Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218919.roa
File: AS218919.roa (raw, json)
Hash identifier: yMsrdOp6QCAu55OXFBX8r3IeBP0tI5CxCZBoYv/GUEw=
Subject key identifier: 92:EB:30:51:03:D1:BC:4E:77:D9:44:BC:E3:78:FC:3B:79:24:11:B2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 635C6E6E78AE7D8DD9F7A8FF85A41A2022E4AC11
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218919.roa
Signing time: Wed 23 Sep 2026 02:18:55 +0000
ROA not before: Wed 23 Sep 2026 02:13:55 +0000
ROA not after: Wed 22 Sep 2027 02:18:55 +0000
asID: 218919
IP address blocks: 94.118.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:5c:6e:6e:78:ae:7d:8d:d9:f7:a8:ff:85:a4:1a:20:22:e4:ac:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 02:13:55 2026 GMT
Not After : Sep 22 02:18:55 2027 GMT
Subject: CN=92EB305103D1BC4E77D944BCE378FC3B792411B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:51:d7:24:b0:21:5a:10:01:cd:8c:42:cc:
b8:b1:c3:76:46:eb:76:41:71:ac:96:65:9b:f8:99:
53:de:5d:60:00:00:e6:44:3c:d2:3f:ed:fd:da:06:
77:88:7c:93:60:dc:5d:92:98:83:4c:99:9d:21:ea:
7a:97:20:73:d8:fe:b1:e3:ce:12:12:eb:35:ce:a3:
91:93:37:4a:25:5d:c8:62:96:ee:e8:8e:05:97:43:
93:1f:7b:e0:12:b7:d5:a2:28:6e:f5:7b:11:62:cf:
4c:4e:7e:03:dd:5c:74:b2:22:56:c2:0c:3e:25:5f:
c7:dc:3e:75:3c:f6:90:ed:65:24:3e:8b:9e:4a:cf:
ff:9f:2b:d1:3e:0e:10:b0:7e:c2:e4:18:fc:f7:55:
03:55:4c:dc:62:df:fa:c4:0e:2d:31:03:c2:4c:a1:
78:05:cb:de:79:ee:b2:3a:e3:98:46:18:de:de:b5:
8f:ac:56:d2:20:9e:7c:20:c2:92:1a:f7:f0:df:ae:
bd:ae:42:7f:1a:d0:fe:75:ad:13:ee:2f:dc:64:38:
2d:13:cd:1a:d7:58:f8:77:1c:28:1c:0b:47:aa:ba:
06:3b:a1:21:54:3e:b9:2d:24:29:32:64:9c:83:2f:
8d:c9:3c:ef:11:49:be:56:1f:0f:17:81:4d:ff:3a:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:30:51:03:D1:BC:4E:77:D9:44:BC:E3:78:FC:3B:79:24:11:B2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS218919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.1.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e4:50:72:29:2a:d4:06:69:69:28:55:27:33:cb:c5:a8:39:
a5:fe:51:d0:e6:52:4e:7a:ec:de:73:7f:c9:8f:5a:3c:1f:d4:
24:a0:29:84:c5:b9:28:8c:d1:05:c2:6d:22:9d:61:f8:e6:5b:
9c:5a:3a:49:1b:74:ee:ea:2a:67:42:91:32:ed:b2:71:59:2e:
70:94:97:d1:4b:05:66:c4:51:ff:7a:d2:36:3e:07:f2:28:2f:
64:81:16:fc:83:0e:79:20:dc:a7:f4:4f:8e:fe:a5:9f:eb:7f:
57:a2:a5:06:96:85:eb:e6:3e:d7:bf:c8:5d:32:99:27:cf:96:
1c:9c:77:db:62:70:91:58:e2:df:12:4e:3b:18:36:44:0d:e3:
14:d9:d8:8f:60:4a:d8:84:e4:c7:29:3a:e3:17:7a:0c:3a:64:
8f:bb:38:60:36:df:8e:29:10:ce:c0:22:7b:79:b0:cb:26:1f:
35:5b:80:a8:10:06:e8:37:7d:e0:99:6e:15:a7:af:82:a5:d5:
15:e7:6c:45:6c:c0:33:6c:cc:4e:97:11:14:0d:19:1d:af:47:
c1:04:c2:df:37:e0:ef:ed:69:e9:91:61:bd:0d:81:53:81:2f:
cc:01:1d:e4:f7:24:6d:2a:fe:db:d0:24:4b:6b:a6:14:a2:b0:
2c:59:9c:1d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUY1xubniufY3Z96j/haQaICLkrBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MjMwMjEzNTVaFw0yNzA5MjIwMjE4NTVaMDMxMTAvBgNV
BAMTKDkyRUIzMDUxMDNEMUJDNEU3N0Q5NDRCQ0UzNzhGQzNCNzkyNDExQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRV1HXJLAhWhABzYxCzLixw3ZG
63ZBcayWZZv4mVPeXWAAAOZEPNI/7f3aBneIfJNg3F2SmINMmZ0h6nqXIHPY/rHj
zhIS6zXOo5GTN0olXchilu7ojgWXQ5Mfe+ASt9WiKG71exFiz0xOfgPdXHSyIlbC
DD4lX8fcPnU89pDtZSQ+i55Kz/+fK9E+DhCwfsLkGPz3VQNVTNxi3/rEDi0xA8JM
oXgFy9557rI645hGGN7etY+sVtIgnnwgwpIa9/Dfrr2uQn8a0P51rRPuL9xkOC0T
zRrXWPh3HCgcC0equgY7oSFUPrktJCkyZJyDL43JPO8RSb5WHw8XgU3/OtLDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUkuswUQPRvE532US843j8O3kkEbIwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE4OTE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXnYB
MA0GCSqGSIb3DQEBCwUAA4IBAQAk5FByKSrUBmlpKFUnM8vFqDml/lHQ5lJOeuze
c3/Jj1o8H9QkoCmExbkojNEFwm0inWH45lucWjpJG3Tu6ipnQpEy7bJxWS5wlJfR
SwVmxFH/etI2PgfyKC9kgRb8gw55INyn9E+O/qWf639XoqUGloXr5j7Xv8hdMpkn
z5YcnHfbYnCRWOLfEk47GDZEDeMU2diPYErYhOTHKTrjF3oMOmSPuzhgNt+OKRDO
wCJ7ebDLJh81W4CoEAboN33gmW4Vp6+CpdUV52xFbMAzbMxOlxEUDRkdr0fBBMLf
N+Dv7WnpkWG9DYFTgS/MAR3k9yRtKv7b0CRLa6YUorAsWZwd
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:09 2026 by rpki-client