Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS48266.roa
File:                     AS48266.roa (raw, json)
Hash identifier:          96CEpY8duiKmMOFHVWD5vnBdMMTCjpWJvm+PzZbZeP8=
Subject key identifier:   09:21:C5:95:C2:3B:16:7A:5E:7E:67:1C:B7:EB:88:11:5A:11:6B:2A
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       3B58AFDA7E84E7AE56946987AD52BBD00F29ED2F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS48266.roa
Signing time:             Mon 27 Apr 2026 06:48:46 +0000
ROA not before:           Mon 27 Apr 2026 06:43:46 +0000
ROA not after:            Mon 26 Apr 2027 06:48:46 +0000
asID:                     48266
IP address blocks:        51.194.115.0/24 maxlen: 24
                          51.194.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:58:af:da:7e:84:e7:ae:56:94:69:87:ad:52:bb:d0:0f:29:ed:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Apr 27 06:43:46 2026 GMT
            Not After : Apr 26 06:48:46 2027 GMT
        Subject: CN=0921C595C23B167A5E7E671CB7EB88115A116B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:2d:f5:16:f8:3d:7a:ea:b8:71:ea:16:a2:
                    23:51:3c:b1:b3:10:9c:c2:78:8d:4e:00:09:94:5e:
                    03:fd:f4:cd:2f:1c:1a:a9:dc:90:1e:6f:ef:a6:89:
                    a5:18:35:cf:20:e3:6a:0e:c8:2a:63:ac:f6:12:3c:
                    5e:42:ba:e2:68:36:45:52:2d:da:d2:c3:d1:97:57:
                    5f:36:cb:4a:26:8b:01:5d:48:aa:f1:c3:8b:ab:24:
                    b6:b7:ef:cf:c6:c1:7f:46:c9:bf:3b:d0:ba:d8:3b:
                    3b:0c:62:73:24:a3:e9:e2:c0:44:5a:f6:bc:c4:13:
                    97:b5:73:51:c5:9e:56:8d:fe:c0:ab:af:3f:10:eb:
                    b5:52:9b:7d:56:ba:94:ef:73:5a:90:c4:a5:e6:9a:
                    a1:35:32:4f:57:99:ec:cc:a0:07:24:6e:11:f3:a2:
                    f1:b2:61:95:1f:05:64:b2:e6:9f:3f:75:e6:71:1b:
                    1b:aa:ac:70:c0:9f:cb:4d:15:81:01:09:9d:30:1d:
                    9f:e6:8a:52:f7:e2:b7:e8:87:0a:d4:db:9d:a5:68:
                    53:11:69:26:16:d9:89:da:93:bf:df:39:a8:84:c3:
                    24:20:64:32:2a:a8:78:e2:76:d4:aa:be:2c:6b:e4:
                    ca:2e:bc:f7:e7:6f:7b:b4:2e:9a:13:04:2b:1d:00:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:21:C5:95:C2:3B:16:7A:5E:7E:67:1C:B7:EB:88:11:5A:11:6B:2A
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS48266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.194.115.0-51.194.116.255

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:7b:ba:88:b5:32:38:88:79:b6:f1:5b:55:87:5a:bf:ab:
         43:b3:40:73:89:29:e1:57:b5:7f:3a:b2:73:ef:75:15:76:ba:
         d4:2f:18:f9:cd:e9:da:c3:fa:2d:17:63:64:97:16:dd:cb:93:
         2e:4c:8b:fe:4a:0d:de:a3:3a:b0:9c:2c:0d:5c:0b:fe:c6:72:
         3f:b3:a6:58:61:8d:1f:fb:5b:84:de:f5:c3:69:64:62:d9:6b:
         1d:f9:eb:02:2d:70:2a:1c:0c:5d:67:54:81:3e:2b:e1:8c:59:
         e9:3a:40:5c:2a:a6:40:57:0f:69:d0:96:c5:ed:1a:10:5d:cc:
         20:58:51:90:45:22:f8:ad:75:8f:0c:63:03:4a:37:bf:16:30:
         2b:99:33:78:bc:33:be:9c:4b:e4:49:ee:54:6e:cc:d8:67:77:
         60:39:00:11:19:7a:34:de:a0:1a:1b:80:0d:90:2b:a2:81:d2:
         5c:c0:33:56:62:3d:3c:bb:78:05:2e:eb:ee:75:cb:64:cc:97:
         6f:3f:29:0a:04:c2:ee:21:3d:df:5c:b8:c6:5e:76:9f:cd:09:
         66:42:08:18:e7:09:12:18:8f:34:29:23:9c:b9:38:a7:be:a0:
         02:6d:31:e8:c3:2d:ce:3e:15:14:bd:70:e6:b8:93:1b:f0:85:
         32:5c:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:20 2026 by rpki-client