Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: oFWt+DqGjRPuluBf9jN8e0cmelQHs/X0Xc3eC3BEb6k=
Subject key identifier: 64:55:29:3D:D7:71:D1:AD:BC:01:B7:B3:97:C6:04:81:6F:E4:87:8B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 295079CEE8B016AEAD5F2C5B9C8DE853AB8F3A52
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS154132.roa
Signing time: Sat 03 Oct 2026 15:53:35 +0000
ROA not before: Sat 03 Oct 2026 15:48:35 +0000
ROA not after: Sat 02 Oct 2027 15:53:35 +0000
asID: 154132
IP address blocks: 51.194.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:50:79:ce:e8:b0:16:ae:ad:5f:2c:5b:9c:8d:e8:53:ab:8f:3a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 3 15:48:35 2026 GMT
Not After : Oct 2 15:53:35 2027 GMT
Subject: CN=6455293DD771D1ADBC01B7B397C604816FE4878B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:af:5a:b8:85:64:97:ec:2d:56:21:ef:d2:
8d:ad:3e:e6:af:0a:37:70:7d:49:d1:cb:8a:74:ac:
2c:ae:c9:23:09:0f:e7:45:0a:9f:f1:86:48:5f:71:
8c:bb:55:0d:6c:cc:50:5b:3b:9b:ac:a3:49:02:34:
a3:44:02:81:37:51:ca:4b:76:aa:f0:44:52:bf:b4:
14:87:13:ea:d8:a4:6b:9a:df:ef:df:a9:d4:b0:e8:
80:28:60:47:55:98:99:49:c8:a5:a5:58:60:17:4b:
64:0c:c2:7c:a0:02:05:20:8b:0c:da:c0:f1:4e:41:
eb:19:41:0d:f6:c5:78:23:4d:7e:65:ee:a7:51:0b:
22:55:e8:31:17:fe:be:db:6d:ed:ff:b2:ce:be:84:
d8:5e:37:26:b5:5b:52:36:62:f3:93:1d:64:08:83:
43:14:3f:eb:39:dc:ae:d4:26:ff:31:a8:6a:6c:40:
86:91:6a:62:b5:15:a5:b3:9b:6e:09:1e:e0:d5:58:
bd:92:e3:98:bc:fa:fc:c6:8e:64:07:35:65:5b:de:
ec:96:3c:07:6c:64:01:44:69:8c:2d:32:62:62:30:
7e:61:30:62:55:97:81:f0:8b:14:ea:ee:71:b6:a1:
4c:30:6e:13:4e:e1:6a:12:8e:80:2a:31:03:a8:19:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:29:3D:D7:71:D1:AD:BC:01:B7:B3:97:C6:04:81:6F:E4:87:8B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.121.0/24
Signature Algorithm: sha256WithRSAEncryption
23:11:a8:9e:4c:9f:03:74:38:73:b9:47:2b:ce:d0:ca:eb:f9:
8a:e7:37:75:d2:f5:9a:db:ea:eb:b5:3c:74:4b:a8:cb:b0:b0:
4c:32:ec:66:37:6a:5c:72:70:6e:50:a1:dc:cc:6a:74:c3:d4:
6d:2d:c5:35:d9:1a:12:3e:15:95:ab:5e:b3:2f:4b:99:4b:4e:
4d:81:67:60:f8:e7:44:ab:c8:be:58:a7:88:38:51:be:23:40:
c5:9b:91:6e:07:92:d8:f2:57:a3:bb:e0:f3:4f:0b:f4:80:7b:
5f:d6:3b:23:ba:d2:39:75:3c:51:33:cf:54:a2:1f:d4:14:1a:
fe:bb:52:ff:cf:2b:67:89:c2:56:18:f8:1a:ee:ef:8d:ab:2e:
6c:9c:e8:89:4c:26:3e:ad:ae:09:13:5d:53:21:43:96:0a:5b:
e0:26:e2:d0:8f:b4:86:c5:e5:a1:c9:bd:ad:70:a2:99:f0:2f:
87:f4:ff:f0:58:08:78:8b:5d:f9:a9:76:82:29:cc:66:1e:81:
c1:59:c2:28:ff:72:31:12:5f:2e:5c:37:98:49:d8:c2:c1:74:
42:9f:7b:8f:88:51:1f:a2:ad:63:51:ea:69:14:c5:37:3a:5c:
f8:b9:8e:bf:86:b9:47:2f:ad:56:5d:27:62:1f:60:96:d4:89:
fc:43:69:38
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKVB5zuiwFq6tXyxbnI3oU6uPOlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMDMxNTQ4MzVaFw0yNzEwMDIxNTUzMzVaMDMxMTAvBgNV
BAMTKDY0NTUyOTNERDc3MUQxQURCQzAxQjdCMzk3QzYwNDgxNkZFNDg3OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZOa9auIVkl+wtViHv0o2tPuav
CjdwfUnRy4p0rCyuySMJD+dFCp/xhkhfcYy7VQ1szFBbO5uso0kCNKNEAoE3UcpL
dqrwRFK/tBSHE+rYpGua3+/fqdSw6IAoYEdVmJlJyKWlWGAXS2QMwnygAgUgiwza
wPFOQesZQQ32xXgjTX5l7qdRCyJV6DEX/r7bbe3/ss6+hNheNya1W1I2YvOTHWQI
g0MUP+s53K7UJv8xqGpsQIaRamK1FaWzm24JHuDVWL2S45i8+vzGjmQHNWVb3uyW
PAdsZAFEaYwtMmJiMH5hMGJVl4HwixTq7nG2oUwwbhNO4WoSjoAqMQOoGSMdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUZFUpPddx0a28Abezl8YEgW/kh4swHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTU0MTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAM8J5
MA0GCSqGSIb3DQEBCwUAA4IBAQAjEaieTJ8DdDhzuUcrztDK6/mK5zd10vWa2+rr
tTx0S6jLsLBMMuxmN2pccnBuUKHczGp0w9RtLcU12RoSPhWVq16zL0uZS05NgWdg
+OdEq8i+WKeIOFG+I0DFm5FuB5LY8leju+DzTwv0gHtf1jsjutI5dTxRM89Uoh/U
FBr+u1L/zytnicJWGPga7u+Nqy5snOiJTCY+ra4JE11TIUOWClvgJuLQj7SGxeWh
yb2tcKKZ8C+H9P/wWAh4i135qXaCKcxmHoHBWcIo/3IxEl8uXDeYSdjCwXRCn3uP
iFEfoq1jUeppFMU3Olz4uY6/hrlHL61WXSdiH2CW1In8Q2k4
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:51:16 2026 by rpki-client