Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: pGZEosABaemLvRD3SyG/U0m3BXBhsLjwMFfEl8AfxPM=
Subject key identifier: 12:86:6E:A5:F9:AF:17:56:C9:4F:94:5C:D8:F9:1D:FD:CE:CE:AE:7F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 27600CFEA87889F5B4CBD3B153850CA429A9164C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203048.roa
Signing time: Mon 11 May 2026 09:55:48 +0000
ROA not before: Mon 11 May 2026 09:50:48 +0000
ROA not after: Mon 10 May 2027 09:55:48 +0000
asID: 203048
IP address blocks: 51.194.70.0/24 maxlen: 24
51.194.75.0/24 maxlen: 24
51.194.78.0/24 maxlen: 24
51.194.82.0/24 maxlen: 24
51.194.83.0/24 maxlen: 24
51.194.84.0/24 maxlen: 24
51.194.85.0/24 maxlen: 24
51.194.112.0/24 maxlen: 24
51.194.129.0/24 maxlen: 24
51.194.139.0/24 maxlen: 24
51.194.145.0/24 maxlen: 24
51.194.146.0/24 maxlen: 24
51.194.154.0/24 maxlen: 24
51.194.158.0/24 maxlen: 24
51.194.167.0/24 maxlen: 24
51.194.173.0/24 maxlen: 24
51.194.182.0/24 maxlen: 24
51.194.189.0/24 maxlen: 24
51.194.194.0/24 maxlen: 24
51.194.199.0/24 maxlen: 24
51.194.201.0/24 maxlen: 24
51.194.202.0/24 maxlen: 24
51.194.204.0/24 maxlen: 24
51.194.209.0/24 maxlen: 24
51.194.213.0/24 maxlen: 24
51.194.215.0/24 maxlen: 24
51.194.217.0/24 maxlen: 24
51.194.218.0/24 maxlen: 24
51.194.228.0/24 maxlen: 24
51.194.249.0/24 maxlen: 24
51.194.250.0/24 maxlen: 24
51.194.253.0/24 maxlen: 24
51.194.255.0/24 maxlen: 24
51.241.3.0/24 maxlen: 24
51.241.4.0/24 maxlen: 24
51.241.79.0/24 maxlen: 24
51.241.84.0/24 maxlen: 24
51.241.95.0/24 maxlen: 24
51.241.96.0/24 maxlen: 24
78.105.114.0/24 maxlen: 24
78.105.115.0/24 maxlen: 24
78.105.126.0/24 maxlen: 24
78.105.143.0/24 maxlen: 24
78.105.150.0/24 maxlen: 24
78.105.163.0/24 maxlen: 24
78.105.164.0/24 maxlen: 24
78.105.175.0/24 maxlen: 24
78.105.176.0/24 maxlen: 24
78.105.177.0/24 maxlen: 24
78.105.178.0/24 maxlen: 24
78.105.179.0/24 maxlen: 24
78.105.184.0/24 maxlen: 24
78.105.201.0/24 maxlen: 24
78.105.204.0/24 maxlen: 24
78.105.207.0/24 maxlen: 24
78.105.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:60:0c:fe:a8:78:89:f5:b4:cb:d3:b1:53:85:0c:a4:29:a9:16:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 11 09:50:48 2026 GMT
Not After : May 10 09:55:48 2027 GMT
Subject: CN=12866EA5F9AF1756C94F945CD8F91DFDCECEAE7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:0b:ae:17:90:3b:f5:1a:60:cb:0e:1e:6a:
c6:e5:c0:06:91:53:95:b1:dd:52:54:0c:51:4c:15:
1b:c7:07:85:d0:e0:95:87:e8:f7:e2:6d:0b:9b:fd:
8e:71:b2:ad:99:ce:67:c5:b1:b0:82:2b:15:6a:b8:
a8:32:c1:76:c5:20:7e:a7:c2:0c:98:dc:d6:1d:e8:
ee:15:2f:45:d0:b2:8e:2b:56:db:16:e7:46:f6:33:
14:17:ba:08:be:11:54:b4:dc:52:17:57:69:14:f0:
25:11:86:b5:8a:f9:46:f7:04:03:6e:35:27:9e:a0:
92:09:16:40:72:03:5e:d9:5e:d4:1a:4b:94:8a:db:
cf:81:d9:02:0c:7f:0b:53:53:cd:d6:b2:1a:34:a9:
57:d8:36:66:de:07:82:99:01:1e:97:8c:ce:de:3c:
e9:9e:7e:67:c5:a5:a7:0a:ca:dc:97:c1:53:01:a2:
15:71:7f:e5:66:b4:c2:1b:1f:15:45:e1:c9:25:9b:
0b:95:02:51:07:be:2a:bd:56:aa:b8:ba:0f:e7:73:
74:fc:b6:15:06:fa:86:65:1d:52:fb:23:e0:40:25:
ec:23:95:77:43:43:1e:c4:77:08:ea:5e:10:a9:f5:
7e:f6:36:87:ab:e2:99:fc:6c:47:ed:bc:e4:d3:3a:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:6E:A5:F9:AF:17:56:C9:4F:94:5C:D8:F9:1D:FD:CE:CE:AE:7F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.70.0/24
51.194.75.0/24
51.194.78.0/24
