Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51847.roa
File: AS51847.roa (raw, json)
Hash identifier: VY9WHS89fXb6ad2DJnmad+lfTSSL8FJ3wJv0IXN7sEU=
Subject key identifier: E4:3C:A5:23:6A:CF:DB:62:CC:FD:86:6F:0F:8A:0D:5D:70:DF:98:F7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 58DD8C7F659BCE68A1F3818C744B65A73B5FA228
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51847.roa
Signing time: Tue 07 Jul 2026 13:39:31 +0000
ROA not before: Tue 07 Jul 2026 13:34:31 +0000
ROA not after: Tue 06 Jul 2027 13:39:31 +0000
asID: 51847
IP address blocks: 82.21.206.0/24 maxlen: 24
82.22.78.0/24 maxlen: 24
82.41.138.0/23 maxlen: 24
2a13:9500:f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:dd:8c:7f:65:9b:ce:68:a1:f3:81:8c:74:4b:65:a7:3b:5f:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 7 13:34:31 2026 GMT
Not After : Jul 6 13:39:31 2027 GMT
Subject: CN=E43CA5236ACFDB62CCFD866F0F8A0D5D70DF98F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:99:0a:19:25:78:4a:12:df:c0:6e:27:e9:
2c:ac:76:b3:ad:13:eb:cd:1a:ee:49:ed:77:1f:35:
6d:90:37:cd:61:df:e4:f1:77:d9:47:3b:4a:1f:33:
29:a3:a9:19:9a:bc:0c:8e:45:12:8a:3b:c3:ae:ce:
3a:ab:d6:1c:ad:c1:9a:cc:d5:45:8c:dc:f7:23:32:
d8:00:3e:cc:c7:9a:a4:51:0f:2b:a5:82:1a:79:b5:
2a:58:d8:5b:81:d2:8e:37:b5:c1:e7:7b:90:9a:7f:
3b:40:ed:60:0e:cd:8e:ea:91:c9:50:b3:67:52:d7:
cb:93:ff:3e:3f:07:ea:88:55:81:71:3b:9c:59:1c:
b9:db:fa:fc:5b:c3:8c:28:79:50:37:76:47:5f:3c:
0d:68:bc:93:93:b3:37:6f:57:2c:ba:86:ae:a3:fa:
aa:9a:e4:0d:e7:db:8a:c4:c0:b8:46:24:2a:03:56:
a7:64:93:9e:33:dd:1d:f4:bc:f7:e4:03:37:b1:1a:
b6:ff:fc:e0:10:5f:7a:6a:4a:0c:8e:2b:0c:53:06:
a3:45:27:e0:96:92:97:9e:ec:1a:fd:69:e2:4a:e5:
81:25:cc:cf:15:8c:91:0b:c4:04:ed:ff:71:f0:d1:
f6:b6:e0:78:47:f0:b0:e9:2f:21:26:7c:de:de:f4:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:A5:23:6A:CF:DB:62:CC:FD:86:6F:0F:8A:0D:5D:70:DF:98:F7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.206.0/24
82.22.78.0/24
82.41.138.0/23
IPv6:
2a13:9500:f0::/48
Signature Algorithm: sha256WithRSAEncryption
37:c0:0d:1f:9d:29:8f:e2:6a:df:7c:ba:80:78:0c:51:bc:7c:
54:a2:6b:c6:39:a7:b2:7d:f6:29:3b:18:98:e9:13:9c:ed:a7:
fa:95:8d:27:ab:af:88:7a:5f:a3:30:ab:35:0d:1a:a7:45:54:
ef:c9:98:8e:03:bd:8d:f3:e2:3b:77:28:a9:17:60:3e:10:fd:
76:f7:da:a8:3b:fb:be:21:25:53:c7:2e:f4:6e:ad:88:83:cb:
0f:e6:74:f2:36:b5:ea:54:dd:33:6a:f1:37:ff:af:01:88:81:
b0:a6:12:4c:8b:50:57:2e:af:0a:04:c4:3e:f7:f8:cb:1f:45:
19:96:c8:17:5a:ff:4a:b9:88:4c:40:26:e3:e0:da:54:4b:6f:
55:61:8a:55:14:63:cb:66:b0:a9:35:74:b2:25:11:4c:70:82:
2f:b0:49:1e:70:77:1e:e8:00:6c:cf:6c:ed:71:5f:60:98:32:
d2:ea:84:15:a6:0e:7b:fd:88:8a:b3:15:b6:94:0b:c8:db:3c:
32:c4:07:96:a5:f1:04:5a:cf:67:15:40:b8:a1:b1:08:d7:66:
72:d1:78:40:78:7a:ce:05:0d:de:1b:84:c1:1f:e6:14:a5:d3:
59:98:6b:aa:6b:a0:83:35:a2:c8:02:07:84:dc:68:b7:43:cf:
16:9d:7e:89
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUWN2Mf2Wbzmih84GMdEtlpztfoigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MDcxMzM0MzFaFw0yNzA3MDYxMzM5MzFaMDMxMTAvBgNV
BAMTKEU0M0NBNTIzNkFDRkRCNjJDQ0ZEODY2RjBGOEEwRDVENzBERjk4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCexpkKGSV4ShLfwG4n6SysdrOt
E+vNGu5J7XcfNW2QN81h3+Txd9lHO0ofMymjqRmavAyORRKKO8Ouzjqr1hytwZrM
1UWM3PcjMtgAPszHmqRRDyulghp5tSpY2FuB0o43tcHne5CafztA7WAOzY7qkclQ
s2dS18uT/z4/B+qIVYFxO5xZHLnb+vxbw4woeVA3dkdfPA1ovJOTszdvVyy6hq6j
+qqa5A3n24rEwLhGJCoDVqdkk54z3R30vPfkAzexGrb//OAQX3pqSgyOKwxTBqNF
J+CWkpee7Br9aeJK5YElzM8VjJELxATt/3Hw0fa24HhH8LDpLyEmfN7e9GxvAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQU5DylI2rP22LM/YZvD4oNXXDfmPcwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTE4NDcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBIDBABSFc4D
BABSFk4DBAFSKYowDwQCAAIwCQMHACoTlQAA8DANBgkqhkiG9w0BAQsFAAOCAQEA
N8ANH50pj+Jq33y6gHgMUbx8VKJrxjmnsn32KTsYmOkTnO2n+pWNJ6uviHpfozCr
NQ0ap0VU78mYjgO9jfPiO3coqRdgPhD9dvfaqDv7viElU8cu9G6tiIPLD+Z08ja1
6lTdM2rxN/+vAYiBsKYSTItQVy6vCgTEPvf4yx9FGZbIF1r/SrmITEAm4+DaVEtv
VWGKVRRjy2awqTV0siURTHCCL7BJHnB3HugAbM9s7XFfYJgy0uqEFaYOe/2IirMV
tpQLyNs8MsQHlqXxBFrPZxVAuKGxCNdmctF4QHh6zgUN3huEwR/mFKXTWZhrqmug
gzWiyAIHhNxot0PPFp1+iQ==
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:09:15 2026 by rpki-client