Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199707.roa
File: AS199707.roa (raw, json)
Hash identifier: R3IH+Eff7ZR/fP7RX9XvsXexOhzsrHy6i6AwTM+nc9g=
Subject key identifier: 84:61:F9:45:22:C2:22:3C:68:F1:1E:48:EA:5A:8A:75:AD:ED:AC:70
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3ECF1426D8EB8A33FB6AB2CAEEFBA79B9C2A7056
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199707.roa
Signing time: Thu 23 Apr 2026 03:17:03 +0000
ROA not before: Thu 23 Apr 2026 03:12:03 +0000
ROA not after: Thu 22 Apr 2027 03:17:03 +0000
asID: 199707
IP address blocks: 51.194.118.0/24 maxlen: 24
51.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:cf:14:26:d8:eb:8a:33:fb:6a:b2:ca:ee:fb:a7:9b:9c:2a:70:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 23 03:12:03 2026 GMT
Not After : Apr 22 03:17:03 2027 GMT
Subject: CN=8461F94522C2223C68F11E48EA5A8A75ADEDAC70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:90:c3:1d:83:f2:b7:b3:49:3b:de:f3:7d:
35:a7:fb:34:74:c1:7c:68:95:f4:48:e9:c1:ee:c6:
02:52:ff:45:de:e0:cb:bb:b8:82:42:dd:da:c7:a4:
81:bf:d1:2d:e2:74:c6:3b:59:f1:4b:b2:2a:8c:3c:
47:de:10:7a:a0:32:2b:aa:26:5d:49:c9:06:a4:3c:
a6:f7:a4:b3:c5:86:d5:14:43:07:e1:3b:03:51:da:
b6:40:d8:12:93:af:e3:5b:e0:85:96:ae:50:5f:7a:
41:f2:57:e5:2c:f1:d5:60:ab:37:83:5c:39:65:be:
17:98:fb:98:54:7a:19:fc:de:64:27:06:e3:dd:06:
40:05:15:2c:38:cb:fc:e0:49:39:dc:95:c6:72:6a:
f4:77:0a:b1:06:30:9d:b7:50:39:49:f5:90:08:cb:
71:cf:6b:42:0b:53:5a:6d:05:37:d4:e2:fc:da:86:
d2:6f:cb:6f:ed:f9:bf:16:79:6d:cf:8c:ff:4d:6d:
ee:8d:5f:df:93:8c:60:b9:42:f3:ee:9c:09:52:6e:
5d:48:a7:61:34:6a:75:c3:8c:a7:ca:7a:f3:c6:36:
20:52:fa:69:23:d8:d7:00:8b:95:c7:d4:f4:82:06:
c5:be:b9:50:86:75:05:15:f2:83:b0:62:61:59:36:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:61:F9:45:22:C2:22:3C:68:F1:1E:48:EA:5A:8A:75:AD:ED:AC:70
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.118.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:ba:db:12:c0:20:8e:80:39:35:21:80:cf:64:3a:5b:37:51:
20:6e:15:14:46:a4:48:a1:65:7f:57:84:34:5f:8e:5b:2b:30:
f3:c6:06:9e:99:25:ff:37:55:1a:11:6c:a9:9e:2e:9d:47:cf:
4d:6b:2b:8c:16:c8:31:6c:e5:c3:63:56:0b:74:31:f5:85:22:
97:dc:76:65:9f:20:80:58:37:4b:5d:04:ff:b7:68:c0:5c:79:
4e:9d:fc:40:ed:17:96:dd:fa:18:56:bd:98:af:9c:8f:a3:20:
41:88:69:d6:35:c5:9c:0d:a6:66:f3:87:d0:77:52:2c:fd:13:
a7:c6:2f:66:2b:76:3a:07:c9:e7:04:bb:3f:bd:bb:c3:5b:83:
62:09:52:85:73:95:82:83:a9:b1:86:60:86:ad:bf:5f:f3:b2:
bf:52:66:70:b4:16:7e:bf:67:af:e0:9e:92:24:d5:7d:26:a6:
e4:43:98:4a:fb:e4:37:d7:c8:72:b1:f6:0c:51:f8:43:60:fd:
94:79:02:97:ee:cc:6a:b2:07:88:1d:05:7b:ab:ec:10:ba:8b:
83:f6:34:dd:2b:e3:a5:f8:ec:c6:35:54:5b:73:91:65:1e:ec:
52:8f:17:b2:1f:f5:8a:a4:3e:33:22:7c:f4:cd:cb:9c:3d:ed:
23:7e:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:20 2026 by rpki-client