b:b7:
3c:74:c9:ff:6a:44:c3:27:4f:92:8d:dd:d8:d5:1d:8d:ea:97:
f5:cd:6d:0c:0a:5c:37:8e:48:f1:cc:e8:8e:aa:fc:29:f8:d5:
db:b6:3c:e4:5d:ff:00:57:9a:6a:f2:6d:82:a1:fd:ff:8b:0a:
76:f8:7c:a4:d9:c6:cf:08:91:4c:a6:f3:ec:f1:22:b8:e0:2a:
41:02:00:4b:65:0d:4c:54:d6:19:30:c2:a2:ae:79:3a:be:5d:
e0:e6:4a:a3:34:e8:13:79:a9:8e:0a:44:98:93:8e:cf:5a:ea:
f1:0d:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:47:24 2026 by rpki-client