Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7459.roa
File: AS7459.roa (raw, json)
Hash identifier: RevAeiIqHJRwPnxesfURobQGY0TirCN7FiJ1ktsU2js=
Subject key identifier: C0:48:CD:80:F0:55:86:C1:59:CA:62:70:60:4C:CD:FA:20:57:25:85
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 46E18D7DC8E3A3ED44EBD0992DFA12C02AAD60A8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7459.roa
Signing time: Wed 28 Oct 2026 14:28:01 +0000
ROA not before: Wed 28 Oct 2026 14:23:01 +0000
ROA not after: Wed 27 Oct 2027 14:28:01 +0000
asID: 7459
IP address blocks: 51.194.155.0/24 maxlen: 24
51.194.158.0/24 maxlen: 24
51.194.165.0/24 maxlen: 24
51.194.166.0/24 maxlen: 24
94.193.248.0/22 maxlen: 24
94.193.252.0/22 maxlen: 24
188.221.8.0/24 maxlen: 24
188.221.81.0/24 maxlen: 24
188.221.84.0/24 maxlen: 24
188.221.96.0/24 maxlen: 24
188.221.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e1:8d:7d:c8:e3:a3:ed:44:eb:d0:99:2d:fa:12:c0:2a:ad:60:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 28 14:23:01 2026 GMT
Not After : Oct 27 14:28:01 2027 GMT
Subject: CN=C048CD80F05586C159CA6270604CCDFA20572585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:ac:44:af:f5:9c:ca:59:59:6d:24:db:cf:
60:5f:1a:96:a5:fb:d5:95:4d:40:3d:98:65:28:bd:
41:bd:71:51:4d:49:e9:ab:a6:b8:5b:c1:e1:7f:86:
09:a0:e2:a7:69:e7:6f:63:8d:75:2a:57:2e:22:df:
5f:76:22:86:1b:2a:10:88:a6:a5:dc:05:34:d3:30:
00:cd:34:1f:f0:4c:b9:0e:2b:35:54:25:ca:aa:87:
9b:04:ce:12:4e:6b:99:7f:b2:67:72:54:14:3b:a1:
44:cd:12:b4:b7:fd:6c:f8:20:94:18:9b:68:fb:35:
d2:7b:90:ac:3d:38:19:06:bc:4b:96:40:80:e9:73:
97:28:7b:12:5c:e8:4b:30:a9:f6:75:78:60:b7:ee:
db:eb:87:00:82:96:a2:7e:cb:0d:2f:93:71:ac:39:
2e:69:09:c6:4a:61:ca:bb:73:0c:c9:b8:d4:3f:77:
00:43:9c:d3:59:d1:41:f5:f0:94:1a:29:fb:e5:0d:
bb:56:f6:15:90:3f:e7:02:01:d0:b6:12:d9:4d:5e:
77:2b:45:e2:9e:c1:8c:e3:92:ee:03:61:88:fb:a9:
79:41:5f:fc:37:39:5b:88:6d:43:f7:95:cc:2b:b2:
5b:aa:50:8b:e4:3a:32:27:d2:37:5e:4f:2a:a2:0c:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:48:CD:80:F0:55:86:C1:59:CA:62:70:60:4C:CD:FA:20:57:25:85
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.155.0/24
51.194.158.0/24
51.194.165.0-51.194.166.255
94.193.248.0/21
188.221.8.0/24
188.221.81.0/24
188.221.84.0/24
188.221.96.0/24
188.221.108.0/23
Signature Algorithm: sha256WithRSAEncryption
50:38:1e:ed:11:3e:01:ec:30:64:47:d5:92:5b:4a:e4:e9:10:
ce:f1:6e:17:c6:3e:f4:c1:03:fd:8f:e0:19:5f:75:69:7a:67:
ed:e6:b2:48:48:7b:60:10:b3:7d:fb:83:4d:48:88:55:39:bb:
07:59:90:2c:6d:5f:bb:e1:a8:af:fb:84:cc:db:ca:4b:79:08:
00:b2:f4:41:ee:ca:40:29:dc:0d:e5:96:ab:d5:b4:16:de:f7:
21:70:71:e6:60:6a:ce:3d:1f:fd:5c:36:75:be:46:04:af:0f:
de:99:95:2c:6b:05:93:27:6f:70:70:dc:55:d8:e5:50:cf:7d:
ba:66:7f:cc:56:f3:9e:2c:5c:be:c9:df:94:f1:77:37:47:b3:
8f:ad:05:ac:f6:d3:24:8e:da:22:4b:92:d4:f3:ef:36:09:70:
15:68:8e:24:58:39:eb:53:ab:56:a0:a7:b5:d3:99:ad:33:b7:
f8:9d:4c:f7:cc:f0:a3:71:26:d0:ad:61:22:3b:7b:b3:32:bd:
a9:cb:43:e5:0a:45:58:0a:0d:b2:8b:59:06:11:b3:bd:7e:75:
e2:97:8e:6b:15:8c:a4:e9:23:02:d1:7e:3a:17:59:77:91:c6:
17:52:e9:87:34:43:79:f0:8c:c5:67:42:15:70:f4:05:4f:08:
2e:6a:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:15:21 2026 by rpki-client