51.194.82.0-51.194.85.255
51.194.112.0/24
51.194.129.0/24
51.194.139.0/24
51.194.145.0-51.194.146.255
51.194.154.0/24
51.194.158.0/24
51.194.167.0/24
51.194.173.0/24
51.194.182.0/24
51.194.189.0/24
51.194.194.0/24
51.194.199.0/24
51.194.201.0-51.194.202.255
51.194.204.0/24
51.194.209.0/24
51.194.213.0/24
51.194.215.0/24
51.194.217.0-51.194.218.255
51.194.228.0/24
51.194.249.0-51.194.250.255
51.194.253.0/24
51.194.255.0/24
51.241.3.0-51.241.4.255
51.241.79.0/24
51.241.84.0/24
51.241.95.0-51.241.96.255
78.105.114.0/23
78.105.126.0/24
78.105.143.0/24
78.105.150.0/24
78.105.163.0-78.105.164.255
78.105.175.0-78.105.179.255
78.105.184.0/24
78.105.201.0/24
78.105.204.0/24
78.105.207.0/24
78.105.239.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b9:e3:e4:bb:88:7d:fc:be:18:b7:1c:20:2f:d3:aa:f5:db:
e1:a6:d1:45:e3:66:8d:5c:0b:42:43:ab:11:68:5f:9f:9a:37:
1e:f8:1c:22:6e:83:80:bc:1b:9d:7d:d6:f5:82:d6:ed:64:7e:
4f:f5:fb:29:e8:37:be:37:75:9c:0d:3a:79:9e:8b:22:30:18:
19:ea:fe:15:e9:b8:c4:11:13:66:54:5e:72:75:69:04:0f:bc:
98:02:93:9e:9b:b2:35:fa:a1:3d:34:7d:84:c4:ed:5b:c3:72:
e2:4c:cc:00:1d:d7:83:5a:ad:7e:3d:1b:ad:12:66:cc:15:e8:
75:38:2d:a2:60:6a:cc:81:e0:93:00:23:78:4f:5b:17:ff:cc:
7b:25:b5:73:66:a2:86:42:de:73:b8:96:d3:f8:03:38:30:be:
25:ab:de:45:06:fc:1a:9a:e8:00:d4:8f:0e:34:29:de:90:e7:
11:ff:27:5b:67:36:bd:1a:07:8f:c9:5e:a7:2a:b9:ba:e1:54:
c7:e9:b1:5a:1e:9a:16:b3:fe:0a:96:79:80:fd:d8:87:ab:36:
98:8e:00:6e:a0:8b:93:f4:33:fa:43:ee:c6:84:85:24:89:0e:
9c:55:a2:ea:63:82:fa:c8:e6:02:66:70:93:7e:71:07:6f:c1:
ac:11:91:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUJ2AM/qh4ifW0y9OxU4UMpCmpFkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA1MTEwOTUwNDhaFw0yNzA1MTAwOTU1NDhaMDMxMTAvBgNV
BAMTKDEyODY2RUE1RjlBRjE3NTZDOTRGOTQ1Q0Q4RjkxREZEQ0VDRUFFN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTAuuF5A79Rpgyw4easblwAaR
U5Wx3VJUDFFMFRvHB4XQ4JWH6PfibQub/Y5xsq2ZzmfFsbCCKxVquKgywXbFIH6n
wgyY3NYd6O4VL0XQso4rVtsW50b2MxQXugi+EVS03FIXV2kU8CURhrWK+Ub3BANu
NSeeoJIJFkByA17ZXtQaS5SK28+B2QIMfwtTU83Wsho0qVfYNmbeB4KZAR6XjM7e
POmefmfFpacKytyXwVMBohVxf+VmtMIbHxVF4cklmwuVAlEHviq9Vqq4ug/nc3T8
thUG+oZlHVL7I+BAJewjlXdDQx7EdwjqXhCp9X72Noer4pn8bEftvOTTOg6fAgMB
AAGjggNMMIIDSDAdBgNVHQ4EFgQUEoZupfmvF1bJT5Rc2Pkd/c7Orn8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjAzMDQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIIBXwYIKwYBBQUHAQcBAf8EggFOMIIBSjCCAUYEAgAB
MIIBPgMEADPCRgMEADPCSwMEADPCTjAMAwQBM8JSAwQBM8JUAwQAM8JwAwQAM8KB
AwQAM8KLMAwDBAAzwpEDBAAzwpIDBAAzwpoDBAAzwp4DBAAzwqcDBAAzwq0DBAAz
wrYDBAAzwr0DBAAzwsIDBAAzwscwDAMEADPCyQMEADPCygMEADPCzAMEADPC0QME
ADPC1QMEADPC1zAMAwQAM8LZAwQAM8LaAwQAM8LkMAwDBAAzwvkDBAAzwvoDBAAz
wv0DBAAzwv8wDAMEADPxAwMEADPxBAMEADPxTwMEADPxVDAMAwQAM/FfAwQAM/Fg
AwQBTmlyAwQATml+AwQATmmPAwQATmmWMAwDBABOaaMDBABOaaQwDAMEAE5prwME
Ak5psAMEAE5puAMEAE5pyQMEAE5pzAMEAE5pzwMEAE5p7zANBgkqhkiG9w0BAQsF
AAOCAQEANLnj5LuIffy+GLccIC/TqvXb4abRReNmjVwLQkOrEWhfn5o3HvgcIm6D
gLwbnX3W9YLW7WR+T/X7Keg3vjd1nA06eZ6LIjAYGer+Fem4xBETZlRecnVpBA+8
mAKTnpuyNfqhPTR9hMTtW8Ny4kzMAB3Xg1qtfj0brRJmzBXodTgtomBqzIHgkwAj
eE9bF//MeyW1c2aihkLec7iW0/gDODC+JaveRQb8GproANSPDjQp3pDnEf8nW2c2
vRoHj8lepyq5uuFUx+mxWh6aFrP+CpZ5gP3Yh6s2mI4AbqCLk/Qz+kPuxoSFJIkO
nFWi6mOC+sjmAmZwk35xB2/BrBGR7g==
-----END CERTIFICATE-----
Generated at Tue May 12 23:24:42 2026 by rpki-client