Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS148996.roa
File: AS148996.roa (raw, json)
Hash identifier: 2liMgOJYLfxti+Q6gRvtbJhDgdib5vQQqNVReeUHuqY=
Subject key identifier: D7:46:EE:8D:09:68:A9:08:52:EF:54:C5:68:8B:66:FC:28:AF:D1:BF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6C0A96C4723C906489C530A05AF97D3437AB4616
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS148996.roa
Signing time: Sun 27 Sep 2026 00:00:14 +0000
ROA not before: Sat 26 Sep 2026 23:55:14 +0000
ROA not after: Sun 26 Sep 2027 00:00:14 +0000
asID: 148996
IP address blocks: 51.194.116.0/24 maxlen: 24
51.194.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:0a:96:c4:72:3c:90:64:89:c5:30:a0:5a:f9:7d:34:37:ab:46:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 26 23:55:14 2026 GMT
Not After : Sep 26 00:00:14 2027 GMT
Subject: CN=D746EE8D0968A90852EF54C5688B66FC28AFD1BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:5d:58:87:0a:27:fa:ec:ec:d7:84:b2:2b:
8c:cc:45:dc:33:f0:34:b3:ac:b6:41:9e:c2:a0:30:
c6:e0:90:42:1b:6f:3d:63:bc:cd:b3:67:24:d0:7f:
b6:78:af:1c:82:e3:59:f0:4f:40:0c:51:cc:f3:b5:
e9:eb:f7:8f:f4:06:61:ee:1b:34:a3:24:23:0b:71:
ce:03:a4:a2:3b:64:03:98:fc:5e:5c:cd:b6:9f:c2:
1b:dd:b4:27:71:2c:1f:c3:1e:e5:99:f4:b8:97:b2:
f3:39:07:1b:9c:ac:35:90:e1:2c:b4:ae:68:ff:cd:
f0:cf:04:8c:7d:0a:65:af:bc:2b:b7:fa:7b:89:43:
9c:c1:0b:f6:83:5b:2c:23:93:c3:fc:ae:cc:7e:01:
f6:b3:9f:5f:f8:35:ba:b1:61:a4:bc:e0:88:17:92:
dd:01:18:a5:d0:c3:82:77:8c:81:b8:84:95:de:88:
c3:93:bb:81:65:4a:2c:2a:98:86:52:a6:b3:be:0e:
e7:ea:11:9d:f0:71:ac:0e:2e:f7:64:f1:34:ec:c7:
1d:fa:71:41:81:89:b7:18:7c:7c:62:65:65:4a:7b:
93:81:c2:8e:48:85:e0:b5:da:f8:5b:d3:40:3a:1e:
33:dc:b5:a2:99:ed:62:f3:39:d6:1e:69:79:13:c8:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:46:EE:8D:09:68:A9:08:52:EF:54:C5:68:8B:66:FC:28:AF:D1:BF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS148996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.116.0/24
51.194.255.0/24
Signature Algorithm: sha256WithRSAEncryption
88:91:09:fa:46:50:38:58:bb:5a:3f:ce:89:d9:69:94:df:10:
3c:92:39:3b:dc:b3:e9:1c:2c:59:67:89:a9:06:0a:f3:95:6f:
ec:ec:18:c4:8f:2b:94:47:d4:3a:de:8a:02:0e:0f:af:29:df:
b7:87:90:69:70:5f:1a:92:03:74:be:73:31:88:33:82:f5:c2:
42:41:69:1c:3a:4d:c7:84:38:e8:40:ca:ca:da:ff:65:0c:80:
ed:73:c2:f0:6a:fc:d6:60:e8:42:0b:3a:2c:b7:d0:c0:f9:ac:
27:65:1b:7c:89:03:fd:3a:ae:c3:7a:d4:0b:8d:22:da:4e:d7:
a5:5a:ea:f9:98:94:8e:f3:75:cf:f2:22:e6:a5:36:0f:4e:8a:
f7:4d:c6:1d:9d:22:76:47:e7:57:64:94:2d:6d:47:b8:35:15:
09:7c:7c:ee:e0:ae:91:c0:24:d1:57:de:2b:bd:20:cb:9d:70:
4c:bc:a3:0f:f1:df:13:78:e3:f2:37:3b:57:4f:fb:15:d5:71:
bc:6f:91:77:50:a5:d6:78:4b:71:52:e8:86:37:f9:06:6e:06:
09:ad:bd:0d:ae:4a:86:e4:93:75:e5:67:8a:0b:94:9c:74:2c:
fa:1d:d8:59:a1:ac:d8:89:9e:5b:88:9f:b7:9f:aa:95:67:06:
a1:93:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:47:41 2026 by rpki-client