Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS153034.roa
File: AS153034.roa (raw, json)
Hash identifier: 6cwsQ7OQ/gYyI5CbLE0ZhMa2KCCGkX/UjJt3IGflSR8=
Subject key identifier: AB:D3:72:5E:EB:D9:9D:63:F9:9D:03:6A:A5:33:9D:EF:A2:E4:40:A5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 66FEFF1E0238803545461760B28F1EABADE39DFF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS153034.roa
Signing time: Wed 24 Jun 2026 08:03:47 +0000
ROA not before: Wed 24 Jun 2026 07:58:47 +0000
ROA not after: Wed 23 Jun 2027 08:03:47 +0000
asID: 153034
IP address blocks: 51.194.210.0/24 maxlen: 24
51.241.143.0/24 maxlen: 24
188.220.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:fe:ff:1e:02:38:80:35:45:46:17:60:b2:8f:1e:ab:ad:e3:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 24 07:58:47 2026 GMT
Not After : Jun 23 08:03:47 2027 GMT
Subject: CN=ABD3725EEBD99D63F99D036AA5339DEFA2E440A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:fa:38:e0:b7:ac:82:0f:9c:ce:40:36:ef:
95:d6:c2:28:b9:7e:e0:2e:1e:11:26:c9:9e:10:30:
08:50:e5:89:9f:b4:c3:9c:08:a4:bd:c2:65:00:41:
30:b9:7c:c4:af:6e:eb:e4:81:3e:11:3e:dd:e9:c9:
23:10:e8:8f:30:2f:a2:c5:bd:a2:b5:66:c3:b1:9d:
ed:42:85:75:db:31:33:8e:46:c6:69:85:dc:81:0c:
90:15:c9:53:47:e5:2e:23:fa:cb:5f:a5:6c:39:7f:
5f:47:e6:69:7c:a9:d2:81:b3:0f:00:5b:02:94:25:
d0:bf:6a:b5:be:50:53:60:88:9b:7d:42:70:2e:5f:
69:7b:5f:58:19:1f:88:63:21:35:1f:e3:05:6f:21:
f6:48:9a:43:a1:5d:17:18:a5:69:df:dc:77:8c:ad:
b4:fa:7a:c9:78:ff:6a:e6:9a:ba:0b:61:b4:f4:03:
d4:09:2c:c1:c6:3f:62:bb:c0:d2:c0:e3:9b:c4:78:
8b:43:29:b9:0b:a9:9d:1a:9f:fd:6d:36:a6:2b:f5:
62:37:2c:b0:e6:6e:02:64:ce:82:4e:ac:8e:d7:05:
bb:11:1b:67:d7:7e:da:45:a8:7f:9e:a4:fc:cb:90:
7c:81:4b:83:43:f5:0f:3f:44:d4:ec:8c:8c:03:17:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:72:5E:EB:D9:9D:63:F9:9D:03:6A:A5:33:9D:EF:A2:E4:40:A5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS153034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.210.0/24
51.241.143.0/24
188.220.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:59:17:65:15:b8:2f:8b:a5:db:6b:1f:a3:b7:c7:2a:a5:a5:
93:c1:af:4a:a3:da:96:5b:35:82:79:e5:bf:28:04:ba:fb:4f:
c3:ed:b9:9c:ff:48:4b:11:88:34:58:ee:7a:89:e9:1e:1a:3f:
5f:d1:3c:99:3a:b4:d4:63:61:62:90:b6:0f:c3:75:5b:b7:79:
13:bf:84:8a:a4:29:e4:41:63:d8:ed:d8:ee:13:11:2b:29:29:
46:b0:5d:26:bf:99:06:7d:35:0a:39:8a:23:49:9a:b8:45:a5:
c4:56:e5:f4:6e:dc:91:0b:b7:d4:a0:7d:15:12:47:cd:ab:50:
e0:c5:b4:df:97:f7:1a:0a:6e:f7:9c:25:4c:0f:f4:14:eb:3a:
a4:c0:40:9c:cd:89:c6:fb:78:7c:0b:bf:d0:3a:56:47:b5:42:
f5:e6:7f:12:7b:5b:b7:66:aa:eb:f6:5a:52:76:8b:5c:fc:d2:
c4:fd:70:41:bd:70:fc:6c:ef:ad:08:1b:39:bc:2c:02:0d:29:
56:51:b3:6e:cb:f2:66:d8:33:7f:d0:a5:ed:be:1a:4f:5f:9e:
09:b8:c7:46:f1:7d:7d:84:7c:92:76:51:38:c3:5f:53:fc:fa:
64:87:6c:75:a6:75:e8:49:62:de:b0:fd:8f:32:14:af:6e:13:
14:cd:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:34 2026 by rpki-client