Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: efiC83FZrttkaypztwGytvsiR7vyvUtXY0Vp/sOd1K4=
Subject key identifier: FD:B6:11:3B:33:43:0F:82:48:D5:8C:84:5B:1D:BE:32:4E:B9:56:97
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5905B32088DF13A353392C1848CA5C076FC95A2C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
Signing time: Tue 10 Nov 2026 11:25:15 +0000
ROA not before: Tue 10 Nov 2026 11:20:15 +0000
ROA not after: Tue 09 Nov 2027 11:25:15 +0000
asID: 8881
IP address blocks: 51.146.52.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
94.192.160.0/20 maxlen: 24
94.192.160.0/24 maxlen: 24
94.194.28.0/22 maxlen: 24
94.194.64.0/22 maxlen: 24
94.194.68.0/22 maxlen: 24
94.194.80.0/22 maxlen: 24
176.25.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 21:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:05:b3:20:88:df:13:a3:53:39:2c:18:48:ca:5c:07:6f:c9:5a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 10 11:20:15 2026 GMT
Not After : Nov 9 11:25:15 2027 GMT
Subject: CN=FDB6113B33430F8248D58C845B1DBE324EB95697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:81:8b:22:e4:9c:aa:45:a6:02:da:27:d9:
42:0c:ea:31:6f:a6:fc:a6:57:3b:f9:46:d1:30:58:
22:f0:63:a6:8b:a7:18:c7:20:9d:67:ea:c4:46:2c:
88:66:34:5d:eb:8c:4e:be:0a:cf:ad:e7:78:ae:d7:
b8:d6:a0:8c:4b:7a:72:89:0b:fa:9f:f9:c4:1e:59:
95:f9:6f:3e:95:90:9a:9b:72:bb:ad:a8:c7:4b:3b:
76:f1:eb:0e:40:99:84:4b:04:1f:fb:46:2b:f5:35:
59:c5:0f:40:75:9b:52:f2:97:83:1b:4b:a0:87:14:
ee:f2:49:31:bf:00:1e:af:42:b3:cf:5a:8f:0b:ab:
66:fe:db:04:94:58:cc:a2:a1:2d:62:0f:ea:21:a5:
85:b4:ac:ad:07:9d:60:7f:c7:5b:75:8a:05:0e:44:
1a:bc:c3:e5:0b:f7:cd:03:fe:d4:a3:96:5d:16:90:
ea:b4:31:cc:07:7a:fd:b2:c5:b1:e9:d3:bd:29:1c:
71:1a:40:ce:9f:21:6a:06:77:62:ea:1f:d7:2f:0b:
0b:44:64:cc:0c:9a:7a:b0:79:3c:06:11:a9:91:d3:
d0:fc:4f:82:84:6a:32:1d:b7:3d:fb:b5:a9:fc:69:
31:6a:87:1c:15:71:72:b6:09:8e:ae:eb:e8:54:30:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:11:3B:33:43:0F:82:48:D5:8C:84:5B:1D:BE:32:4E:B9:56:97
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.52.0/22
51.146.144.0-51.146.149.255
94.192.160.0/20
94.194.28.0/22
94.194.64.0/21
94.194.80.0/22
176.25.212.0/22
Signature Algorithm: sha256WithRSAEncryption
28:72:af:d4:b7:1c:21:68:f0:eb:90:43:ae:a4:e6:15:5b:64:
38:21:ad:4e:e4:40:0f:56:ed:e4:dd:2c:a4:a2:97:da:15:77:
0a:57:e7:64:c9:97:d8:f6:bc:0d:77:89:db:3c:78:75:5a:c5:
85:59:e3:65:e1:c1:a9:4d:8d:57:85:cb:7b:67:1a:be:0f:0e:
10:71:29:24:18:94:b5:87:bd:4b:01:7e:ab:44:a6:f4:b5:13:
77:62:2b:4a:80:fe:f4:8c:12:84:2b:19:77:52:93:a0:a1:45:
13:64:64:ee:38:19:32:5c:92:77:10:c6:ce:b6:55:bb:5a:7c:
65:03:52:bd:32:69:45:c2:81:c5:91:24:52:b5:51:4b:1a:23:
8d:2a:d4:66:0e:04:16:89:88:a3:7e:99:1e:7d:21:17:8c:5e:
2b:77:3e:1c:eb:f5:7d:fc:19:ba:56:93:bd:01:90:ea:b1:09:
61:c1:3a:9b:d0:09:87:1f:e0:77:24:20:e1:fe:b4:e1:97:44:
e1:d4:f2:be:b4:e0:f1:ea:9f:1a:0a:16:d0:bb:3e:04:ae:69:
50:f8:a8:5e:1f:ed:8c:43:af:5a:c4:d4:6e:e2:4b:61:f0:57:
f0:2d:d1:83:33:8c:37:d2:f1:a5:e6:dc:18:61:09:ef:17:45:
57:c1:06:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 01:58:21 2026 by rpki-client