Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51722.roa
File: AS51722.roa (raw, json)
Hash identifier: t104QzSlojp8FCPgZsyde5seitDfAaMDd9dJsaWReoI=
Subject key identifier: F4:83:B8:6E:98:2E:59:B0:81:C3:70:1F:B1:CD:F3:0A:C4:21:D1:9B
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 255A13AB3F6262064FCC81551FEE1EBCE187E7DF
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51722.roa
Signing time: Sat 27 Jun 2026 07:20:41 +0000
ROA not before: Sat 27 Jun 2026 07:15:41 +0000
ROA not after: Sat 26 Jun 2027 07:20:41 +0000
asID: 51722
IP address blocks: 31.40.196.0/24 maxlen: 24
31.40.204.0/24 maxlen: 24
92.249.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5a:13:ab:3f:62:62:06:4f:cc:81:55:1f:ee:1e:bc:e1:87:e7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 27 07:15:41 2026 GMT
Not After : Jun 26 07:20:41 2027 GMT
Subject: CN=F483B86E982E59B081C3701FB1CDF30AC421D19B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:3c:3a:49:3c:88:4d:6a:92:d5:16:00:bc:
14:54:34:49:06:9b:1b:ef:7c:16:97:b6:d5:52:1d:
bb:85:32:6d:c5:ac:cc:7b:4e:d0:58:d8:36:80:cc:
a9:b0:18:89:c8:58:8b:7a:87:cc:c6:89:2d:89:d2:
f2:bf:96:82:8e:11:c5:27:27:13:5c:cf:5a:c5:80:
7e:7c:de:7e:90:88:c6:43:4a:55:d1:18:e4:a8:ef:
a5:fc:36:4b:df:ce:22:a4:e7:c0:b4:23:84:31:d7:
46:e7:33:20:01:7c:8a:91:0f:74:06:d3:c8:82:0d:
12:30:80:0a:e7:b7:f3:e8:35:95:1f:62:da:f6:30:
a1:70:8b:bf:de:03:ca:5d:8b:30:3c:86:8c:58:21:
c5:a4:c9:b3:22:86:92:18:01:c3:2c:c9:ed:4c:24:
0c:60:4f:2a:5a:32:fd:51:6c:05:03:49:89:f4:bd:
b7:8f:58:bc:fa:db:c9:69:2c:0b:37:46:6a:18:b9:
98:c6:67:1a:a7:88:cf:5a:91:ac:9e:45:41:a7:d5:
96:47:1e:b1:bf:ad:e3:df:de:8d:cb:20:c5:ee:de:
b6:04:70:ec:0d:23:37:d8:69:91:31:95:24:fe:a0:
70:6d:f4:35:f6:da:59:4e:79:e6:d5:c2:25:c4:fe:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:83:B8:6E:98:2E:59:B0:81:C3:70:1F:B1:CD:F3:0A:C4:21:D1:9B
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51722.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/24
31.40.204.0/24
92.249.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:92:5d:5e:84:70:bd:7e:99:b2:b6:54:48:b1:c4:96:33:19:
17:47:aa:49:ba:3f:6a:2f:a9:10:c3:15:f4:bb:f7:94:54:4c:
64:ac:e0:44:12:e1:2a:65:e4:38:b2:55:08:a3:24:34:eb:1e:
94:b5:a2:e3:5e:a7:8b:89:eb:9b:90:42:e5:2e:4f:e5:52:3b:
a8:1c:43:f7:35:cc:bf:68:3e:4f:19:92:31:5f:b3:f8:dd:6b:
bb:48:d1:4b:4c:55:53:5c:c3:d2:30:07:a8:50:01:49:4d:55:
d6:de:b2:41:1b:99:52:fb:2d:a4:cd:53:9e:ab:40:8c:ec:2f:
f7:2d:af:32:a8:de:92:3f:08:b8:5f:96:ab:75:05:f0:33:50:
58:b5:40:22:6e:2f:6e:dc:82:ef:e7:aa:e0:95:42:e0:2a:4e:
08:93:58:a1:a6:ae:61:53:ad:8b:02:f4:22:19:ce:04:b5:21:
04:3d:6a:f5:a4:c2:1f:5a:77:47:e1:25:01:7a:6f:30:20:38:
fa:2f:7d:49:65:a3:02:75:20:a4:a3:6a:29:33:4b:c1:18:aa:
65:33:fe:b0:3c:63:18:79:03:59:05:c8:1d:02:24:03:fb:a0:
1b:96:5f:9f:a5:5d:09:f4:9c:46:ff:63:8b:16:3d:8d:f7:7e:
1b:50:7a:2b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUJVoTqz9iYgZPzIFVH+4evOGH598wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA2MjcwNzE1NDFaFw0yNzA2MjYwNzIwNDFaMDMxMTAvBgNV
BAMTKEY0ODNCODZFOTgyRTU5QjA4MUMzNzAxRkIxQ0RGMzBBQzQyMUQxOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjTw6STyITWqS1RYAvBRUNEkG
mxvvfBaXttVSHbuFMm3FrMx7TtBY2DaAzKmwGInIWIt6h8zGiS2J0vK/loKOEcUn
JxNcz1rFgH583n6QiMZDSlXRGOSo76X8NkvfziKk58C0I4Qx10bnMyABfIqRD3QG
08iCDRIwgArnt/PoNZUfYtr2MKFwi7/eA8pdizA8hoxYIcWkybMihpIYAcMsye1M
JAxgTypaMv1RbAUDSYn0vbePWLz628lpLAs3RmoYuZjGZxqniM9akayeRUGn1ZZH
HrG/rePf3o3LIMXu3rYEcOwNIzfYaZExlST+oHBt9DX22llOeebVwiXE/k2fAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQU9IO4bpguWbCBw3Afsc3zCsQh0ZswHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNTE3MjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAAfKMQD
BAAfKMwDBABc+T4wDQYJKoZIhvcNAQELBQADggEBAE2SXV6EcL1+mbK2VEixxJYz
GRdHqkm6P2ovqRDDFfS795RUTGSs4EQS4Spl5DiyVQijJDTrHpS1ouNep4uJ65uQ
QuUuT+VSO6gcQ/c1zL9oPk8ZkjFfs/jda7tI0UtMVVNcw9IwB6hQAUlNVdbeskEb
mVL7LaTNU56rQIzsL/ctrzKo3pI/CLhflqt1BfAzUFi1QCJuL27cgu/nquCVQuAq
TgiTWKGmrmFTrYsC9CIZzgS1IQQ9avWkwh9ad0fhJQF6bzAgOPovfUllowJ1IKSj
aikzS8EYqmUz/rA8Yxh5A1kFyB0CJAP7oBuWX5+lXQn0nEb/Y4sWPY33fhtQeis=
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:13 2026 by rpki-client