Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51852.roa
File: AS51852.roa (raw, json)
Hash identifier: f68zGnxS1hlQ9Rgo5KCYAsVmQ3kVN9ULQLq7dnF/APM=
Subject key identifier: 1B:DE:55:C7:35:A5:59:31:95:FD:CC:99:BB:F3:EC:BD:26:AE:96:5D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 079C3A45A5CAD29047297FDA59834B4F998466EF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51852.roa
Signing time: Mon 23 Mar 2026 19:41:07 +0000
ROA not before: Mon 23 Mar 2026 19:36:07 +0000
ROA not after: Mon 22 Mar 2027 19:41:07 +0000
asID: 51852
IP address blocks: 168.222.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9c:3a:45:a5:ca:d2:90:47:29:7f:da:59:83:4b:4f:99:84:66:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 23 19:36:07 2026 GMT
Not After : Mar 22 19:41:07 2027 GMT
Subject: CN=1BDE55C735A5593195FDCC99BBF3ECBD26AE965D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:dc:52:eb:29:2d:cc:15:74:3e:6f:6d:d1:
79:d5:46:41:c3:66:ac:42:f3:a1:e2:21:ab:13:a7:
b8:26:bc:a6:3b:32:1e:05:9a:f2:ac:68:b5:5d:62:
98:1d:f0:ae:31:26:d8:8c:22:cb:99:ee:40:4c:0b:
ad:11:4f:13:7e:ea:7e:75:75:14:54:9b:06:d1:79:
a7:85:cb:90:07:7a:46:c1:6d:e7:71:70:41:db:fd:
26:e6:62:64:35:81:56:56:cd:13:ce:73:64:8d:5d:
b4:8b:14:bd:20:2e:05:4b:b7:7a:37:5b:74:f8:b4:
5d:18:44:f6:57:cb:47:c5:55:aa:6a:56:cf:92:91:
77:af:e6:cc:19:15:36:82:67:46:1a:35:8e:27:84:
c9:3f:6e:34:e3:09:4c:bb:f0:66:b8:08:ab:e6:60:
74:0f:8a:9b:ea:2a:ac:f6:a9:d1:6d:fe:38:e9:fb:
77:9a:b2:02:a4:c5:d6:c3:a2:e8:e4:d5:6d:d9:93:
93:9a:89:6a:5e:76:5c:d1:d1:36:43:64:8b:79:df:
2d:38:95:4b:7d:a0:65:43:e1:52:a0:87:5e:67:6b:
52:87:bc:bb:de:c1:03:82:ec:12:55:10:1a:81:04:
25:4e:9a:1e:51:17:d9:c6:dd:f6:1d:63:fa:d8:07:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DE:55:C7:35:A5:59:31:95:FD:CC:99:BB:F3:EC:BD:26:AE:96:5D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.3.0/24
Signature Algorithm: sha256WithRSAEncryption
35:76:7d:a9:05:51:1b:ec:9e:33:5b:d7:4c:00:f1:56:0d:65:
82:ab:f8:9c:ac:3f:a2:58:fa:dd:29:54:f0:3f:eb:48:75:21:
d3:8a:ee:2d:27:4f:64:81:fa:b2:7b:84:54:2b:9b:86:b4:84:
ce:76:82:87:5f:8f:51:9a:76:6d:b5:39:91:14:8a:50:78:71:
d0:08:7f:aa:2f:55:41:4e:48:5f:e3:ed:d7:4a:d8:5c:7f:0f:
47:66:fe:7d:eb:ef:42:7f:b8:5b:1a:2c:3e:36:97:e0:64:b0:
95:75:59:17:d7:02:29:36:8f:4d:b8:84:59:0b:49:22:25:17:
c8:c5:09:4d:cf:49:84:f3:59:97:39:fa:d9:37:bf:df:7e:67:
7c:09:5c:01:db:60:e4:e7:bc:a6:53:da:9b:65:10:4b:4c:a2:
e5:c6:f3:af:e9:c1:ec:d2:63:f5:92:97:b9:2f:2d:a3:0b:da:
fc:40:28:53:3d:e8:ec:70:6c:a8:2d:2b:1a:bf:56:01:c2:6e:
85:bf:22:a8:90:56:9b:df:44:84:e5:36:83:88:33:5c:dd:bd:
c4:2a:b9:fa:e6:45:69:a5:4f:5b:97:4a:e8:d1:1e:8a:e1:aa:
47:76:2f:cd:6e:db:7d:99:f3:35:4c:ce:e4:db:69:36:0b:4e:
c4:64:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:41:31 2026 by rpki-client