Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218780.roa
File: AS218780.roa (raw, json)
Hash identifier: 2DiiMI71fNVE/uLYXlUL7rhjerxlooPUWzHKe8eZTfs=
Subject key identifier: 38:96:F5:71:FD:59:A5:AE:8E:5D:4A:11:31:CD:F9:FF:7E:B1:F6:31
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7EFC1A3E9AB542F531A6BC7F6C8DE6FE4C451D13
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218780.roa
Signing time: Tue 10 Nov 2026 04:06:10 +0000
ROA not before: Tue 10 Nov 2026 04:01:10 +0000
ROA not after: Tue 09 Nov 2027 04:06:10 +0000
asID: 218780
IP address blocks: 51.241.42.0/24 maxlen: 24
51.241.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fc:1a:3e:9a:b5:42:f5:31:a6:bc:7f:6c:8d:e6:fe:4c:45:1d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 10 04:01:10 2026 GMT
Not After : Nov 9 04:06:10 2027 GMT
Subject: CN=3896F571FD59A5AE8E5D4A1131CDF9FF7EB1F631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:78:df:98:16:c1:95:3b:c1:8a:45:34:03:
d6:82:78:2e:b6:56:dd:0d:67:81:06:d2:4e:86:f9:
cb:1e:d1:28:ae:d1:85:10:5d:85:d9:1b:b1:74:88:
72:f5:12:cd:75:bc:2e:28:66:ad:f2:ff:62:27:0a:
c8:59:fa:2b:d8:2b:c5:55:ad:9f:2e:fd:e2:70:7f:
f2:da:90:1a:84:10:51:44:1d:38:35:a3:50:55:4c:
33:78:c2:53:42:60:91:b0:40:61:ea:40:40:d9:7d:
2c:b7:b6:6f:4f:72:8a:b4:c3:c7:dc:85:36:c6:f5:
62:27:8d:96:07:02:2c:1e:15:d7:75:f0:0f:b6:d7:
52:65:90:bc:c6:8c:01:81:f9:ca:de:4c:7e:4a:bc:
55:eb:f5:fb:8b:82:0c:fc:82:20:34:39:d2:62:be:
44:3e:eb:09:fa:3e:a5:b6:12:51:c7:14:5a:b8:58:
c0:02:32:ec:f7:6a:8a:fd:b8:f3:bb:15:dd:e7:76:
9c:f6:62:44:6d:86:38:5e:a5:25:a4:1d:f2:f5:83:
5f:2d:bc:d6:f1:13:38:20:06:c4:a4:44:b3:3e:37:
77:6d:a7:d0:ef:69:84:34:ec:b9:f0:67:10:71:9b:
85:99:24:e3:83:cd:21:11:02:5a:31:f2:21:9a:32:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:96:F5:71:FD:59:A5:AE:8E:5D:4A:11:31:CD:F9:FF:7E:B1:F6:31
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.42.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:4e:1e:0d:71:28:f5:af:9c:58:48:58:20:5b:53:54:6d:4e:
ef:c4:7b:a4:8f:a7:4e:84:b8:54:e7:1b:56:8b:88:9e:83:a9:
83:ad:45:81:79:ed:a0:31:17:b9:50:15:46:ba:be:2c:4d:37:
cc:3b:c9:59:20:8f:0b:d6:20:89:e7:53:81:fd:28:04:65:c8:
3f:eb:1a:a4:38:9d:d9:59:cb:9d:a8:18:eb:89:ef:8f:08:b8:
8c:0c:b1:30:5c:80:e5:7e:8a:52:04:40:d5:9d:f3:3e:17:d3:
b3:9f:8d:d0:1f:b1:6b:d7:d3:95:f1:e1:94:a8:d6:55:bf:a2:
06:a6:10:c0:a6:2c:a9:4e:5c:02:e6:47:1b:be:16:26:c1:3d:
fc:18:fa:5e:cc:8a:e0:99:1c:8b:ab:cd:ec:67:9f:bb:d2:c9:
89:1a:cd:7c:8d:76:b8:85:47:f9:34:76:d3:4e:24:6e:fc:a7:
2e:74:76:7d:12:f7:be:a8:52:be:80:6c:31:eb:55:68:fe:42:
f5:71:83:8d:a8:48:b7:7b:87:27:3c:3d:cb:fa:7c:fe:0f:d2:
73:53:bc:51:ae:cb:12:86:c3:b4:c2:0b:24:13:0b:b5:71:55:
0a:80:cf:fe:fa:89:ec:3c:7b:cd:0f:59:83:2d:0a:04:66:8e:
f8:d4:83:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:07:41 2026 by rpki-client