Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS153810.roa
File: AS153810.roa (raw, json)
Hash identifier: CvPttvVDQ5HRlakhAEyO3A5R72xAc41IVhwUeCVDNz4=
Subject key identifier: 37:78:4F:68:A2:86:39:62:37:CB:F3:E3:A8:60:B2:3F:CC:DD:EF:1C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 16DCC16F592ABB75DB270AD5B1EA092CC04B745F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS153810.roa
Signing time: Wed 20 May 2026 06:58:24 +0000
ROA not before: Wed 20 May 2026 06:53:24 +0000
ROA not after: Wed 19 May 2027 06:58:24 +0000
asID: 153810
IP address blocks: 51.194.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:dc:c1:6f:59:2a:bb:75:db:27:0a:d5:b1:ea:09:2c:c0:4b:74:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 20 06:53:24 2026 GMT
Not After : May 19 06:58:24 2027 GMT
Subject: CN=37784F68A286396237CBF3E3A860B23FCCDDEF1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:7e:a5:e0:c8:71:b0:50:a5:60:3d:36:e1:
c0:66:b1:a4:f2:8b:b0:ef:39:9e:2e:a8:a4:bc:d3:
1c:c4:c9:77:ea:8f:23:bd:d4:0a:47:86:90:ce:ec:
2f:2b:f7:bf:4e:b8:10:c1:3c:e1:5e:cb:b9:e4:f2:
65:2c:e6:2b:fe:df:8f:ed:c9:49:cf:88:24:96:2c:
11:b0:bd:34:f8:55:05:60:97:77:3f:ed:a7:d0:db:
36:f4:32:91:79:7a:b9:2e:b2:45:80:35:8d:23:99:
79:aa:bb:51:89:53:45:77:6b:3f:a9:50:5f:2f:7e:
a9:13:83:75:0f:63:8b:f2:9a:d0:25:b6:c7:2d:77:
68:d0:cd:90:46:af:33:17:ac:15:7e:bd:a4:e7:d6:
3d:cd:00:f2:04:ee:9f:da:e1:3c:96:f7:33:40:07:
1d:81:52:f1:ec:8d:91:d4:2f:5c:d6:96:27:2d:23:
99:37:ee:91:93:d3:14:34:45:b7:50:c4:eb:eb:21:
b7:cc:85:17:6e:43:b6:5d:32:e8:fa:12:ee:fc:c3:
c4:bb:c8:80:b5:ed:ff:5a:c6:7a:6f:54:cc:f0:b7:
06:13:60:7f:2c:00:12:8a:b1:17:a8:54:b6:d1:96:
3b:c6:00:d0:92:71:dd:a8:a7:16:84:71:16:d3:04:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:78:4F:68:A2:86:39:62:37:CB:F3:E3:A8:60:B2:3F:CC:DD:EF:1C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS153810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d9:96:d0:84:f4:5d:3c:0a:75:5f:45:b1:45:a4:d6:96:d0:
2b:45:16:0f:07:16:e4:b7:ae:13:4f:c0:c9:1d:e0:38:f6:51:
06:71:8d:e0:c7:fc:41:a8:8e:61:ed:a6:92:17:fe:b1:04:4b:
13:36:41:94:94:f9:1a:8d:3e:80:5f:e2:14:a8:6e:93:2d:bf:
f2:74:4f:79:bb:94:39:28:68:d6:80:50:de:0d:cf:f5:01:f1:
3f:cc:4e:6c:a6:28:45:b3:26:62:ac:b9:da:46:ce:aa:94:a8:
a3:08:25:7a:79:a3:3c:c4:cd:cb:3a:59:49:7e:93:63:22:4e:
a1:70:d8:6b:88:2d:91:15:d4:52:34:6e:64:a1:c7:f4:ae:99:
b6:ef:52:0b:df:10:65:91:61:ec:7c:2e:49:e4:75:9c:32:15:
ad:97:f4:c8:9f:c4:56:3b:7b:0e:c7:ed:de:81:6b:10:e0:bc:
a9:4c:e8:80:ca:d0:19:f4:e5:df:ea:1d:d8:b0:71:c8:ba:13:
7e:64:f7:5d:64:92:22:ce:02:bb:46:c6:e3:bf:ff:19:53:20:
8a:a7:73:62:f5:a6:9c:fe:9e:c6:54:fb:22:c6:ba:99:d6:ee:
77:9e:e1:e6:2a:10:0f:1e:63:70:a9:e9:2e:24:24:a6:52:57:
06:76:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:06 2026 by rpki-client