Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51852.roa
File: AS51852.roa (raw, json)
Hash identifier: R+JjhHel3WdCfILjfa0kQ5BNnc+lKX0CGAoU4qTBmvQ=
Subject key identifier: FE:4F:C2:74:26:39:3C:E6:14:DD:44:D5:C6:0A:E1:A7:CF:66:D2:72
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 14DA7C0645365B133B561A0F15D7E9A036D8E132
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51852.roa
Signing time: Mon 23 Mar 2026 19:41:05 +0000
ROA not before: Mon 23 Mar 2026 19:36:05 +0000
ROA not after: Mon 22 Mar 2027 19:41:05 +0000
asID: 51852
IP address blocks: 82.22.22.0/24 maxlen: 24
82.22.171.0/24 maxlen: 24
82.39.101.0/24 maxlen: 24
178.83.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:da:7c:06:45:36:5b:13:3b:56:1a:0f:15:d7:e9:a0:36:d8:e1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 23 19:36:05 2026 GMT
Not After : Mar 22 19:41:05 2027 GMT
Subject: CN=FE4FC27426393CE614DD44D5C60AE1A7CF66D272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:ab:5a:41:b9:37:ba:64:46:8e:01:9d:73:
ba:a9:61:a1:f2:b6:85:d5:5f:3c:35:89:4a:dd:c9:
de:ed:8f:78:4e:e4:aa:be:27:bb:dd:90:a1:8e:f0:
2d:e8:d5:ad:c8:1c:73:81:0c:d6:0c:9e:ab:51:3d:
50:5f:30:e0:6d:f8:74:39:4f:cb:52:79:9c:79:11:
2f:51:81:52:50:89:0e:01:11:e1:0d:a0:5d:88:67:
2f:10:1c:4e:b8:4d:d2:af:18:6a:02:71:0d:b5:e0:
85:87:bc:1c:0c:02:ab:9e:9d:a6:b2:06:23:d4:6d:
31:81:95:3e:19:1f:58:a5:0b:67:8f:81:4a:59:81:
04:d9:ee:be:19:62:ac:51:3b:b8:fb:69:ef:9f:47:
7a:7f:99:94:2b:d2:8f:76:ef:4f:e4:c7:8f:db:98:
84:93:c3:b6:22:9b:81:5a:ff:f7:24:84:b3:21:38:
d5:06:95:36:a6:77:88:f4:3c:12:a0:ba:13:19:a0:
d5:91:a0:f5:d0:bc:24:70:9a:a0:c2:38:00:95:73:
f5:85:ec:9d:f0:3c:ed:33:47:7e:54:6a:24:bb:fd:
28:b3:95:bf:37:ac:76:47:95:b2:1a:f7:78:db:8a:
65:36:a0:50:ed:fd:8b:42:49:c9:fd:d2:36:ae:34:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:C2:74:26:39:3C:E6:14:DD:44:D5:C6:0A:E1:A7:CF:66:D2:72
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.22.0/24
82.22.171.0/24
82.39.101.0/24
178.83.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b4:aa:0b:41:f3:c8:36:6c:5f:7e:66:a0:a4:37:65:aa:81:
d5:03:4b:10:6d:8b:ad:41:34:23:ae:0a:96:ca:2e:f8:d7:49:
ac:4a:8b:3a:eb:4b:15:07:e0:92:62:fd:1a:1b:83:72:4b:4e:
27:95:a2:bd:8d:af:e3:ac:15:b4:56:a8:e4:04:16:83:f7:b3:
94:e9:85:43:41:f8:29:3d:e8:3b:76:ec:68:3d:bb:28:8d:97:
33:05:44:0a:69:3d:b3:fb:60:82:8f:72:66:9e:35:e8:c9:65:
df:32:1b:27:ab:7a:c5:c7:02:8e:80:24:23:cd:f4:5a:9b:a2:
ab:b2:05:a6:ef:22:51:76:df:59:f7:30:b1:eb:2c:29:46:11:
93:9f:b9:11:be:31:9d:18:c1:f8:85:82:8a:51:73:3c:eb:e8:
75:e0:a5:8e:10:56:bb:b4:e0:97:69:99:c9:af:35:eb:bc:9e:
8c:a7:a6:31:0f:d3:52:02:15:7b:48:6c:57:67:c4:25:53:51:
fd:4f:80:5c:0f:0b:86:71:da:00:7b:ef:52:27:a1:61:14:76:
4e:02:0c:cd:e3:72:d1:9e:da:c3:fd:5b:ef:34:8d:d7:54:b9:
47:0a:37:45:6c:a7:7e:2c:18:09:cf:63:90:3f:e3:31:b1:e9:
f1:a5:cf:71
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUFNp8BkU2WxM7VhoPFdfpoDbY4TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMjMxOTM2MDVaFw0yNzAzMjIxOTQxMDVaMDMxMTAvBgNV
BAMTKEZFNEZDMjc0MjYzOTNDRTYxNERENDRENUM2MEFFMUE3Q0Y2NkQyNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYyqtaQbk3umRGjgGdc7qpYaHy
toXVXzw1iUrdyd7tj3hO5Kq+J7vdkKGO8C3o1a3IHHOBDNYMnqtRPVBfMOBt+HQ5
T8tSeZx5ES9RgVJQiQ4BEeENoF2IZy8QHE64TdKvGGoCcQ214IWHvBwMAquenaay
BiPUbTGBlT4ZH1ilC2ePgUpZgQTZ7r4ZYqxRO7j7ae+fR3p/mZQr0o9270/kx4/b
mISTw7Yim4Fa//ckhLMhONUGlTamd4j0PBKguhMZoNWRoPXQvCRwmqDCOACVc/WF
7J3wPO0zR35UaiS7/Sizlb83rHZHlbIa93jbimU2oFDt/YtCScn90jauNGAPAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQU/k/CdCY5POYU3UTVxgrhp89m0nIwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTE4NTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABSFhYD
BABSFqsDBABSJ2UDBACyU4swDQYJKoZIhvcNAQELBQADggEBAD+0qgtB88g2bF9+
ZqCkN2WqgdUDSxBti61BNCOuCpbKLvjXSaxKizrrSxUH4JJi/Robg3JLTieVor2N
r+OsFbRWqOQEFoP3s5TphUNB+Ck96Dt27Gg9uyiNlzMFRAppPbP7YIKPcmaeNejJ
Zd8yGyeresXHAo6AJCPN9FqboquyBabvIlF231n3MLHrLClGEZOfuRG+MZ0YwfiF
gopRczzr6HXgpY4QVru04JdpmcmvNeu8noynpjEP01ICFXtIbFdnxCVTUf1PgFwP
C4Zx2gB771InoWEUdk4CDM3jctGe2sP9W+80jddUuUcKN0Vsp34sGAnPY5A/4zGx
6fGlz3E=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:29:14 2026 by rpki-client