Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218702.roa
File: AS218702.roa (raw, json)
Hash identifier: ozwf9xPAFrfQPSgnoF1q2uIY13kBWCZUDZr8pok5pRw=
Subject key identifier: F1:E2:04:F7:23:7A:70:77:E1:30:8F:22:21:30:2F:3B:0D:12:8A:40
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 67E0B7C0C3E5E82879D4508F12B0A40D28F7B57A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218702.roa
Signing time: Mon 21 Sep 2026 15:19:41 +0000
ROA not before: Mon 21 Sep 2026 15:14:41 +0000
ROA not after: Mon 20 Sep 2027 15:19:41 +0000
asID: 218702
IP address blocks: 94.118.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e0:b7:c0:c3:e5:e8:28:79:d4:50:8f:12:b0:a4:0d:28:f7:b5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 21 15:14:41 2026 GMT
Not After : Sep 20 15:19:41 2027 GMT
Subject: CN=F1E204F7237A7077E1308F2221302F3B0D128A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:21:4f:d5:f0:18:d6:7e:b7:d7:53:58:00:7c:
6c:f8:01:b3:53:a0:27:6c:f0:64:a2:f7:0c:ea:99:
17:c5:60:18:80:af:97:57:4a:35:73:92:a4:99:20:
83:fb:77:7b:9f:1a:fa:73:fc:20:07:c5:22:77:31:
29:d5:f7:5c:93:3a:4b:c7:26:d0:69:65:ab:46:73:
4c:b5:85:41:87:fd:6b:b7:36:fd:84:c6:0a:c0:72:
ff:07:f6:7a:18:aa:9d:72:32:1e:93:12:6b:d5:33:
f1:a9:87:8a:97:7e:49:15:19:19:a0:38:f0:90:f5:
61:1b:1e:45:fd:67:f6:d2:e0:8b:fe:15:da:0c:ce:
c7:22:14:d6:e4:93:83:49:2f:41:74:15:2c:7c:ec:
13:14:4a:c4:36:e7:fc:a3:30:4a:e0:52:6b:c4:a2:
a1:cd:90:5b:2c:75:9d:b0:31:f8:95:c2:54:d9:4e:
bf:7b:65:6a:79:8f:99:ff:21:3d:13:91:f3:87:79:
8d:96:4b:cc:bb:b2:ab:e5:b0:17:d5:69:28:99:a8:
74:0b:ce:cf:c0:9c:46:67:71:70:b7:b9:8f:a5:78:
39:6a:b1:4a:3c:23:c6:82:6e:df:0e:06:f3:39:05:
a6:86:04:d7:fe:6a:4b:af:51:01:24:09:63:45:b2:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:04:F7:23:7A:70:77:E1:30:8F:22:21:30:2F:3B:0D:12:8A:40
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.144.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c2:d0:5d:34:1f:3d:06:0d:64:f4:b4:7c:04:33:33:6b:e1:
64:96:25:11:e5:74:73:7f:39:6b:bf:83:82:98:8e:99:bc:8d:
ea:7a:20:b3:69:6c:d4:25:47:64:5b:39:3a:35:81:52:cf:57:
a6:71:2b:9a:68:f8:a1:52:5b:2f:1d:bf:96:de:56:bb:cd:2e:
17:39:6f:d7:fe:33:75:7d:36:89:0a:b9:44:93:e9:4b:4a:1d:
94:74:3e:ae:ff:b6:8c:87:1f:81:a0:b9:c1:a0:69:9d:17:5b:
60:5f:a7:0e:89:13:43:90:e6:7b:5b:a1:1f:71:96:43:9d:5a:
12:34:b8:9b:bd:3c:36:4f:9d:d1:4b:10:7f:b6:bf:54:29:94:
15:11:2f:5d:79:8c:bb:b5:a9:7d:35:22:d4:83:5e:61:33:4f:
fa:a8:7f:c3:0a:01:26:86:00:6a:af:d6:f3:2c:d4:74:0e:83:
f7:47:50:cd:d5:48:8c:85:1c:bc:b0:ac:ae:2a:19:91:db:3d:
b8:83:96:2c:2d:0a:6e:23:1b:c7:17:d8:a8:4a:af:be:e1:3f:
26:2e:d1:cb:c2:17:ec:5a:b2:0d:f0:0f:7a:e5:f3:02:21:90:
3a:00:e1:26:5b:f9:32:2a:22:ca:54:7c:bb:1c:ca:d3:86:d7:
41:14:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:59:17 2026 by rpki-client