Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197284.roa
File: AS197284.roa (raw, json)
Hash identifier: LlNt77WKIZFfEiGpjEPSgLSEqPKJFJ/97es+nNclvl8=
Subject key identifier: A1:3F:B7:6B:8B:83:FA:4A:EE:CD:0D:44:A6:0E:3D:45:1B:A0:CB:05
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 16739182EAD87CF48352E6F4C770DD668B4261C5
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197284.roa
Signing time: Thu 28 May 2026 11:31:23 +0000
ROA not before: Thu 28 May 2026 11:26:23 +0000
ROA not after: Thu 27 May 2027 11:31:23 +0000
asID: 197284
IP address blocks: 51.241.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:73:91:82:ea:d8:7c:f4:83:52:e6:f4:c7:70:dd:66:8b:42:61:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 28 11:26:23 2026 GMT
Not After : May 27 11:31:23 2027 GMT
Subject: CN=A13FB76B8B83FA4AEECD0D44A60E3D451BA0CB05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:14:ed:9d:7d:e4:c3:52:0a:83:4f:21:00:
43:d2:88:96:94:bc:69:95:7a:89:28:df:bc:8a:cc:
24:64:86:98:cb:fb:45:cb:9d:f2:f3:db:2d:1c:32:
4c:cc:93:00:d4:6b:01:45:4a:dd:e0:8e:db:10:17:
68:5b:77:ae:68:6d:68:07:9a:32:51:ee:6f:d5:a1:
5c:7e:46:ad:dd:c2:52:04:8c:4a:0a:25:d7:6c:ed:
1d:e8:0a:78:a7:55:17:20:a9:c0:d9:3f:fb:1e:18:
4d:e8:0e:58:98:21:26:87:a5:ab:3a:3b:47:de:99:
44:d1:33:79:b4:d8:e4:84:47:73:99:6c:ef:24:d9:
01:69:2a:84:a5:41:33:aa:6c:71:4b:9f:10:54:e5:
7a:03:81:fd:11:2f:ed:21:3d:67:30:4b:41:66:4c:
bc:6f:6e:76:8a:08:36:df:a9:9f:1a:99:37:48:7e:
e4:96:80:80:9d:51:a1:65:3b:75:43:90:47:99:54:
ac:70:70:1f:6e:a3:0e:45:b4:7b:4a:cb:f9:df:9a:
7c:b8:03:2f:5c:f8:aa:79:c9:8d:93:c9:8f:57:3e:
04:b0:a0:e7:84:d2:2a:7a:04:d7:70:78:f1:c9:5d:
ca:a9:db:d0:4c:59:5f:05:f3:25:1f:9a:ba:e7:f6:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3F:B7:6B:8B:83:FA:4A:EE:CD:0D:44:A6:0E:3D:45:1B:A0:CB:05
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197284.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
16:32:7f:5d:f3:15:ed:d1:bb:37:3d:7a:bd:97:4f:c9:29:e4:
d0:6c:80:57:fb:f7:c4:b6:36:3a:04:70:ad:da:78:0c:ca:5c:
45:d8:15:4b:ac:81:64:44:62:52:68:31:ec:e7:e1:74:99:fe:
09:8d:cf:7f:3e:02:a0:06:f9:85:80:2b:5e:bf:5c:2f:7c:cf:
e8:17:3f:f1:34:29:12:7b:ca:73:63:35:18:65:92:84:87:46:
d7:31:cb:c7:4d:00:5f:08:a8:06:08:74:07:88:ec:6d:bb:70:
71:a9:52:43:c1:8a:42:01:9c:15:f0:ee:34:50:40:f6:58:ae:
b0:1e:8e:56:42:aa:81:78:a9:39:a0:e0:45:9a:e4:51:40:75:
57:be:07:53:ea:23:96:20:df:32:01:29:0f:d5:36:79:d1:ee:
ed:cd:13:8e:e6:3a:02:fa:cb:b1:b9:3d:a3:ac:bb:1a:53:5c:
25:38:4e:17:cc:97:2a:2a:15:e4:a0:a8:59:10:d8:d8:0b:59:
c2:a6:fe:60:61:b5:9f:c1:a4:a8:71:7b:fd:a6:c8:e8:04:da:
6a:6e:d3:c5:ba:eb:5f:26:30:ed:3e:31:dc:3d:0f:b1:0b:c0:
bc:b9:c6:f4:9e:44:49:b8:ab:fd:a4:c2:ec:f9:71:cc:c0:d5:
4f:e4:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:54 2026 by rpki-client