Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152491.roa
File: AS152491.roa (raw, json)
Hash identifier: QP7vHMUZrvleN6B0Ti+vFA/Fjw61qHpDMcpuVUyMvqo=
Subject key identifier: AC:74:73:06:E8:B3:91:E3:E3:06:41:25:30:72:11:72:59:25:34:4A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 30FCF653602C1DCF72714A0757431052D48BF195
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152491.roa
Signing time: Fri 24 Apr 2026 13:04:32 +0000
ROA not before: Fri 24 Apr 2026 12:59:32 +0000
ROA not after: Fri 23 Apr 2027 13:04:32 +0000
asID: 152491
IP address blocks: 51.194.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fc:f6:53:60:2c:1d:cf:72:71:4a:07:57:43:10:52:d4:8b:f1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 24 12:59:32 2026 GMT
Not After : Apr 23 13:04:32 2027 GMT
Subject: CN=AC747306E8B391E3E3064125307211725925344A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:d3:d2:b4:77:9c:a5:90:b4:e6:26:c0:53:
f8:d1:a7:5f:af:0a:d1:a2:d6:ef:bb:cb:4d:76:13:
b9:08:b8:f8:b2:2f:be:12:73:3c:84:32:85:c5:8d:
16:20:3d:3b:e5:99:a1:f8:b6:66:06:c7:9c:86:a1:
33:7a:60:b3:36:dc:3e:9c:4b:32:3f:7a:ee:b9:66:
44:48:44:eb:22:de:34:1d:88:51:be:c1:bd:ef:1e:
bc:e0:f8:2e:c7:53:f4:58:7f:1d:9e:56:d8:5b:cc:
09:c3:f3:e2:a8:2b:29:1a:5d:3e:4e:39:38:9c:25:
ce:86:40:e2:dc:8f:3d:8f:b7:47:f5:27:ef:31:4a:
c2:8b:ad:c4:61:08:11:d7:ef:c5:d1:cb:3a:29:57:
90:4d:e5:24:18:cd:bc:89:db:00:db:07:58:eb:da:
ff:42:ba:74:7a:7e:a7:1c:fa:c1:82:ed:1d:30:79:
c0:e3:8c:0a:22:1f:89:b6:33:18:f0:3a:6b:d6:08:
cb:f4:3d:af:88:12:52:56:e3:e7:f9:eb:18:44:c6:
32:9e:d6:25:34:57:9f:97:25:43:36:5a:e3:2d:f5:
98:ed:07:3c:50:a5:21:f0:5d:5a:a6:40:49:ab:5c:
19:48:ba:e2:72:81:9c:9d:e5:7c:bd:b5:e6:76:ac:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:73:06:E8:B3:91:E3:E3:06:41:25:30:72:11:72:59:25:34:4A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152491.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2f:e6:b2:02:70:07:b0:d9:15:a2:8b:d7:b3:18:21:7b:9b:
92:25:48:0e:83:ea:5e:08:b9:ea:ff:ca:98:be:fe:d3:9c:f9:
80:f3:68:bd:8e:58:69:e5:4b:8e:95:65:94:cb:69:2f:7d:e3:
ec:bf:9d:e0:a2:72:74:07:af:9d:ba:ed:9e:05:23:4e:b5:0f:
77:43:9a:6b:3d:04:93:21:35:09:bf:e1:6c:c1:d3:3d:aa:d6:
76:97:81:d8:cd:b0:11:25:27:53:bc:99:d4:e5:61:1b:c6:f5:
95:20:46:0a:fc:32:06:87:eb:39:b6:e3:fa:6f:e4:95:bb:0b:
b2:25:60:05:d3:83:bc:c8:ff:96:69:dc:04:11:57:86:0f:a3:
1a:5b:3e:c0:af:d2:f9:fd:18:3d:0e:c6:60:67:8d:08:37:a5:
f9:d2:07:7d:a1:30:66:9f:86:78:7a:7b:2c:6b:b0:15:ea:f6:
8e:1a:cd:12:79:d1:fa:59:79:5e:90:61:92:5d:e2:92:42:28:
d0:c2:7c:5c:b6:37:4f:28:1a:47:79:8b:de:7b:f9:af:8e:98:
98:c1:33:64:00:b6:d7:bc:08:9f:13:82:fe:09:e9:7a:8b:e8:
db:38:8b:26:e8:7c:76:53:b4:f1:5f:69:3f:6c:b1:46:c4:30:
75:20:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:47 2026 by rpki-client