Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: tgj0U+4drf8i0PNNwh78I0CTL3UQfQfjuA7gVzcqGiw=
Subject key identifier: 51:8B:0B:74:47:47:36:9A:98:09:25:46:52:DF:1D:07:60:03:30:E1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 042499250809EACE585D362CB856DC184D6BB8E7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
Signing time: Mon 21 Sep 2026 09:31:52 +0000
ROA not before: Mon 21 Sep 2026 09:26:52 +0000
ROA not after: Mon 20 Sep 2027 09:31:52 +0000
asID: 199741
IP address blocks: 51.194.131.0/24 maxlen: 24
51.194.137.0/24 maxlen: 24
51.194.139.0/24 maxlen: 24
51.194.153.0/24 maxlen: 24
51.194.164.0/24 maxlen: 24
51.194.174.0/24 maxlen: 24
51.194.175.0/24 maxlen: 24
51.194.190.0/24 maxlen: 24
51.241.120.0/24 maxlen: 24
51.241.131.0/24 maxlen: 24
51.241.132.0/24 maxlen: 24
51.241.134.0/24 maxlen: 24
51.241.161.0/24 maxlen: 24
78.105.140.0/24 maxlen: 24
78.105.195.0/24 maxlen: 24
78.105.214.0/24 maxlen: 24
188.220.58.0/24 maxlen: 24
188.220.59.0/24 maxlen: 24
188.220.88.0/24 maxlen: 24
188.220.94.0/24 maxlen: 24
188.220.121.0/24 maxlen: 24
188.220.126.0/24 maxlen: 24
188.220.214.0/24 maxlen: 24
188.220.218.0/24 maxlen: 24
188.220.228.0/24 maxlen: 24
188.220.230.0/24 maxlen: 24
188.220.232.0/24 maxlen: 24
188.221.2.0/24 maxlen: 24
188.221.33.0/24 maxlen: 24
188.221.64.0/24 maxlen: 24
188.221.74.0/24 maxlen: 24
188.221.76.0/24 maxlen: 24
188.221.141.0/24 maxlen: 24
188.221.142.0/24 maxlen: 24
188.221.147.0/24 maxlen: 24
188.221.192.0/24 maxlen: 24
188.221.193.0/24 maxlen: 24
188.221.195.0/24 maxlen: 24
188.221.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:24:99:25:08:09:ea:ce:58:5d:36:2c:b8:56:dc:18:4d:6b:b8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 21 09:26:52 2026 GMT
Not After : Sep 20 09:31:52 2027 GMT
Subject: CN=518B0B744747369A9809254652DF1D07600330E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:4d:45:6f:12:66:6c:c4:a7:53:11:22:c3:
6c:df:8b:6b:d7:71:00:8c:84:9d:25:ce:97:d3:da:
b2:86:89:d6:42:4f:c3:0c:6e:21:bc:f9:3b:71:fa:
4f:54:64:32:d9:76:35:12:6f:fb:d5:71:cd:7e:23:
27:17:ba:cc:23:c0:40:23:ea:e1:3f:52:b4:98:d7:
da:23:16:33:43:b3:ef:f9:50:c3:4f:d5:a8:90:fc:
1c:77:99:18:c6:33:31:a4:66:da:56:b0:be:14:fe:
31:a1:06:34:32:a2:06:ed:6f:ea:5d:20:cc:49:cd:
2a:b0:ef:3c:38:de:03:10:5c:19:ac:74:96:2f:d9:
37:25:15:20:61:4a:82:98:d3:9c:bf:81:fb:f5:66:
06:72:1b:a9:e0:80:7a:dc:20:cd:ab:92:c4:b2:97:
ff:a9:17:d3:7d:65:32:da:12:0e:b2:3e:d9:6d:84:
8a:b5:22:c3:95:5f:a9:90:18:a6:9d:cb:dc:6c:bc:
6e:d2:f6:b4:e8:ac:39:24:c2:e6:76:12:65:3a:35:
bb:26:06:f8:08:f9:ff:98:5a:bc:ba:b2:ea:4d:5f:
c9:4a:de:e0:2a:0e:13:66:44:b3:c5:48:32:11:b9:
04:73:6e:40:82:75:d8:39:4b:53:62:16:d8:7b:ab:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:0B:74:47:47:36:9A:98:09:25:46:52:DF:1D:07:60:03:30:E1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.131.0/24
51.194.137.0/24
51.194.139.0/24
51.194.153.0/24
51.194.164.0/24
51.194.174.0/23
51.194.190.0/24
51.241.120.0/24
51.241.131.0-51.241.132.255
51.241.134.0/24
51.241.161.0/24
78.105.140.0/24
78.105.195.0/24
78.105.214.0/24
188.220.58.0/23
188.220.88.0/24
188.220.94.0/24
188.220.121.0/24
188.220.126.0/24
188.220.214.0/24
188.220.218.0/24
188.220.228.0/24
188.220.230.0/24
188.220.232.0/24
188.221.2.0/24
188.221.33.0/24
188.221.64.0/24
188.221.74.0/24
188.221.76.0/24
188.221.141.0-188.221.142.255
188.221.147.0/24
188.221.192.0/23
188.221.195.0/24
188.221.199.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f7:09:78:de:b1:46:2a:e9:5a:cd:5e:08:99:2b:b3:2e:bd:
47:a3:b3:bd:35:ca:8a:b6:8e:db:e4:92:d8:29:1d:4e:9c:98:
76:c3:fd:8d:6b:dc:42:02:0e:ba:1c:27:87:da:de:a4:65:98:
f6:59:59:3a:fc:63:d8:96:be:c2:1d:51:74:f1:b0:93:22:a4:
1b:48:9c:3d:ea:b9:0d:ef:75:18:fd:44:82:d0:97:92:86:90:
5c:a1:9d:b0:1f:85:36:ec:4a:df:52:7a:e4:72:b3:3d:ac:ea:
e1:f7:39:bc:7a:30:5a:50:70:00:17:b5:02:1c:d5:00:26:d3:
5b:9b:d4:ae:55:94:53:6a:b9:7c:7e:a2:df:52:96:d1:ff:7b:
bc:16:d9:7f:e3:fa:5f:80:f6:3f:26:64:8a:40:44:09:4c:1e:
46:18:cc:57:18:e3:72:f6:a3:79:7d:5d:86:b4:43:df:87:ab:
5a:73:8d:8f:4d:ba:7c:32:8d:26:8d:95:63:5e:1e:46:fa:1e:
f0:4f:dd:8a:c2:d1:90:74:b9:c2:77:8d:47:5f:87:92:9e:50:
e4:f3:1c:b4:04:43:b6:67:5d:df:3e:3c:68:ef:be:90:c1:68:
fb:d7:4f:98:08:d0:fe:b1:3b:3a:15:b9:e9:cb:b6:6d:7d:01:
43:2c:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:18:07 2026 by rpki-client