Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218625.roa
File: AS218625.roa (raw, json)
Hash identifier: iVXAcKOIXEJV8LSf9CcnlEst3VrXHV5BIptsKcllheQ=
Subject key identifier: 1C:D3:1B:C7:88:96:8F:50:AC:22:A1:B5:00:ED:ED:77:F2:89:1A:61
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 75A51A5AD13FEC4AFF363844450DA62E8AB76F86
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218625.roa
Signing time: Thu 24 Sep 2026 06:54:05 +0000
ROA not before: Thu 24 Sep 2026 06:49:05 +0000
ROA not after: Thu 23 Sep 2027 06:54:05 +0000
asID: 218625
IP address blocks: 188.220.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a5:1a:5a:d1:3f:ec:4a:ff:36:38:44:45:0d:a6:2e:8a:b7:6f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 24 06:49:05 2026 GMT
Not After : Sep 23 06:54:05 2027 GMT
Subject: CN=1CD31BC788968F50AC22A1B500EDED77F2891A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:6c:07:82:3f:7b:d0:a3:4a:25:02:3f:01:
76:a1:26:7c:cd:b2:bb:ed:42:aa:e8:8d:af:21:b6:
c0:52:31:06:ed:5b:6d:aa:42:c1:54:91:57:3f:b8:
06:53:8e:77:55:04:2c:47:f6:70:38:fa:59:0a:ee:
46:d0:04:98:06:09:65:45:62:11:b3:45:97:fb:86:
f0:1e:15:7a:ca:62:a9:ef:4a:43:3d:bf:f4:44:12:
1f:54:75:31:cc:b9:4f:58:62:06:04:36:f8:4d:9f:
8c:bc:5e:3a:95:7e:28:f9:3e:34:34:99:44:c8:db:
bb:3c:35:d5:9f:4c:f2:bb:83:83:c2:9d:c4:5f:c7:
e1:2a:ff:b6:d5:22:16:84:44:1b:8f:f4:ce:f2:ea:
92:1b:70:bd:d4:cf:f9:73:e8:a7:b0:26:e0:bf:6a:
ef:1f:d9:9a:bb:17:d5:4b:19:c6:61:8d:91:24:02:
ce:dd:c2:c5:12:f9:50:62:e0:50:05:fe:cf:ab:aa:
06:89:1f:0a:25:f9:3a:08:69:6f:ac:49:1a:12:75:
02:28:cf:68:33:9d:de:92:78:fe:fb:62:6b:d1:e1:
62:c0:b7:a3:62:ce:4d:d7:31:0d:e6:b6:4d:19:ac:
93:2b:cc:09:e6:1b:09:d6:2c:c1:60:e4:a6:f6:57:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D3:1B:C7:88:96:8F:50:AC:22:A1:B5:00:ED:ED:77:F2:89:1A:61
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218625.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.51.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a9:8a:e7:c6:7a:46:84:64:60:b3:52:9f:98:d5:b0:7e:6c:
bc:db:e8:b1:e8:68:0c:70:b5:19:94:7e:6f:f3:31:ea:31:5e:
99:8c:c1:0b:c3:74:db:9e:d5:05:45:36:7f:ae:92:ce:66:9e:
c3:dc:c4:53:b6:06:df:52:5d:56:32:e7:d7:e4:53:58:08:4b:
d9:32:74:e4:ce:18:5a:13:54:12:3d:d1:8c:d4:5c:6a:7e:cf:
83:eb:dc:5d:f7:29:10:5f:6e:9a:20:8d:50:55:9c:a1:a3:12:
13:16:61:6a:7e:84:8a:19:f2:65:8c:da:32:4a:14:0b:07:2f:
9c:ba:7c:be:1f:87:d6:52:b8:55:f0:12:a7:da:f7:d3:e2:76:
ae:ad:c9:f8:d4:2c:5d:7a:bb:92:2f:5f:70:d3:7a:7b:be:27:
0f:39:3f:de:60:bb:10:5b:0b:ed:e0:ed:6f:62:9a:82:3f:89:
4b:b9:0f:43:2a:5f:ee:6e:35:54:b2:18:fe:6a:6a:03:17:22:
66:87:89:a9:70:aa:a0:78:40:a3:29:85:6c:2b:34:b4:94:9c:
55:6e:86:d2:bd:cc:51:2b:95:33:14:e8:d2:23:c6:87:ef:6b:
1b:2e:66:15:1f:ac:a0:94:9e:71:59:50:5e:90:7c:97:b6:13:
86:72:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:10:49 2026 by rpki-client