Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218911.roa
File: AS218911.roa (raw, json)
Hash identifier: unyABbzRnww8wroaIU4OruqUuTE0l4NewDHT6g7YNFg=
Subject key identifier: 16:48:26:3C:2E:67:08:B3:AE:3D:38:AF:9A:A3:AD:69:37:32:50:3E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 718820E7364D6DAB8B9B260C551BF30A434AA527
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218911.roa
Signing time: Fri 30 Oct 2026 09:12:05 +0000
ROA not before: Fri 30 Oct 2026 09:07:05 +0000
ROA not after: Fri 29 Oct 2027 09:12:05 +0000
asID: 218911
IP address blocks: 51.146.238.0/24 maxlen: 24
51.241.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:88:20:e7:36:4d:6d:ab:8b:9b:26:0c:55:1b:f3:0a:43:4a:a5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 30 09:07:05 2026 GMT
Not After : Oct 29 09:12:05 2027 GMT
Subject: CN=1648263C2E6708B3AE3D38AF9AA3AD693732503E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:e1:f0:79:49:61:dc:17:7e:ba:f5:30:ce:
af:3f:a7:98:ab:12:dd:aa:42:01:a9:a5:1d:7d:c2:
fe:0b:4d:9f:03:da:ab:25:30:ed:a7:65:90:6c:c4:
31:4f:ed:9e:ed:fe:c0:ec:e5:67:71:71:f9:d3:36:
04:1a:f3:20:1c:f7:d6:3b:20:3e:fc:9f:15:01:d5:
cf:2d:90:22:d8:23:69:94:23:3c:0f:90:6b:fb:a1:
c4:02:9a:f5:62:9c:72:98:2a:25:b8:6a:c3:27:1a:
7d:2c:36:4b:a2:11:94:3f:62:2a:42:9d:96:d0:ff:
7c:66:0a:07:33:29:0b:3e:5f:61:16:05:8a:d4:a7:
5f:43:64:4c:24:1e:33:c1:0c:38:6b:12:52:8e:3c:
3c:1a:f2:e8:69:0c:31:3c:43:f1:b0:2a:ed:01:d4:
5f:3f:fe:c6:5c:02:5b:eb:2c:d2:68:cf:dc:c1:a9:
85:a9:62:e0:a8:57:c0:26:d1:e2:2c:33:fe:17:0b:
f8:68:da:fb:7c:3a:fe:6e:aa:06:14:ab:cc:77:f5:
73:5e:80:e8:c6:46:6e:5b:db:ec:99:a7:c3:1c:51:
6f:9f:ba:e2:41:99:37:c8:c9:68:6e:11:2d:4e:cf:
76:e4:f9:73:26:9c:09:50:e9:63:96:65:e1:0b:44:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:26:3C:2E:67:08:B3:AE:3D:38:AF:9A:A3:AD:69:37:32:50:3E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.238.0/24
51.241.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9c:00:07:2f:b3:56:5a:34:70:f0:78:0c:ce:4c:76:ee:0a:
86:5e:d3:ab:b6:d0:38:66:0f:14:ee:9f:f0:46:19:3c:e7:14:
b1:be:2a:be:eb:54:20:6b:22:fb:4b:9a:77:77:be:e4:5c:68:
84:b3:14:82:e1:c0:b9:58:03:f8:ca:09:46:c0:53:76:af:2a:
f6:db:3a:4e:5e:54:1b:96:ab:73:95:79:25:4f:17:5f:46:3a:
dd:28:2b:cc:4d:c4:60:ff:b3:b2:d5:a3:53:4f:63:1a:2f:da:
35:30:3c:22:8a:5d:67:73:0f:b8:09:65:3a:e5:12:be:e7:09:
cc:3e:4f:27:c3:62:a4:94:b5:b1:88:e1:01:ba:59:34:70:2f:
97:39:43:30:e8:e7:c8:30:94:97:0c:ad:ff:eb:4d:7e:69:62:
8b:e9:a6:96:03:f5:47:ff:62:d5:ee:81:97:1e:64:2c:1d:17:
88:ed:44:5e:f9:85:12:ca:a3:21:1b:04:95:f9:98:37:13:20:
32:36:6b:6a:42:4b:05:a5:04:11:a7:b8:7c:d0:99:a2:0f:81:
79:57:95:6a:08:b9:33:26:25:e6:3d:bc:80:f2:d8:78:ca:08:
76:65:74:74:ce:b3:28:8c:ef:fe:2f:d1:9b:eb:f4:de:84:7f:
02:04:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:00 2026 by rpki-client