Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218661.roa
File: AS218661.roa (raw, json)
Hash identifier: NbD99OGyk1kCP53C+vzM+lAwU/howRtR3YpLA1NyHkE=
Subject key identifier: 86:F3:23:33:27:0E:28:66:9E:CB:DC:59:E2:35:A9:27:00:85:13:D7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 13581C8B923C0DDFC18FA4B359E7D145261DC152
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218661.roa
Signing time: Thu 12 Nov 2026 08:20:14 +0000
ROA not before: Thu 12 Nov 2026 08:15:14 +0000
ROA not after: Thu 11 Nov 2027 08:20:14 +0000
asID: 218661
IP address blocks: 94.118.128.0/24 maxlen: 24
94.118.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:58:1c:8b:92:3c:0d:df:c1:8f:a4:b3:59:e7:d1:45:26:1d:c1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 12 08:15:14 2026 GMT
Not After : Nov 11 08:20:14 2027 GMT
Subject: CN=86F32333270E28669ECBDC59E235A927008513D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:89:da:b8:de:77:8b:18:f5:ff:d0:c3:73:
3c:fa:7a:12:e9:f2:76:39:9b:49:ec:28:2d:49:0f:
17:2e:e1:f7:42:cc:11:45:b9:60:0a:74:21:27:59:
9b:3d:55:d8:3f:69:5d:14:84:7b:ab:a4:bb:68:a0:
20:18:c7:f0:13:82:c9:35:26:e2:9c:e4:f2:77:3e:
db:c0:c5:be:89:c0:f4:03:2f:de:c5:39:f8:db:bb:
a2:32:4e:d3:6d:a5:f4:d8:93:3a:cc:ed:8c:69:d1:
af:0c:0b:c4:93:f0:2d:09:74:57:20:b6:23:44:d3:
e0:f3:cf:bd:28:76:5a:96:7c:72:60:b0:eb:72:c8:
0b:81:a8:25:c2:f6:6c:be:93:3d:c6:62:7c:d6:41:
51:9a:c1:34:b1:69:95:bd:88:ba:e1:f8:77:c4:76:
f8:3e:3c:32:01:7c:a5:e4:eb:97:ee:65:c3:54:fc:
21:09:84:4d:57:06:b2:f4:f3:f2:15:4a:2e:50:23:
10:a0:50:7c:c0:6f:89:61:1c:ce:19:4a:d8:62:c2:
69:c1:b7:fa:01:88:7f:79:5c:d5:d6:f6:ab:9a:1c:
83:dc:79:fa:6d:fd:86:4e:87:83:84:7d:40:d5:d4:
d9:a6:3d:18:e1:49:1e:d9:f3:8d:d1:be:f2:2d:15:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F3:23:33:27:0E:28:66:9E:CB:DC:59:E2:35:A9:27:00:85:13:D7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.128.0/24
94.118.130.0/24
Signature Algorithm: sha256WithRSAEncryption
89:fc:d0:93:c5:b6:ac:26:73:7b:47:d3:ac:ba:8c:1e:24:91:
37:a0:43:92:d5:06:43:4e:19:f4:d2:a1:59:dd:45:d5:3a:39:
3a:dd:85:82:30:45:da:89:3c:46:b1:a8:eb:d7:7a:f2:94:92:
ac:b5:bd:48:7b:92:b1:c3:e8:0c:01:c2:c3:81:3b:f7:70:11:
df:be:cd:c4:69:8b:82:e4:eb:78:e8:0b:f0:40:71:3b:82:e4:
46:c1:44:53:97:dc:2f:36:b4:3d:76:77:c2:59:60:e8:48:1f:
65:b5:a9:75:d8:d8:b9:c8:d1:0e:41:e5:59:35:8a:5e:e2:4e:
81:f2:4c:07:e7:5a:96:6e:4a:10:a6:7a:51:73:06:a4:03:61:
c7:5a:f2:bf:b0:d5:f5:04:61:83:c7:06:b1:2f:28:66:90:db:
db:43:55:65:34:19:62:aa:98:38:40:e9:ea:9e:2e:15:31:0b:
cf:5f:d5:9a:dc:22:55:59:fb:f8:79:61:ce:fc:e2:d4:bc:8c:
2f:44:9a:ea:37:4a:aa:58:19:68:18:1a:56:e6:9c:c8:08:73:
16:bc:93:ce:9d:7c:db:42:58:18:72:4c:ef:b0:11:ac:a1:be:
99:f0:e3:de:00:f2:b8:97:dd:23:41:61:6b:0f:5d:f4:31:36:
4c:9c:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:23:24 2026 by rpki-client