Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS209888.roa
File: AS209888.roa (raw, json)
Hash identifier: 7iFa89wO+mK5W0l+1A1RZYM8vsBQv4CoIFVSzIqyXbw=
Subject key identifier: AB:F5:1E:70:13:6F:13:9B:BB:21:59:03:93:6B:DA:AC:11:5C:90:AC
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 35AD7B47EFAE87709E066DAE5EC5C75AE9D7759B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS209888.roa
Signing time: Sat 09 May 2026 09:02:34 +0000
ROA not before: Sat 09 May 2026 08:57:34 +0000
ROA not after: Sat 08 May 2027 09:02:34 +0000
asID: 209888
IP address blocks: 51.194.166.0/24 maxlen: 24
51.194.214.0/24 maxlen: 24
51.194.220.0/24 maxlen: 24
51.194.236.0/24 maxlen: 24
51.194.252.0/24 maxlen: 24
51.241.122.0/24 maxlen: 24
78.105.112.0/24 maxlen: 24
78.105.169.0/24 maxlen: 24
78.105.186.0/24 maxlen: 24
78.105.198.0/24 maxlen: 24
78.105.199.0/24 maxlen: 24
78.105.222.0/24 maxlen: 24
78.105.223.0/24 maxlen: 24
78.105.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ad:7b:47:ef:ae:87:70:9e:06:6d:ae:5e:c5:c7:5a:e9:d7:75:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 9 08:57:34 2026 GMT
Not After : May 8 09:02:34 2027 GMT
Subject: CN=ABF51E70136F139BBB215903936BDAAC115C90AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:05:d6:ac:47:d0:01:a4:fe:71:b9:df:ff:
c4:ed:9c:44:30:af:1a:d7:77:ca:52:dc:bc:9a:f3:
7d:0b:c7:27:e6:87:5f:35:4d:18:5e:4c:28:c4:35:
10:ee:f9:d1:c4:90:a0:ab:b4:58:28:8f:2b:3c:22:
9c:10:6b:43:61:05:c8:c7:47:b9:99:bf:f1:c1:80:
b6:97:4a:1b:07:2d:8b:a3:90:af:46:04:44:ac:40:
dc:33:5b:7b:0a:77:85:b8:ef:55:49:48:c7:5d:cc:
2c:1d:06:a0:60:14:bd:bd:b9:86:b2:be:af:c5:3f:
55:f3:8c:61:9b:25:f3:9c:2c:77:fa:c3:6e:bf:7e:
e0:36:f1:d9:d8:9f:b2:b7:55:ca:01:b6:f5:64:b1:
45:7e:a8:58:6f:b2:15:91:1e:ac:d4:a7:38:3b:1f:
d1:75:28:14:80:8b:4e:dc:bd:b4:c7:ad:40:92:f1:
4c:25:b8:4c:31:e5:c2:8b:2e:28:47:d0:ba:e6:79:
d3:0e:48:38:34:25:22:81:5b:1f:df:3f:40:38:1e:
48:fd:72:2a:d5:77:4d:49:e1:97:da:3d:8f:df:a3:
83:80:52:d9:aa:57:5f:8e:f1:a6:3e:93:d1:f8:13:
c2:cd:81:6c:d7:1d:f8:6d:66:49:28:53:5f:95:f5:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:1E:70:13:6F:13:9B:BB:21:59:03:93:6B:DA:AC:11:5C:90:AC
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS209888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.166.0/24
51.194.214.0/24
51.194.220.0/24
51.194.236.0/24
51.194.252.0/24
