Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7459.roa
File: AS7459.roa (raw, json)
Hash identifier: uF2E3q9iNiVkJclyXipLNoGakr1M8isdio/1pJGFicY=
Subject key identifier: B5:99:BB:F2:7B:AA:7E:6E:BD:85:16:F9:2A:0D:E2:4F:AE:82:46:42
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2165C13CB1DDA181915146F42A7CF872F405823B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7459.roa
Signing time: Wed 23 Sep 2026 06:11:20 +0000
ROA not before: Wed 23 Sep 2026 06:06:20 +0000
ROA not after: Wed 22 Sep 2027 06:11:20 +0000
asID: 7459
IP address blocks: 51.194.155.0/24 maxlen: 24
51.194.158.0/24 maxlen: 24
51.194.165.0/24 maxlen: 24
51.194.166.0/24 maxlen: 24
188.221.8.0/24 maxlen: 24
188.221.81.0/24 maxlen: 24
188.221.84.0/24 maxlen: 24
188.221.96.0/24 maxlen: 24
188.221.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:65:c1:3c:b1:dd:a1:81:91:51:46:f4:2a:7c:f8:72:f4:05:82:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 06:06:20 2026 GMT
Not After : Sep 22 06:11:20 2027 GMT
Subject: CN=B599BBF27BAA7E6EBD8516F92A0DE24FAE824642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:33:66:0e:38:9e:51:45:bb:0c:24:e6:a1:
e6:2b:c1:e7:bf:1d:78:a0:7d:32:c3:ce:36:07:c5:
1f:18:34:38:41:90:0e:e9:3b:f3:2b:0c:bd:67:c4:
57:e7:4e:44:38:94:a3:77:23:08:c0:33:de:54:49:
d5:3e:5f:5f:cd:a0:46:df:b7:36:cd:10:7f:15:41:
37:6b:1c:5f:06:79:af:c8:fb:40:cc:65:87:33:36:
67:a3:23:04:ad:9e:64:ef:61:ff:a2:3a:a0:8c:d7:
89:7c:13:f0:dc:89:89:52:04:ea:a7:e6:7c:b5:e9:
17:18:44:4e:4c:fb:96:a2:a4:23:9b:86:77:c0:60:
1a:42:18:b7:2f:81:bc:df:5c:6c:0a:4f:14:30:69:
c3:1f:be:b5:eb:95:bd:50:5c:89:e6:39:a9:de:3f:
18:01:d7:ca:8e:b6:58:fc:e1:44:81:97:00:9a:44:
0a:50:9a:58:0a:23:1b:0e:49:1a:64:f9:01:74:93:
19:db:da:53:ac:83:32:d8:a9:38:85:3d:a4:68:20:
19:82:c8:8f:b8:1e:ab:3f:e4:42:44:4a:f2:b8:25:
98:f4:5c:3a:76:0c:af:2d:9e:f4:6b:73:0a:14:00:
ee:46:27:82:86:f1:6a:56:4e:93:d7:3f:e3:86:44:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:BB:F2:7B:AA:7E:6E:BD:85:16:F9:2A:0D:E2:4F:AE:82:46:42
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.155.0/24
51.194.158.0/24
51.194.165.0-51.194.166.255
188.221.8.0/24
188.221.81.0/24
188.221.84.0/24
188.221.96.0/24
188.221.108.0/23
Signature Algorithm: sha256WithRSAEncryption
10:df:21:aa:9a:e9:be:a2:81:78:d5:08:6d:23:7f:9e:10:2d:
65:58:7a:72:bc:23:12:89:98:33:c7:4c:73:1b:98:92:59:52:
09:d5:8e:b4:35:ed:de:a1:da:ef:e1:80:cc:6a:eb:76:38:df:
ca:80:76:c2:f5:21:ad:af:ba:52:a7:f0:64:4f:02:2f:83:09:
b8:75:fc:12:52:bf:fe:48:11:90:47:25:48:85:24:95:8f:bf:
83:bd:d5:df:bb:ee:2d:df:aa:80:d5:44:61:ae:3f:03:be:c8:
d2:53:f3:86:65:c6:62:e4:e5:f1:93:28:c6:13:dc:49:7e:cc:
8f:ec:74:a7:c0:d1:26:0b:68:8e:8a:79:ba:35:00:5f:f9:3a:
2c:9c:b0:5f:7b:95:46:ca:46:e9:e4:c9:b1:ae:08:e8:f3:bc:
d9:a7:da:81:6f:ce:0d:1d:cb:0c:b6:da:94:9d:de:45:63:a3:
e1:a9:0c:c0:7d:ec:f7:c5:10:57:84:06:6a:af:fc:bb:32:e2:
47:9f:18:e3:1a:d9:45:32:39:8d:22:d5:b0:26:82:49:7a:6e:
36:da:5d:1c:97:e7:e1:cf:c6:e9:9d:58:b9:12:45:58:4d:4a:
91:0c:a8:6e:92:03:39:21:73:33:15:e8:b6:d2:f4:6f:cd:8d:
19:55:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:59:21 2026 by rpki-client