Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS51606.roa
File: AS51606.roa (raw, json)
Hash identifier: hp76icXk02fuzP/0pj/rqIBLDAekg+JO3Qy86MrcLvU=
Subject key identifier: 93:02:29:67:68:F4:B0:47:71:F0:36:35:B6:47:CC:3A:51:57:69:EB
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 5A5A639B29AC5FE177D20DA0753B095193F95742
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS51606.roa
Signing time: Sun 04 Oct 2026 00:51:37 +0000
ROA not before: Sun 04 Oct 2026 00:46:37 +0000
ROA not after: Sun 03 Oct 2027 00:51:37 +0000
asID: 51606
IP address blocks: 46.16.136.0/21 maxlen: 21
46.16.136.0/24 maxlen: 24
46.16.137.0/24 maxlen: 24
46.16.138.0/24 maxlen: 24
46.16.140.0/24 maxlen: 24
46.16.141.0/24 maxlen: 24
46.16.142.0/24 maxlen: 24
46.16.143.0/24 maxlen: 24
217.22.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5a:63:9b:29:ac:5f:e1:77:d2:0d:a0:75:3b:09:51:93:f9:57:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:37 2026 GMT
Not After : Oct 3 00:51:37 2027 GMT
Subject: CN=9302296768F4B04771F03635B647CC3A515769EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:8d:b7:ef:b0:03:76:65:f5:14:f2:44:be:
a8:a9:58:1d:e2:b7:60:c7:9b:8b:ba:b5:4a:03:3b:
46:6c:42:bb:e7:27:5a:eb:0e:b5:dc:2c:e6:4a:4a:
ad:18:28:c0:30:59:1a:ef:dd:0a:12:a0:73:b5:c0:
ad:69:ca:63:06:d8:31:94:15:04:ab:b1:57:c4:67:
2e:79:be:a0:80:27:b2:49:dd:bc:5f:45:fe:cb:e2:
14:09:28:d8:c7:59:11:6d:4d:ee:40:0d:68:df:f1:
8d:39:39:bc:33:c6:20:36:73:a1:40:54:b9:6c:b6:
d7:15:11:da:69:fa:60:6d:8a:9f:f7:05:a5:6c:2d:
05:65:be:d0:d3:c4:60:00:ff:42:77:0e:50:71:d1:
10:48:e4:39:b9:56:56:ca:2c:03:5f:50:3e:79:14:
65:15:60:7f:f1:2d:d2:94:f3:7d:e2:3a:e0:24:e9:
4a:90:d1:47:3d:e9:e7:28:f6:92:21:80:94:2a:91:
34:bb:b5:09:10:b1:1b:80:e6:e3:82:95:a8:e5:33:
63:df:eb:98:73:a2:e6:e7:99:7c:5f:01:10:b6:8c:
dc:fe:fe:97:40:30:28:fc:b9:77:85:52:78:7b:82:
81:e6:ee:10:3a:17:8f:65:11:e1:e6:2d:25:2c:39:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:29:67:68:F4:B0:47:71:F0:36:35:B6:47:CC:3A:51:57:69:EB
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS51606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.136.0/21
217.22.116.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:08:58:bb:f1:68:46:ad:c1:ec:a3:29:ab:dc:eb:be:b0:ba:
3d:64:c9:f7:88:24:a7:40:fb:4c:99:7c:73:12:85:7c:c3:76:
bd:ad:dd:93:48:db:10:8f:ef:27:f2:c7:be:5f:3a:5d:92:72:
b9:a7:69:28:2a:2b:8e:85:dc:3d:a5:06:90:3b:ee:f4:2d:e7:
fc:b5:d3:a4:6e:02:bb:84:92:b6:e4:df:9d:74:4b:f1:b9:e3:
21:35:3a:8c:30:01:71:7c:2e:83:8b:09:2d:8a:13:f8:10:82:
21:60:12:ec:79:fa:60:4f:54:1f:6b:8d:01:52:ce:cd:cf:aa:
be:68:28:9a:ba:ca:cc:72:90:06:99:dd:66:90:c1:39:be:ad:
bb:47:5c:d6:1c:ca:41:57:13:a1:44:7b:60:c9:7a:0e:95:82:
3c:5b:78:76:c9:dc:e6:1e:c0:f8:f6:02:b0:24:07:f1:42:4a:
db:43:51:2f:53:13:86:a5:5f:58:f7:8c:43:4b:07:ec:d5:3d:
04:f4:80:a2:a8:33:89:f3:ff:4b:4b:3f:8e:f9:d9:ea:ff:a7:
10:21:be:a0:ed:6d:be:10:88:f6:50:27:35:5c:1a:57:6f:9f:
ff:0d:60:15:6f:80:73:16:41:ac:9a:32:41:33:9a:0c:76:6c:
64:8e:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:15 2026 by rpki-client