Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51847.roa
File: AS51847.roa (raw, json)
Hash identifier: dHzJxfiOyPxvMixIx+yfxmbD+0fWa+kROp4/ICEtA4Y=
Subject key identifier: 25:8C:B9:B7:70:D0:7C:81:14:6F:F2:78:DE:C2:CA:70:13:E8:AE:1D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 459F3BA90B12C4E5D33C25F3E5EBEA29C143962D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51847.roa
Signing time: Sun 30 Aug 2026 00:11:44 +0000
ROA not before: Sun 30 Aug 2026 00:06:44 +0000
ROA not after: Sun 29 Aug 2027 00:11:44 +0000
asID: 51847
IP address blocks: 82.21.206.0/24 maxlen: 24
82.22.78.0/24 maxlen: 24
2a13:9500:f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9f:3b:a9:0b:12:c4:e5:d3:3c:25:f3:e5:eb:ea:29:c1:43:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 30 00:06:44 2026 GMT
Not After : Aug 29 00:11:44 2027 GMT
Subject: CN=258CB9B770D07C81146FF278DEC2CA7013E8AE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:be:66:6c:48:ef:81:b1:d3:44:28:4c:3e:
87:a9:95:17:84:63:0e:7e:4b:31:2c:d0:32:75:47:
18:2d:53:40:e8:14:04:82:68:11:a2:4a:1f:46:f0:
a6:74:cc:f0:64:b0:a3:da:6c:b7:77:66:46:44:18:
4c:94:cc:ed:06:fd:c4:4a:63:47:9d:19:cb:67:10:
8f:c4:15:1c:62:ac:e2:97:61:55:d4:62:c8:1d:3c:
63:3d:a1:41:30:4b:87:b7:8d:0a:a4:63:3a:b1:ff:
93:69:b5:b5:ae:28:1c:a0:c0:fc:fa:06:7d:0f:bb:
bd:89:df:79:89:06:9c:2b:5f:22:58:73:d2:0e:6b:
6e:3e:0a:78:da:e1:9d:f6:0b:49:f0:46:07:15:8d:
dd:dd:a1:f3:01:46:ab:be:0a:79:3a:73:a0:45:e3:
2a:5e:a4:1b:c0:36:c1:a0:b3:2b:be:c9:1b:87:25:
75:b3:0b:b6:74:30:de:ca:5d:e7:28:00:35:c6:8b:
6f:f5:c1:37:97:57:4d:e1:97:dd:2f:ea:a2:b9:ad:
27:0b:f5:c2:0e:a1:aa:ec:de:e0:9b:90:cf:29:e8:
bd:64:82:46:19:29:9a:df:94:27:97:db:c7:a9:bb:
3f:32:88:15:99:b4:4e:9f:e2:3d:f2:43:d4:af:70:
72:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8C:B9:B7:70:D0:7C:81:14:6F:F2:78:DE:C2:CA:70:13:E8:AE:1D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.206.0/24
82.22.78.0/24
IPv6:
2a13:9500:f0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:b8:07:5f:45:78:e8:0b:cf:76:59:b8:e8:26:eb:20:df:ba:
90:e6:65:4f:ab:77:cd:b7:07:bd:b3:83:96:6a:3b:99:3b:7c:
ad:d2:75:02:c5:46:24:f4:3e:f5:f1:85:8d:51:ef:b1:8f:4f:
15:f8:9c:9e:0f:e9:63:b9:4d:ad:e1:5d:5c:3f:9c:44:e2:67:
0d:95:36:0a:24:82:44:f1:ac:a3:85:81:ee:da:aa:4b:d3:1b:
28:28:1c:50:e6:3c:85:ae:fe:cb:25:85:80:78:79:2f:be:68:
79:48:e0:8b:88:93:00:51:56:32:74:28:a1:d1:c7:4e:5a:b4:
f8:da:d7:fa:93:54:ee:10:24:0f:71:81:93:fc:47:32:48:e2:
74:35:c6:d4:0f:f3:da:f5:db:ec:b4:10:65:37:b0:db:64:0d:
ac:d8:38:50:fd:dd:39:ea:4f:99:b6:70:1e:1f:49:d6:2b:21:
30:54:6e:70:64:8d:86:c6:e3:2d:fe:5a:c5:4e:0d:2a:6e:44:
90:89:f1:bc:fa:5d:2f:99:1c:b9:af:c1:0d:6d:2b:de:04:ce:
00:69:80:08:23:f8:cc:89:06:61:72:ae:90:84:14:e1:96:94:
73:e5:72:35:bd:6d:13:3e:b1:c5:7e:7c:1f:eb:29:ce:97:84:
1c:c2:f9:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIURZ87qQsSxOXTPCXz5evqKcFDli0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MzAwMDA2NDRaFw0yNzA4MjkwMDExNDRaMDMxMTAvBgNV
BAMTKDI1OENCOUI3NzBEMDdDODExNDZGRjI3OERFQzJDQTcwMTNFOEFFMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQb5mbEjvgbHTRChMPoeplReE
Yw5+SzEs0DJ1RxgtU0DoFASCaBGiSh9G8KZ0zPBksKPabLd3ZkZEGEyUzO0G/cRK
Y0edGctnEI/EFRxirOKXYVXUYsgdPGM9oUEwS4e3jQqkYzqx/5NptbWuKBygwPz6
Bn0Pu72J33mJBpwrXyJYc9IOa24+Cnja4Z32C0nwRgcVjd3dofMBRqu+Cnk6c6BF
4ypepBvANsGgsyu+yRuHJXWzC7Z0MN7KXecoADXGi2/1wTeXV03hl90v6qK5rScL
9cIOoars3uCbkM8p6L1kgkYZKZrflCeX28epuz8yiBWZtE6f4j3yQ9SvcHL/AgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUJYy5t3DQfIEUb/J43sLKcBPorh0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTE4NDcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBABSFc4D
BABSFk4wDwQCAAIwCQMHACoTlQAA8DANBgkqhkiG9w0BAQsFAAOCAQEApbgHX0V4
6AvPdlm46CbrIN+6kOZlT6t3zbcHvbODlmo7mTt8rdJ1AsVGJPQ+9fGFjVHvsY9P
Fficng/pY7lNreFdXD+cROJnDZU2CiSCRPGso4WB7tqqS9MbKCgcUOY8ha7+yyWF
gHh5L75oeUjgi4iTAFFWMnQoodHHTlq0+NrX+pNU7hAkD3GBk/xHMkjidDXG1A/z
2vXb7LQQZTew22QNrNg4UP3dOepPmbZwHh9J1ishMFRucGSNhsbjLf5axU4NKm5E
kInxvPpdL5kcua/BDW0r3gTOAGmACCP4zIkGYXKukIQU4ZaUc+VyNb1tEz6xxX58
H+spzpeEHML5Yg==
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:18:58 2026 by rpki-client