51.241.122.0/24
78.105.112.0/24
78.105.169.0/24
78.105.186.0/24
78.105.198.0/23
78.105.222.0/23
78.105.246.0/24
Signature Algorithm: sha256WithRSAEncryption
81:71:a0:21:13:66:e2:1e:9d:ac:26:44:a4:f8:09:1d:93:39:
df:f5:94:01:3d:35:87:1c:f2:c4:51:3e:8c:27:e3:99:89:c1:
19:e3:d8:92:2f:6f:6d:7a:9e:3c:44:b5:c8:bd:d4:88:c2:65:
fe:dd:43:df:01:a3:e6:53:d3:ba:5b:79:fe:2a:84:57:29:3d:
8a:9f:a7:15:9e:67:e8:0e:fb:49:e8:1e:88:b8:62:5b:8f:a3:
52:2d:d3:93:da:31:12:6d:76:38:c5:3d:c4:d8:be:0a:93:a7:
4e:3c:96:3b:e6:b6:15:8f:60:cd:fb:35:b7:f7:a3:2c:f5:d1:
c0:45:ef:da:e0:4f:5c:34:8a:2b:18:cb:81:88:c5:af:ca:fa:
a2:79:bc:eb:52:d5:66:94:b5:49:69:d7:c7:2c:00:c0:7d:8d:
e3:90:7e:c0:d6:9d:93:7c:b9:31:b2:c6:b5:83:3f:63:6d:26:
a2:95:db:ed:32:0b:22:97:57:9a:b9:b3:e6:6c:eb:1e:95:01:
9f:db:b5:b4:c7:69:a3:e1:7e:b7:6c:20:8d:bf:f2:22:32:a7:
6a:25:42:e0:57:94:9b:b9:36:85:42:c7:59:90:d8:06:0c:03:
d2:ec:c5:43:52:8a:be:d0:18:1a:26:5b:08:f9:0e:2e:34:0c:
08:54:f5:bd
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUNa17R++uh3CeBm2uXsXHWunXdZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA1MDkwODU3MzRaFw0yNzA1MDgwOTAyMzRaMDMxMTAvBgNV
BAMTKEFCRjUxRTcwMTM2RjEzOUJCQjIxNTkwMzkzNkJEQUFDMTE1QzkwQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPgXWrEfQAaT+cbnf/8TtnEQw
rxrXd8pS3Lya830Lxyfmh181TRheTCjENRDu+dHEkKCrtFgojys8IpwQa0NhBcjH
R7mZv/HBgLaXShsHLYujkK9GBESsQNwzW3sKd4W471VJSMddzCwdBqBgFL29uYay
vq/FP1XzjGGbJfOcLHf6w26/fuA28dnYn7K3VcoBtvVksUV+qFhvshWRHqzUpzg7
H9F1KBSAi07cvbTHrUCS8UwluEwx5cKLLihH0LrmedMOSDg0JSKBWx/fP0A4Hkj9
cirVd01J4ZfaPY/fo4OAUtmqV1+O8aY+k9H4E8LNgWzXHfhtZkkoU1+V9VWDAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUq/UecBNvE5u7IVkDk2varBFckKwwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjA5ODg4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAM8Km
AwQAM8LWAwQAM8LcAwQAM8LsAwQAM8L8AwQAM/F6AwQATmlwAwQATmmpAwQATmm6
AwQBTmnGAwQBTmneAwQATmn2MA0GCSqGSIb3DQEBCwUAA4IBAQCBcaAhE2biHp2s
JkSk+Akdkznf9ZQBPTWHHPLEUT6MJ+OZicEZ49iSL29tep48RLXIvdSIwmX+3UPf
AaPmU9O6W3n+KoRXKT2Kn6cVnmfoDvtJ6B6IuGJbj6NSLdOT2jESbXY4xT3E2L4K
k6dOPJY75rYVj2DN+zW396Ms9dHARe/a4E9cNIorGMuBiMWvyvqiebzrUtVmlLVJ
adfHLADAfY3jkH7A1p2TfLkxssa1gz9jbSaildvtMgsil1eaubPmbOselQGf27W0
x2mj4X63bCCNv/IiMqdqJULgV5SbuTaFQsdZkNgGDAPS7MVDUoq+0BgaJlsI+Q4u
NAwIVPW9
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:47 2026 by rpki-client