Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS204770.roa
File: AS204770.roa (raw, json)
Hash identifier: 4YddsCWVQBEGG3e5u/Tm48LTNg+ZQx+PAOh94LaXzBc=
Subject key identifier: F8:91:58:19:26:B4:93:D7:3C:56:35:46:61:EB:46:1E:53:BA:80:5A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4E7E9ADB3E445B0C514E0292E5FED4CAB52889B5
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS204770.roa
Signing time: Tue 13 Oct 2026 12:56:04 +0000
ROA not before: Tue 13 Oct 2026 12:51:04 +0000
ROA not after: Tue 12 Oct 2027 12:56:04 +0000
asID: 204770
IP address blocks: 51.146.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:7e:9a:db:3e:44:5b:0c:51:4e:02:92:e5:fe:d4:ca:b5:28:89:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 13 12:51:04 2026 GMT
Not After : Oct 12 12:56:04 2027 GMT
Subject: CN=F891581926B493D73C56354661EB461E53BA805A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:d9:7e:54:e5:c3:2e:7c:46:ab:08:e1:23:
fe:14:ee:1a:4e:02:a4:50:33:af:cf:a8:06:e8:95:
b4:54:e1:ff:18:5f:b3:76:df:00:09:aa:ae:fe:22:
95:68:71:80:79:5c:22:21:d1:6c:69:20:d9:73:fb:
32:c7:62:cf:e2:97:70:8f:6b:da:95:24:74:f0:af:
d3:fd:5d:9c:ad:cd:ed:af:c9:c7:a2:47:04:b7:a9:
6e:69:5c:5b:b5:72:2e:37:66:60:97:7b:68:6a:e6:
23:b3:4a:3f:ba:27:1d:fd:60:37:fe:4c:42:15:dd:
50:d0:e7:75:6f:a9:0e:16:2f:c2:dc:2c:36:95:d9:
2b:e7:81:ee:5a:c7:bd:e6:9d:5f:f2:30:f2:1a:6f:
15:c2:06:21:07:f7:bf:52:37:7f:ba:a7:1b:f4:02:
b8:93:0f:43:a9:7f:98:22:07:0e:ee:98:80:e0:33:
40:b5:e1:06:23:de:b0:2b:09:a6:b4:f0:5a:0d:14:
9f:98:63:b3:1e:22:b0:0d:83:5b:c8:87:e0:47:e6:
7d:f6:49:7f:c1:5d:e9:29:85:5a:41:fd:a2:11:55:
6f:92:1c:c0:46:10:43:cb:15:c7:2c:3d:5b:a8:d4:
c6:96:9c:a8:91:ce:b2:10:20:19:28:10:5e:3e:cd:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:58:19:26:B4:93:D7:3C:56:35:46:61:EB:46:1E:53:BA:80:5A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS204770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.20.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:24:e1:c0:54:90:4a:b4:d9:75:58:e4:3b:dd:2c:2d:e3:a1:
12:c4:47:71:df:5e:d4:ce:fa:60:85:61:97:2e:78:71:4f:01:
24:b5:b2:bc:ea:ea:d1:97:17:eb:18:cb:a5:ac:de:04:63:04:
57:b9:29:22:b6:e4:15:dd:33:63:4a:a4:38:19:c9:5a:fa:62:
c4:5e:af:8f:50:e1:05:2d:ed:1b:98:39:f5:36:b2:f1:73:49:
45:d0:b7:4a:41:6b:32:36:f3:59:56:ec:01:1d:1f:0b:76:e4:
e7:01:97:76:92:93:1e:40:52:fd:92:42:75:e6:f3:72:8c:73:
b5:9b:e7:8a:c3:f2:e9:5b:b0:60:dc:e5:a2:5e:ec:d2:40:17:
6b:3b:59:2b:04:1b:63:cc:39:0a:5c:1c:fb:10:35:72:74:d0:
e3:fc:3f:32:4b:b8:fe:d6:f8:8c:bc:8e:7b:30:22:53:32:f0:
e2:fe:c8:ee:2c:46:fa:cb:26:9b:62:08:de:80:e1:d5:ac:52:
d9:40:e3:d6:af:5d:52:d6:62:80:2f:d5:cc:92:50:c5:04:20:
c1:66:6b:ae:26:10:31:f8:8e:db:90:86:b5:72:42:45:d8:46:
6b:d9:95:0a:c8:98:89:81:4c:c6:8c:cf:75:39:44:80:27:6a:
f4:8b:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:00:40 2026 by rpki-client