Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51722.roa
File: AS51722.roa (raw, json)
Hash identifier: CqyaFmBEm0fNXmO9GNFuaAK9CQDB0iaupmEE6C8ByFo=
Subject key identifier: 9B:8B:51:9C:D2:DB:37:1E:89:7B:A7:7F:B7:12:4E:51:A6:D7:76:3B
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 060009A69FEB967FC3469012F696271FFEC3ACBE
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51722.roa
Signing time: Fri 05 Jun 2026 08:36:11 +0000
ROA not before: Fri 05 Jun 2026 08:31:11 +0000
ROA not after: Fri 04 Jun 2027 08:36:11 +0000
asID: 51722
IP address blocks: 31.40.204.0/24 maxlen: 24
92.249.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:00:09:a6:9f:eb:96:7f:c3:46:90:12:f6:96:27:1f:fe:c3:ac:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 5 08:31:11 2026 GMT
Not After : Jun 4 08:36:11 2027 GMT
Subject: CN=9B8B519CD2DB371E897BA77FB7124E51A6D7763B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:87:fd:a9:10:3e:4e:f7:af:55:16:66:eb:
b7:43:e1:a9:13:2b:c8:d7:d5:51:58:37:bb:13:31:
ee:83:8c:9e:74:5c:12:32:5e:53:6d:8e:8b:ec:af:
5f:40:51:79:96:5c:54:68:89:dc:21:34:6b:67:9e:
d1:3d:27:90:15:35:16:2f:28:bc:d4:f5:3a:fc:d3:
ad:38:48:d5:9a:0f:12:fb:54:0b:87:fa:9b:0d:20:
0d:7c:7a:bb:6e:b5:c2:0e:89:bc:10:bc:c8:1f:25:
12:a2:f4:ae:9e:ea:ea:08:26:18:68:fc:1a:7d:79:
e5:68:3e:70:f5:6a:1c:3c:23:da:b2:78:77:53:4a:
0f:44:4a:93:44:2d:73:11:0a:c8:e9:11:d7:d9:b3:
00:70:0c:a6:d5:26:f5:e6:bf:cb:e9:0b:1d:5c:a5:
16:f8:89:99:22:f9:67:c8:c1:bf:ef:35:91:7b:b1:
de:5f:81:2f:f0:eb:ee:a2:49:f3:7a:4d:70:23:51:
d6:ed:36:42:6a:52:47:70:92:f4:92:32:2e:35:0c:
85:ee:9e:71:a7:ea:a0:0f:ed:cd:06:3c:37:f2:f8:
06:d7:16:5f:1b:c1:48:de:94:49:62:7c:bc:0d:35:
7f:65:97:8c:a3:7f:48:a3:b1:f7:6e:7b:29:27:a7:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:51:9C:D2:DB:37:1E:89:7B:A7:7F:B7:12:4E:51:A6:D7:76:3B
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51722.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.204.0/24
92.249.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:84:38:ae:f8:cc:5d:d5:bc:11:60:d1:30:85:e3:70:ae:a7:
8f:2a:2e:12:e5:4f:f8:3c:bb:02:fb:87:76:42:17:50:8c:66:
7f:6a:5b:89:df:f8:94:6d:bc:10:01:dc:5e:b2:87:43:2a:46:
3d:c1:9b:4c:af:4d:21:a5:f6:9a:b6:43:d6:3d:a4:4e:65:f3:
bd:37:da:ca:a8:fa:6a:45:ce:58:21:da:63:a6:b4:f1:e0:ce:
56:91:8a:31:ef:46:d9:18:53:81:82:1b:d5:ce:5a:b4:2c:2c:
a3:c4:3c:03:42:3f:42:f8:99:84:5f:8a:0c:fc:83:8c:94:9e:
de:4d:9c:ab:8b:1a:9c:34:fb:42:d0:d0:76:e7:ae:8e:a1:e4:
85:b5:3f:81:a6:3d:ef:cd:61:5d:b0:db:d4:5a:44:36:11:92:
04:f5:b2:fe:43:70:2a:70:b3:03:2e:80:f9:3a:7a:42:0e:f1:
6b:0d:44:96:be:7c:64:18:a6:0c:90:30:fa:9c:7d:73:f8:31:
d4:f4:25:83:4b:98:40:4f:6a:e4:82:61:8a:e8:d0:4a:80:69:
ea:1f:64:32:0c:0e:80:94:0e:f2:11:9d:7f:4c:dd:97:b8:a2:
03:ce:9e:99:02:2a:1d:6c:12:ab:59:69:1d:60:61:9e:3c:b5:
12:72:d7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:45:53 2026 by rpki-client