Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218383.roa
File: AS218383.roa (raw, json)
Hash identifier: JEFkoZiAPIDDUZRUFaMMt+OzYpnfUsc/SHHGBzheMTU=
Subject key identifier: E7:2E:CF:3B:62:D0:1C:26:2C:1A:D1:18:79:B2:5E:4D:F4:D2:E4:F0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 58C460C612F0FAB6AF4A494EBE998C0678A0BE87
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218383.roa
Signing time: Wed 11 Nov 2026 07:25:03 +0000
ROA not before: Wed 11 Nov 2026 07:20:03 +0000
ROA not after: Wed 10 Nov 2027 07:25:03 +0000
asID: 218383
IP address blocks: 94.118.209.0/24 maxlen: 24
94.118.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c4:60:c6:12:f0:fa:b6:af:4a:49:4e:be:99:8c:06:78:a0:be:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 11 07:20:03 2026 GMT
Not After : Nov 10 07:25:03 2027 GMT
Subject: CN=E72ECF3B62D01C262C1AD11879B25E4DF4D2E4F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:33:79:77:43:a6:18:2e:43:b5:f0:fa:e3:
22:39:67:51:6d:ff:31:e6:fe:11:fe:dd:55:b2:4a:
db:d1:0d:4b:ec:eb:7a:71:a1:e6:9e:26:52:79:7a:
e9:3e:fa:51:b1:92:f0:5d:c1:99:25:bc:01:b2:f8:
03:1a:2e:03:1a:04:70:c3:82:1e:6a:6e:b2:b3:c1:
dd:a7:9f:b2:30:20:4c:b6:cf:93:cb:a1:d6:80:0d:
a7:3b:3a:a3:93:e5:0d:ab:76:07:a9:74:75:43:fa:
a2:7a:04:36:55:74:10:c5:c5:53:2f:f5:04:c7:7d:
2b:27:28:c4:c5:df:2a:b6:8a:6c:ca:a4:d0:25:ad:
d5:6d:d8:ed:15:41:c8:53:4e:84:66:94:d1:d1:a0:
52:9b:cb:63:a6:59:19:4d:ce:22:90:cd:78:69:61:
ad:93:a9:1b:3a:6c:25:dd:08:30:3f:ab:8d:1c:aa:
eb:f1:8b:e6:b5:d1:a4:7e:cf:7a:36:12:a5:d1:3e:
36:9a:00:93:f0:95:bf:81:78:aa:b3:ae:fe:dc:1e:
ba:fd:cd:a7:e7:33:97:1f:0f:cc:c0:00:dc:54:e3:
88:6c:f4:3a:9b:f1:94:1d:23:68:7f:2a:0c:c7:e6:
97:7a:bf:09:a2:60:6f:4c:28:ba:d8:86:89:5a:bc:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2E:CF:3B:62:D0:1C:26:2C:1A:D1:18:79:B2:5E:4D:F4:D2:E4:F0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.209.0-94.118.210.255
Signature Algorithm: sha256WithRSAEncryption
5d:6c:d4:a4:ba:a9:10:6d:e2:5c:4d:84:ca:2b:f4:ef:d7:a5:
c5:fb:34:a4:b0:64:26:46:64:a7:ee:5c:b1:9e:de:05:7d:16:
cc:cc:f5:67:e8:74:14:6a:82:a8:8e:e7:bc:2c:e3:0d:3c:9e:
98:79:d5:1d:cc:2e:1a:54:5d:6b:0b:59:a9:ac:ad:a9:32:96:
90:6d:25:84:11:b2:a5:0f:0a:13:8c:e2:75:9a:9d:51:15:b8:
c8:ca:d6:36:18:aa:e8:f9:52:44:92:0f:c9:12:87:5b:af:cd:
98:7d:c7:95:04:bd:2a:22:06:72:f3:85:7e:93:eb:cb:b3:ee:
0e:5a:fa:76:54:16:58:87:9a:89:e5:2b:fe:65:b5:8d:fd:ef:
4d:d5:73:4f:9e:8f:58:54:e9:f3:ab:89:35:94:8b:2e:e1:e5:
9d:0d:0c:6d:4e:24:89:90:ff:22:01:70:6f:32:33:dc:c9:34:
31:2a:d4:e2:f7:19:87:38:ed:cb:a2:f3:fd:ca:9e:c4:fe:74:
98:56:35:43:7b:c9:ca:43:96:97:be:5b:26:5a:98:9f:a5:d4:
ef:3e:7d:01:2b:10:be:4c:16:32:8a:13:25:42:1f:43:6a:f7:
cb:0f:4e:f8:57:a7:18:28:49:42:2b:81:99:f0:b1:ff:47:bb:
70:b0:77:be
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUWMRgxhLw+ravSklOvpmMBnigvocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjExMTEwNzIwMDNaFw0yNzExMTAwNzI1MDNaMDMxMTAvBgNV
BAMTKEU3MkVDRjNCNjJEMDFDMjYyQzFBRDExODc5QjI1RTRERjREMkU0RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8DN5d0OmGC5DtfD64yI5Z1Ft
/zHm/hH+3VWyStvRDUvs63pxoeaeJlJ5euk++lGxkvBdwZklvAGy+AMaLgMaBHDD
gh5qbrKzwd2nn7IwIEy2z5PLodaADac7OqOT5Q2rdgepdHVD+qJ6BDZVdBDFxVMv
9QTHfSsnKMTF3yq2imzKpNAlrdVt2O0VQchTToRmlNHRoFKby2OmWRlNziKQzXhp
Ya2TqRs6bCXdCDA/q40cquvxi+a10aR+z3o2EqXRPjaaAJPwlb+BeKqzrv7cHrr9
zafnM5cfD8zAANxU44hs9Dqb8ZQdI2h/KgzH5pd6vwmiYG9MKLrYholavNBPAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQU5y7PO2LQHCYsGtEYebJeTfTS5PAwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE4MzgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABe
dtEDBABedtIwDQYJKoZIhvcNAQELBQADggEBAF1s1KS6qRBt4lxNhMor9O/XpcX7
NKSwZCZGZKfuXLGe3gV9FszM9WfodBRqgqiO57ws4w08nph51R3MLhpUXWsLWams
rakylpBtJYQRsqUPChOM4nWanVEVuMjK1jYYquj5UkSSD8kSh1uvzZh9x5UEvSoi
BnLzhX6T68uz7g5a+nZUFliHmonlK/5ltY39703Vc0+ej1hU6fOriTWUiy7h5Z0N
DG1OJImQ/yIBcG8yM9zJNDEq1OL3GYc47cui8/3KnsT+dJhWNUN7ycpDlpe+WyZa
mJ+l1O8+fQErEL5MFjKKEyVCH0Nq98sPTvhXpxgoSUIrgZnwsf9Hu3Cwd74=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:48:04 2026 by rpki-client