Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: rOk8ZevpBlbWmYsMWHa5flT1UMVjjBi4jzkJwwgcdBg=
Subject key identifier: EB:32:80:C6:54:45:07:39:E4:CC:77:46:8C:F6:E3:01:45:D1:D9:00
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6C16AB9690811F90D35BA12C86478E2824574134
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
Signing time: Tue 30 Jun 2026 16:29:22 +0000
ROA not before: Tue 30 Jun 2026 16:24:22 +0000
ROA not after: Tue 29 Jun 2027 16:29:22 +0000
asID: 199741
IP address blocks: 51.194.131.0/24 maxlen: 24
51.194.137.0/24 maxlen: 24
51.194.139.0/24 maxlen: 24
51.194.153.0/24 maxlen: 24
51.194.164.0/24 maxlen: 24
51.194.174.0/24 maxlen: 24
51.194.175.0/24 maxlen: 24
51.194.190.0/24 maxlen: 24
51.241.120.0/24 maxlen: 24
51.241.131.0/24 maxlen: 24
51.241.132.0/24 maxlen: 24
51.241.134.0/24 maxlen: 24
188.220.94.0/24 maxlen: 24
188.220.121.0/24 maxlen: 24
188.220.126.0/24 maxlen: 24
188.220.214.0/24 maxlen: 24
188.220.218.0/24 maxlen: 24
188.220.228.0/24 maxlen: 24
188.220.230.0/24 maxlen: 24
188.220.232.0/24 maxlen: 24
188.221.2.0/24 maxlen: 24
188.221.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:16:ab:96:90:81:1f:90:d3:5b:a1:2c:86:47:8e:28:24:57:41:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 30 16:24:22 2026 GMT
Not After : Jun 29 16:29:22 2027 GMT
Subject: CN=EB3280C654450739E4CC77468CF6E30145D1D900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:85:35:d8:c1:f6:dc:4c:cc:0e:d1:42:f2:
d8:82:7b:b5:cf:e5:8a:01:c1:12:fe:ed:c2:19:37:
5d:c3:78:0c:ed:50:4c:ef:77:0d:79:ce:ea:db:93:
7f:49:61:48:51:bc:97:82:c7:e5:52:e8:a2:83:ff:
db:3d:88:b9:92:c3:3f:32:45:eb:6e:04:2e:e0:75:
4d:c3:b8:41:c0:00:eb:ef:82:98:d9:2b:19:7d:e8:
90:f9:8f:a3:0b:76:9f:36:39:c8:53:b5:62:88:73:
f9:d7:a6:6a:47:63:b5:b6:c2:57:2d:8e:72:16:f0:
e4:ca:b0:cd:23:30:b9:5c:20:10:b9:d2:cb:c5:7d:
f1:99:2b:1d:24:f1:3f:89:13:64:ed:3c:9f:74:43:
b8:c8:d8:87:5c:9c:93:50:76:25:59:ff:67:f9:16:
37:9f:fe:61:68:5b:10:b9:7d:7f:64:59:1d:c6:47:
1b:c0:98:47:20:d4:92:65:9d:1d:d1:39:df:a1:e2:
3b:c3:ef:73:e2:ab:06:48:a2:0f:1f:90:12:18:99:
6b:b2:48:ac:6c:ce:2a:3a:d4:25:2f:cf:00:86:80:
c7:57:7c:5e:59:e1:4a:a3:9a:24:fa:ea:04:97:46:
fa:60:1e:47:1e:43:11:6c:3a:fc:7f:66:25:a3:25:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:32:80:C6:54:45:07:39:E4:CC:77:46:8C:F6:E3:01:45:D1:D9:00
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.131.0/24
51.194.137.0/24
51.194.139.0/24
51.194.153.0/24
51.194.164.0/24
51.194.174.0/23
51.194.190.0/24
51.241.120.0/24
51.241.131.0-51.241.132.255
51.241.134.0/24
188.220.94.0/24
188.220.121.0/24
188.220.126.0/24
188.220.214.0/24
188.220.218.0/24
188.220.228.0/24
188.220.230.0/24
188.220.232.0/24
188.221.2.0/24
188.221.33.0/24
Signature Algorithm: sha256WithRSAEncryption
10:9e:1e:34:da:a9:1c:b5:17:b9:6b:7b:3d:0f:17:ce:d8:b9:
f4:59:09:08:35:d0:97:4e:bb:d9:f5:6a:27:8e:68:70:67:51:
b2:60:a2:07:b2:e0:db:8d:8c:5e:a2:4c:53:6e:80:ef:f5:a6:
d2:7f:7a:27:31:8f:a7:73:8a:5d:dc:1d:37:ca:a8:95:44:f0:
56:7f:df:7f:50:74:e5:24:ff:93:b5:40:f7:2c:0c:92:ef:f3:
9a:db:62:38:6b:de:5d:56:00:4b:ff:f9:84:3f:23:3b:db:47:
f9:20:fa:fa:03:2d:1a:87:b1:9e:77:59:a2:c2:b5:5b:12:1c:
12:01:70:b5:7d:45:24:8a:2d:78:b5:7d:7a:d8:76:32:73:2d:
d4:3b:8b:31:95:4f:2a:41:58:1b:d9:03:f7:ae:7b:44:30:ba:
4e:cf:eb:62:ae:59:33:3a:fc:ad:be:3a:6b:b8:d5:79:72:c7:
ea:60:75:b0:e1:d5:03:e4:26:91:24:6c:e4:54:b5:04:60:da:
ac:f9:36:b4:41:95:ed:17:7b:18:b0:52:c6:4e:5b:ac:f9:26:
9e:d5:ac:7f:39:c9:8a:43:85:77:b7:8c:2a:bc:4a:bd:5b:1f:
ba:6f:41:13:98:3f:09:ac:f0:dd:00:14:fd:84:08:6f:61:9a:
ce:b5:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:44:22 2026 by rpki-client