Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS148996.roa
File: AS148996.roa (raw, json)
Hash identifier: qugAcc5P/Z+VdVUw9TQjmzFWBTY8gR8Hn1MV7+bs7sY=
Subject key identifier: EB:36:17:32:4B:CC:2B:48:BF:03:20:E1:05:46:C2:37:1B:C6:4F:D7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 251458F69E65EF68549FC99EBA07B5E8C739031C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS148996.roa
Signing time: Wed 02 Sep 2026 07:40:05 +0000
ROA not before: Wed 02 Sep 2026 07:35:05 +0000
ROA not after: Wed 01 Sep 2027 07:40:05 +0000
asID: 148996
IP address blocks: 51.194.116.0/24 maxlen: 24
51.194.235.0/24 maxlen: 24
51.194.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:14:58:f6:9e:65:ef:68:54:9f:c9:9e:ba:07:b5:e8:c7:39:03:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 2 07:35:05 2026 GMT
Not After : Sep 1 07:40:05 2027 GMT
Subject: CN=EB3617324BCC2B48BF0320E10546C2371BC64FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:14:50:6e:3f:a9:a2:04:a2:46:86:89:d6:
10:6c:2d:34:ac:82:b6:e7:4d:a8:90:d1:19:5c:c4:
eb:a3:4f:b9:ea:d5:0f:40:65:84:3a:9f:a1:55:4b:
16:39:4b:7e:42:fd:3a:19:30:d0:09:c5:4f:54:bb:
95:a3:25:f2:1c:c2:2b:b3:d7:4b:3d:ce:91:41:91:
30:95:cf:ba:4b:b2:e2:b1:fb:82:20:2b:28:cf:98:
bd:f1:2a:c1:ea:b0:cf:4f:b8:3c:58:e5:20:f0:c2:
80:6b:08:ee:39:3c:7d:a2:c9:94:d2:b5:01:00:d8:
81:44:b6:b0:dd:ad:03:a2:e3:a8:e1:5f:a8:ac:18:
e8:36:54:3f:a6:06:00:c9:79:84:01:de:23:db:80:
cc:73:77:89:04:2d:98:89:02:f4:25:00:1c:36:9f:
e7:12:fb:da:2f:74:a6:63:86:f7:c9:f0:f6:e8:02:
53:60:80:bf:17:5e:54:52:00:74:93:f9:9a:f5:cf:
b2:10:45:3f:44:ff:22:38:f2:a5:3c:63:93:16:ba:
10:ce:ec:8f:13:fd:21:a5:71:2f:9c:01:26:3c:50:
8e:98:8f:fe:31:d7:0e:51:d0:7b:fc:01:cd:ff:b7:
47:4f:96:8e:13:19:85:a0:5f:4f:38:b8:1a:1c:fb:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:17:32:4B:CC:2B:48:BF:03:20:E1:05:46:C2:37:1B:C6:4F:D7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS148996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.116.0/24
51.194.235.0/24
51.194.255.0/24
Signature Algorithm: sha256WithRSAEncryption
79:46:6c:2d:00:d3:88:12:62:0c:21:70:90:f8:76:cc:91:87:
67:9c:55:4c:7f:db:1c:b6:93:f8:c2:c7:d3:d3:05:d3:84:b8:
d2:51:b1:11:ed:5a:39:ba:e0:c5:24:4a:f2:e6:63:b9:88:2b:
6b:11:1e:30:f6:b3:1f:ff:09:64:30:ed:5c:ae:cc:65:0f:11:
47:38:f3:16:04:4f:35:b5:44:8d:e5:36:74:a5:64:1a:99:7d:
f2:e5:48:80:97:4b:91:e3:75:84:76:c3:2f:20:06:70:90:76:
0f:76:5f:26:7c:51:09:e6:ea:0c:f6:9d:a0:12:81:e8:29:f1:
ba:20:f4:ff:18:19:14:0a:af:fa:81:28:47:9e:22:c2:9a:f5:
9d:21:18:ab:35:40:3a:6e:21:4b:90:9b:80:7d:52:ae:c5:c2:
0b:5a:51:d7:33:8f:9c:43:fd:58:8d:8d:9c:03:43:ab:52:c0:
c3:80:75:45:e1:83:6e:1f:b8:35:bb:7a:bb:a2:f7:8b:4d:2a:
c5:e9:7e:b3:54:35:e4:a2:4d:3b:42:52:8f:9c:0e:7f:c8:cf:
74:73:d9:95:c2:d1:f7:fa:8c:75:1c:e8:1c:85:21:41:b6:df:
6d:1e:9c:ad:7a:dc:a5:55:b5:56:75:28:c3:26:9f:a3:75:79:
a2:2e:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:44 2026 by rpki-client