Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS51082.roa
File:                     AS51082.roa (raw, json)
Hash identifier:          tzChsNBfKGil1NVBlikbwbMRUDBSc5U9uCHILzfRFuI=
Subject key identifier:   6D:C4:03:01:A5:1B:B6:96:39:42:6B:03:BC:21:38:CB:6B:4E:DB:4D
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       41D933C2B2A8AF0C9730A1DC6102B37F2973EC22
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS51082.roa
Signing time:             Mon 20 Jul 2026 09:18:40 +0000
ROA not before:           Mon 20 Jul 2026 09:13:40 +0000
ROA not after:            Mon 19 Jul 2027 09:18:40 +0000
asID:                     51082
IP address blocks:        51.146.140.0/24 maxlen: 24
                          51.194.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d9:33:c2:b2:a8:af:0c:97:30:a1:dc:61:02:b3:7f:29:73:ec:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jul 20 09:13:40 2026 GMT
            Not After : Jul 19 09:18:40 2027 GMT
        Subject: CN=6DC40301A51BB69639426B03BC2138CB6B4EDB4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:74:eb:f0:a6:d4:51:5e:61:e4:be:7f:23:
                    65:b8:b1:4b:cd:82:01:96:68:ce:bf:83:d0:56:80:
                    c5:83:45:fe:3e:08:a4:55:14:c1:5a:5e:d0:3f:13:
                    b7:7a:e5:92:19:74:e7:9c:bf:6e:47:c8:b6:f3:81:
                    7d:96:3d:d1:54:d5:d4:e3:4c:0b:ce:f6:ae:f9:12:
                    10:c1:71:c4:a8:42:4a:ed:b4:73:c8:b5:44:f3:de:
                    0c:4f:0d:d5:af:c8:9b:23:91:74:7b:a5:1a:58:5a:
                    a6:7a:82:27:d3:40:f8:65:04:7a:5e:45:76:a6:c9:
                    ea:77:5a:8e:1d:df:14:67:68:0a:ae:fa:d6:c6:0e:
                    5b:54:e3:6a:3d:f2:28:cd:ed:ce:57:be:87:2c:c4:
                    fa:56:ef:24:bf:d7:1d:e5:e7:ff:3e:da:52:b6:bb:
                    b8:67:50:1b:76:49:27:20:9d:82:0c:5d:44:62:f0:
                    5b:60:83:b4:bb:ce:60:aa:f0:1c:ff:71:c1:0c:79:
                    55:bd:72:a2:ab:46:41:8e:89:0e:25:5d:96:1a:8c:
                    aa:8a:33:c5:fc:ef:9b:33:e1:50:12:93:6f:3d:83:
                    e4:68:eb:44:fa:da:c6:f9:70:12:b7:53:df:3e:c6:
                    d8:2c:ad:98:87:c5:9d:5b:4f:0b:53:77:20:bc:e2:
                    13:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C4:03:01:A5:1B:B6:96:39:42:6B:03:BC:21:38:CB:6B:4E:DB:4D
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS51082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.140.0/24
                  51.194.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:02:11:71:bb:4b:2c:68:4c:4e:86:da:2c:b0:49:6d:4d:
         9a:e3:29:f2:56:39:98:f2:07:95:07:55:6c:b7:df:8a:54:8d:
         44:c8:6a:bd:b5:e5:14:fb:36:a2:2b:57:a6:59:34:d5:47:62:
         df:02:37:c2:0d:b5:d2:ff:43:6e:80:1b:e9:e7:1d:e3:77:92:
         02:32:2d:0c:6c:f9:f8:e2:a5:61:f6:c3:5b:01:05:3c:78:8b:
         b1:cc:2c:00:75:82:77:f1:39:c0:96:bf:81:de:7d:97:d2:15:
         1b:ae:02:53:3e:de:63:08:52:18:d5:a7:5d:c7:ba:17:cc:2c:
         9c:4e:c6:e1:e2:f9:80:be:38:59:30:fc:e0:17:8a:b5:d7:29:
         1b:f3:3d:85:a3:bd:16:73:04:2d:f7:49:0c:2a:92:9c:24:a2:
         55:61:9e:c0:7f:fc:1f:a0:ad:59:93:b6:1f:c5:6c:e6:c6:e7:
         72:62:16:90:d6:fa:28:aa:2e:7f:67:4b:98:f4:b1:2c:6c:c8:
         24:03:6a:47:65:af:3a:44:09:d9:a9:22:62:1a:c1:08:b0:4a:
         42:f6:65:a1:15:50:c0:35:02:87:e7:2f:bf:d1:be:e7:b3:c0:
         2e:af:e0:f2:98:b6:d5:51:4f:06:74:20:a1:4b:55:52:a9:c4:
         bc:ab:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:26 2026 by rpki-client