Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS51407.roa
File: AS51407.roa (raw, json)
Hash identifier: /xydsMhEbhBPviuwb99XYq7DVmZK44NiKM3E8wnBw9M=
Subject key identifier: 26:A3:22:7D:3D:54:BC:C7:9B:53:3B:A5:C2:D5:84:F7:91:3F:16:8C
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 189706AB799768FF2A0C39AC4B3B5DCC8968E785
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS51407.roa
Signing time: Sun 04 Oct 2026 00:52:44 +0000
ROA not before: Sun 04 Oct 2026 00:47:44 +0000
ROA not after: Sun 03 Oct 2027 00:52:44 +0000
asID: 51407
IP address blocks: 84.108.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:97:06:ab:79:97:68:ff:2a:0c:39:ac:4b:3b:5d:cc:89:68:e7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:44 2026 GMT
Not After : Oct 3 00:52:44 2027 GMT
Subject: CN=26A3227D3D54BCC79B533BA5C2D584F7913F168C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:0e:9c:70:cf:0e:48:fc:dd:6a:f4:47:f6:
af:ca:b7:8f:58:98:1e:72:d8:a0:63:40:cb:6c:35:
d6:d4:c6:ef:f5:b2:cc:97:40:12:b4:b8:47:a7:c9:
b1:60:3a:eb:81:2c:de:62:93:61:ec:15:d3:10:27:
49:99:78:b7:c8:81:c4:45:5a:00:64:a2:1e:73:a7:
83:5d:91:9a:9c:e5:71:63:95:35:cd:ef:98:9c:70:
38:c6:4b:fb:02:65:97:28:fd:8a:29:35:eb:f2:3c:
5a:52:fc:60:62:43:71:06:67:17:29:c2:68:4b:f5:
f0:cf:e1:9f:e2:02:21:df:b3:4a:7e:59:db:86:3f:
4b:22:b7:03:a2:04:b7:48:b2:ad:c9:27:1e:0f:7b:
5e:61:3a:c9:85:f1:85:8b:dd:51:3c:23:ed:c3:3c:
37:5d:54:9c:a9:10:36:4b:54:81:cf:f6:36:6c:ab:
7a:4e:3e:12:2d:81:b8:d4:f8:e2:0f:86:cb:48:94:
69:9f:49:cb:3e:47:02:59:46:8b:38:f8:53:71:cd:
15:f9:a7:46:33:a9:9e:16:bb:8d:19:01:4e:cf:04:
f1:76:85:40:cf:78:4d:e1:ca:88:53:8d:81:03:6c:
9d:bd:cc:1a:d0:fb:68:61:68:c4:14:1e:0c:09:9a:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:22:7D:3D:54:BC:C7:9B:53:3B:A5:C2:D5:84:F7:91:3F:16:8C
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS51407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.108.102.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4d:fc:32:61:0b:c2:dd:ba:ac:2d:89:ff:4f:2d:0a:aa:46:
60:56:a8:1c:a1:94:fb:fe:e1:fd:7f:b7:03:a2:ad:46:e7:f8:
4f:70:e5:0d:61:34:3e:1f:6d:78:2c:e4:f9:67:31:b3:5e:97:
b5:4e:e7:a0:39:5e:cc:b7:c0:2d:dc:e4:96:e3:62:f2:c8:82:
90:a0:f8:26:07:34:38:fd:1e:8a:e6:56:d9:4f:f9:78:7d:f9:
1d:0a:f6:45:c2:f7:a5:d0:5a:98:59:9b:9c:5a:70:62:12:6e:
ba:21:5f:0d:df:89:98:2e:e9:ad:fe:af:ff:a5:b1:9a:68:0c:
4a:39:6e:0d:a4:7e:3b:3e:1d:6b:e0:db:44:53:b7:10:20:a0:
f6:e6:16:44:04:59:18:a6:df:fe:1c:4a:47:f8:fc:9f:6a:d4:
1c:d4:1d:b1:7e:aa:ce:33:e2:43:c5:6d:20:25:f9:90:7c:e5:
4a:e5:40:f8:90:de:f6:82:d5:fd:f8:55:cf:cf:4d:b5:21:39:
80:90:bb:b5:77:19:15:35:42:31:d6:40:ac:9b:dd:5f:4b:8a:
78:ed:cd:b9:0d:84:42:85:9b:59:f7:2e:2e:b1:51:d3:bf:95:
3a:42:0d:ac:d1:50:c3:e7:9d:02:c7:2c:aa:ca:89:8f:ae:b5:
ad:5f:3e:ad
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUGJcGq3mXaP8qDDmsSztdzIlo54UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDQwMDQ3NDRaFw0yNzEwMDMwMDUyNDRaMDMxMTAvBgNV
BAMTKDI2QTMyMjdEM0Q1NEJDQzc5QjUzM0JBNUMyRDU4NEY3OTEzRjE2OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSg6ccM8OSPzdavRH9q/Kt49Y
mB5y2KBjQMtsNdbUxu/1ssyXQBK0uEenybFgOuuBLN5ik2HsFdMQJ0mZeLfIgcRF
WgBkoh5zp4NdkZqc5XFjlTXN75iccDjGS/sCZZco/YopNevyPFpS/GBiQ3EGZxcp
wmhL9fDP4Z/iAiHfs0p+WduGP0sitwOiBLdIsq3JJx4Pe15hOsmF8YWL3VE8I+3D
PDddVJypEDZLVIHP9jZsq3pOPhItgbjU+OIPhstIlGmfScs+RwJZRos4+FNxzRX5
p0YzqZ4Wu40ZAU7PBPF2hUDPeE3hyohTjYEDbJ29zBrQ+2hhaMQUHgwJmrljAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUJqMifT1UvMebUzulwtWE95E/FowwHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTNTE0MDcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABUbGYw
DQYJKoZIhvcNAQELBQADggEBAHBN/DJhC8Lduqwtif9PLQqqRmBWqByhlPv+4f1/
twOirUbn+E9w5Q1hND4fbXgs5PlnMbNel7VO56A5Xsy3wC3c5JbjYvLIgpCg+CYH
NDj9HormVtlP+Xh9+R0K9kXC96XQWphZm5xacGISbrohXw3fiZgu6a3+r/+lsZpo
DEo5bg2kfjs+HWvg20RTtxAgoPbmFkQEWRim3/4cSkf4/J9q1BzUHbF+qs4z4kPF
bSAl+ZB85UrlQPiQ3vaC1f34Vc/PTbUhOYCQu7V3GRU1QjHWQKyb3V9LinjtzbkN
hEKFm1n3Li6xUdO/lTpCDazRUMPnnQLHLKrKiY+uta1fPq0=
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:09 2026 by rpki-client