Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198949.roa
File: AS198949.roa (raw, json)
Hash identifier: Z2Msa8XRT/mR6LIGYXayyI209G8pS0P59FZ/LZV4GX8=
Subject key identifier: 76:8D:B7:6D:57:20:08:5E:DA:40:41:25:27:F7:B1:15:CE:14:6C:E4
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6A40C9F48EFF83E29EAEE83E6BA660D7A63135A7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198949.roa
Signing time: Thu 04 Jun 2026 20:50:51 +0000
ROA not before: Thu 04 Jun 2026 20:45:51 +0000
ROA not after: Thu 03 Jun 2027 20:50:51 +0000
asID: 198949
IP address blocks: 51.194.212.0/23 maxlen: 24
51.194.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:40:c9:f4:8e:ff:83:e2:9e:ae:e8:3e:6b:a6:60:d7:a6:31:35:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 4 20:45:51 2026 GMT
Not After : Jun 3 20:50:51 2027 GMT
Subject: CN=768DB76D5720085EDA40412527F7B115CE146CE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:90:dd:30:3c:0a:b2:81:68:e4:4a:a1:b6:
6a:50:d1:17:68:74:f5:d2:59:88:50:01:f0:1f:34:
2e:02:d7:2b:ef:cd:24:00:16:95:29:74:a3:81:30:
e9:62:1f:45:07:7b:1a:c4:48:7d:9c:cc:05:19:86:
10:f6:c2:44:eb:89:47:c7:6c:6a:d9:09:63:c2:37:
49:6e:0e:8f:bf:5d:a7:6f:de:e4:2b:8f:2a:d3:88:
2d:f3:9a:59:ac:eb:5e:26:a6:44:09:5e:56:78:d1:
80:35:6a:c7:46:2a:cf:c6:ae:36:4b:55:02:35:7e:
2c:05:d7:9e:d9:84:de:7c:e9:8c:85:86:5a:10:fd:
44:b1:97:60:1d:59:75:c7:67:56:2b:9a:91:bd:b6:
a0:c6:e1:7d:e9:6d:a9:e5:a6:f5:99:06:14:ba:b9:
b3:2c:44:6c:d5:97:19:48:73:07:bb:6a:c5:0b:a9:
2b:c5:a7:de:59:d4:a5:28:cc:ec:23:f2:3c:11:1c:
e3:c6:2e:22:a0:f0:39:b2:7d:4b:9f:24:11:6f:eb:
4a:e8:05:d1:f7:4a:a0:58:96:85:b1:91:31:68:85:
99:fb:4f:99:07:fe:87:c6:48:a3:f3:c2:8c:cc:d4:
3e:4f:c7:5b:21:4b:cb:97:dd:11:9b:b0:4d:b6:3e:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8D:B7:6D:57:20:08:5E:DA:40:41:25:27:F7:B1:15:CE:14:6C:E4
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS198949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.212.0/23
51.194.228.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6a:db:55:22:ea:45:cf:e9:b5:ac:77:70:ce:08:34:6a:6c:
6f:b6:4e:b0:0c:99:a8:e2:86:16:2a:37:ac:f6:98:0c:45:dd:
33:c4:cd:16:07:67:32:8d:8f:9f:6c:09:8c:c9:17:d7:7a:7a:
25:df:4e:6f:b3:93:0d:30:76:b3:f0:27:0d:1d:65:b7:c4:3e:
72:31:55:22:f7:bc:4f:21:fc:32:e0:19:f4:22:ea:a1:24:aa:
b9:b7:6d:f0:86:d6:f7:93:a5:4e:c9:a1:26:7f:88:8e:37:a8:
14:4c:12:fa:58:bc:6b:19:22:5f:e6:5d:f3:ee:1e:e5:a3:69:
a5:0e:08:ec:dc:d1:41:37:00:7f:b5:48:3e:51:72:5c:bf:9d:
26:b4:a8:93:af:ca:3e:de:a6:9e:09:88:75:8d:b4:37:d8:d4:
19:1a:b1:2d:80:3b:cb:d7:48:b2:92:c5:b0:e8:ae:04:03:49:
18:96:f6:4e:c4:f7:93:57:ac:bd:9c:f6:47:6f:c1:cc:42:39:
57:68:d3:24:64:b4:32:96:3b:5b:aa:38:a3:fa:94:9c:e3:07:
b7:54:fe:74:00:95:f7:5b:3b:91:2b:fe:1e:92:48:ba:07:06:
19:37:4e:4a:29:ad:b3:5a:27:55:66:9d:1f:6e:1d:3c:b9:e6:
89:0f:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:10:21 2026 by rpki-client