Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51791.roa
File: AS51791.roa (raw, json)
Hash identifier: 5tHEwaKrzMXNI98aGCcY8ZAjRYYmaZkZ5/izO4yrvrs=
Subject key identifier: F7:DF:7A:66:A8:F3:C8:8A:B1:D8:1E:53:F3:2C:5B:4B:17:5F:85:A6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2349CC9D749E14C2E4B93BBBB8221D97B66613FC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51791.roa
Signing time: Fri 25 Sep 2026 17:49:35 +0000
ROA not before: Fri 25 Sep 2026 17:44:35 +0000
ROA not after: Fri 24 Sep 2027 17:49:35 +0000
asID: 51791
IP address blocks: 2a13:9500:fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:49:cc:9d:74:9e:14:c2:e4:b9:3b:bb:b8:22:1d:97:b6:66:13:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 25 17:44:35 2026 GMT
Not After : Sep 24 17:49:35 2027 GMT
Subject: CN=F7DF7A66A8F3C88AB1D81E53F32C5B4B175F85A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:fe:55:94:bc:a1:fa:82:e7:bb:5e:ca:63:
ef:bc:89:a5:c1:16:65:9d:0f:d7:53:82:60:7d:fe:
2f:ee:cb:28:cc:eb:5b:84:29:35:1b:20:60:a2:b6:
aa:c5:e9:19:81:9b:55:d2:21:bf:8d:22:0a:4a:e8:
f8:e6:c8:93:01:92:ce:0d:94:5e:49:2d:29:59:46:
b7:c8:72:2d:e9:6d:c0:d9:5a:88:bb:7d:fa:4d:58:
70:75:53:e3:5b:bf:45:98:94:56:17:36:a9:6c:3e:
16:4b:43:ce:e3:4d:7c:8a:8b:9c:e6:59:ec:9d:4b:
56:32:45:7a:39:ec:c5:72:f0:de:0f:6e:a2:14:ec:
3e:a2:d1:71:68:14:bb:dd:f2:63:1d:77:f8:db:dd:
40:dc:c4:f1:5a:10:31:42:7e:1d:17:ce:09:06:7c:
1b:0d:ed:57:59:f4:2d:1d:10:f2:5f:b2:63:71:c7:
55:08:09:2d:02:1d:85:f9:6e:f0:7c:d9:09:1a:9b:
77:56:24:b9:71:74:29:4c:06:24:1d:26:14:c3:87:
ee:e9:28:2d:54:71:2b:6c:75:5a:1e:22:15:d0:e5:
cd:24:85:2e:e7:d2:e0:c4:ef:c6:05:a4:6d:5c:20:
05:ef:05:e7:1d:dc:1b:2b:f2:c2:ac:c3:aa:69:4e:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DF:7A:66:A8:F3:C8:8A:B1:D8:1E:53:F3:2C:5B:4B:17:5F:85:A6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:fe::/48
Signature Algorithm: sha256WithRSAEncryption
30:ad:d1:4f:f8:31:d6:46:3a:e5:fc:6c:99:98:9d:3f:55:11:
98:0f:23:26:2a:06:79:4c:fb:b0:6c:c6:54:8c:4d:90:2b:d6:
56:ca:20:4a:68:23:5f:c0:04:d8:8c:2a:f8:6f:30:a5:bd:5d:
e9:47:4b:84:84:a7:4b:87:ca:90:91:6c:a8:8a:2b:9e:81:ad:
ae:22:ad:25:9b:12:8a:a8:22:61:d1:82:f1:8c:3c:70:82:43:
4d:96:65:91:75:9f:3e:77:0b:b7:a5:ae:19:a5:b2:24:93:00:
32:71:88:11:f7:7d:cc:5b:4c:45:f0:9c:2d:cd:8b:5c:b9:dd:
1c:23:ed:ec:93:e6:6f:1e:2e:9d:4a:60:24:89:e7:1b:b7:2b:
32:7a:c3:70:bd:df:13:41:df:2f:8b:28:b8:21:7e:cf:f6:cc:
e4:c2:bf:f1:41:12:04:d2:e6:a4:18:07:24:e4:41:ff:2a:bc:
6f:52:73:ff:68:f7:71:99:99:0d:e4:55:1f:99:39:3c:b2:54:
1a:71:12:fc:e0:6b:89:b8:3f:91:d7:8e:c2:52:30:cf:c4:d3:
7b:8d:d3:77:81:8f:6f:e7:34:06:f6:27:c2:03:14:8c:1d:1b:
8e:14:39:f1:5c:90:dc:3a:b7:6c:b8:00:ad:ea:a1:2d:e9:d3:
8e:ff:5a:15
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUI0nMnXSeFMLkuTu7uCIdl7ZmE/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MjUxNzQ0MzVaFw0yNzA5MjQxNzQ5MzVaMDMxMTAvBgNV
BAMTKEY3REY3QTY2QThGM0M4OEFCMUQ4MUU1M0YzMkM1QjRCMTc1Rjg1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxf5VlLyh+oLnu17KY++8iaXB
FmWdD9dTgmB9/i/uyyjM61uEKTUbIGCitqrF6RmBm1XSIb+NIgpK6PjmyJMBks4N
lF5JLSlZRrfIci3pbcDZWoi7ffpNWHB1U+Nbv0WYlFYXNqlsPhZLQ87jTXyKi5zm
WeydS1YyRXo57MVy8N4PbqIU7D6i0XFoFLvd8mMdd/jb3UDcxPFaEDFCfh0XzgkG
fBsN7VdZ9C0dEPJfsmNxx1UICS0CHYX5bvB82Qkam3dWJLlxdClMBiQdJhTDh+7p
KC1UcStsdVoeIhXQ5c0khS7n0uDE78YFpG1cIAXvBecd3Bsr8sKsw6ppTmz1AgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQU9996ZqjzyIqx2B5T8yxbSxdfhaYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTE3OTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE5UA
AP4wDQYJKoZIhvcNAQELBQADggEBADCt0U/4MdZGOuX8bJmYnT9VEZgPIyYqBnlM
+7BsxlSMTZAr1lbKIEpoI1/ABNiMKvhvMKW9XelHS4SEp0uHypCRbKiKK56Bra4i
rSWbEoqoImHRgvGMPHCCQ02WZZF1nz53C7elrhmlsiSTADJxiBH3fcxbTEXwnC3N
i1y53Rwj7eyT5m8eLp1KYCSJ5xu3KzJ6w3C93xNB3y+LKLghfs/2zOTCv/FBEgTS
5qQYByTkQf8qvG9Sc/9o93GZmQ3kVR+ZOTyyVBpxEvzga4m4P5HXjsJSMM/E03uN
03eBj2/nNAb2J8IDFIwdG44UOfFckNw6t2y4AK3qoS3p047/WhU=
-----END CERTIFICATE-----
Generated at Sun Oct 18 04:32:33 2026 by rpki-client