Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202791.roa
File: AS202791.roa (raw, json)
Hash identifier: jGYppHwzcBIPvunF9qzGJAzFwkgYZeDHNXzFMxK3CR4=
Subject key identifier: 1C:D6:9B:46:89:07:56:90:85:3E:1E:84:0D:81:21:7C:EF:84:92:BD
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2B082E8F116A65CC7A6A605F4C348237B919AAA0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202791.roa
Signing time: Wed 20 May 2026 08:09:20 +0000
ROA not before: Wed 20 May 2026 08:04:20 +0000
ROA not after: Wed 19 May 2027 08:09:20 +0000
asID: 202791
IP address blocks: 51.241.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:08:2e:8f:11:6a:65:cc:7a:6a:60:5f:4c:34:82:37:b9:19:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 20 08:04:20 2026 GMT
Not After : May 19 08:09:20 2027 GMT
Subject: CN=1CD69B4689075690853E1E840D81217CEF8492BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:60:cd:dd:02:05:80:23:73:97:59:0d:92:
9c:2b:10:7f:b8:45:07:ff:5e:d6:45:58:c0:08:9d:
2a:f0:36:59:53:a3:40:e5:26:72:1b:1b:5e:c2:f7:
c9:23:0e:4c:55:e3:79:7f:1e:7c:e2:07:20:7a:5a:
24:eb:f7:94:44:da:ae:ec:64:58:9b:82:e6:93:b1:
e9:f5:b3:c6:cb:87:b0:9b:cb:a2:9c:69:26:21:37:
da:1b:f3:66:bd:22:71:cc:95:aa:86:3a:28:4a:3f:
c5:e3:27:5f:ea:46:3e:14:59:4a:84:16:13:95:a5:
a6:0e:05:34:c5:43:8c:c5:6d:9a:1e:4d:ac:03:d0:
4c:b1:34:4e:54:e9:7f:b7:f8:4e:85:bc:3b:85:b3:
e3:54:4c:e6:d0:f6:fe:66:bb:27:d8:0c:88:8d:0b:
fd:4f:64:18:3e:25:97:aa:41:02:b4:19:bd:05:a7:
30:cf:78:31:da:c6:1d:74:1b:4d:eb:66:68:16:68:
4d:b3:09:48:06:30:66:3e:24:07:e0:c1:ec:b2:66:
e7:c3:bd:d8:74:f6:37:bf:7e:2e:b5:b3:56:f1:db:
31:cb:c5:4a:7e:11:f6:d1:b1:f3:79:93:8c:f3:55:
f3:76:85:9e:2d:ef:2f:04:dc:fd:3f:2b:9c:95:a8:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D6:9B:46:89:07:56:90:85:3E:1E:84:0D:81:21:7C:EF:84:92:BD
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.146.0/24
Signature Algorithm: sha256WithRSAEncryption
44:66:fe:25:51:68:e2:d1:80:c5:2d:4e:0b:38:df:98:c7:d5:
2d:f7:61:14:e8:ab:8c:5b:20:e5:61:a3:12:44:16:3d:5c:a8:
69:29:56:ce:61:3a:f9:58:e0:1e:76:f7:3a:8f:f0:7c:68:a5:
8b:5e:13:24:35:9e:65:66:23:58:4c:0d:5c:18:2e:e3:66:84:
f9:c8:6c:56:3b:c4:6c:52:07:9f:2a:29:99:37:ac:86:fd:46:
f8:f7:b9:71:80:5d:af:e4:f8:5c:40:73:0c:d8:fd:65:2a:1d:
8f:58:50:74:f6:5e:a4:4a:5e:44:0d:e6:59:54:a0:21:d7:75:
40:6c:3c:41:12:71:8f:ad:0c:a8:bc:61:be:7e:78:3b:d7:33:
cc:89:ef:e4:cc:ec:b4:38:9b:73:bc:af:31:6a:f3:c2:a5:a5:
19:64:da:b3:cb:ae:20:1e:51:7d:b3:c2:21:37:b2:83:41:6f:
39:7a:2f:c9:7e:09:97:38:12:3a:d8:e3:a0:d1:59:d9:d9:cf:
4c:92:14:0d:02:52:10:8f:df:8e:b3:0a:8e:e1:10:0d:20:1d:
2f:99:cb:68:d2:bf:fa:4c:2d:bb:62:e4:96:56:e0:6a:3d:03:
bd:05:11:05:e8:44:ac:d2:fd:f2:2a:38:df:92:43:a0:b1:e2:
ac:32:2a:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKwgujxFqZcx6amBfTDSCN7kZqqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA1MjAwODA0MjBaFw0yNzA1MTkwODA5MjBaMDMxMTAvBgNV
BAMTKDFDRDY5QjQ2ODkwNzU2OTA4NTNFMUU4NDBEODEyMTdDRUY4NDkyQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4mDN3QIFgCNzl1kNkpwrEH+4
RQf/XtZFWMAInSrwNllTo0DlJnIbG17C98kjDkxV43l/HnziByB6WiTr95RE2q7s
ZFibguaTsen1s8bLh7Cby6KcaSYhN9ob82a9InHMlaqGOihKP8XjJ1/qRj4UWUqE
FhOVpaYOBTTFQ4zFbZoeTawD0EyxNE5U6X+3+E6FvDuFs+NUTObQ9v5muyfYDIiN
C/1PZBg+JZeqQQK0Gb0FpzDPeDHaxh10G03rZmgWaE2zCUgGMGY+JAfgweyyZufD
vdh09je/fi61s1bx2zHLxUp+EfbRsfN5k4zzVfN2hZ4t7y8E3P0/K5yVqME5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUHNabRokHVpCFPh6EDYEhfO+Ekr0wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjAyNzkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAM/GS
MA0GCSqGSIb3DQEBCwUAA4IBAQBEZv4lUWji0YDFLU4LON+Yx9Ut92EU6KuMWyDl
YaMSRBY9XKhpKVbOYTr5WOAedvc6j/B8aKWLXhMkNZ5lZiNYTA1cGC7jZoT5yGxW
O8RsUgefKimZN6yG/Ub497lxgF2v5PhcQHMM2P1lKh2PWFB09l6kSl5EDeZZVKAh
13VAbDxBEnGPrQyovGG+fng71zPMie/kzOy0OJtzvK8xavPCpaUZZNqzy64gHlF9
s8IhN7KDQW85ei/JfgmXOBI62OOg0VnZ2c9MkhQNAlIQj9+OswqO4RANIB0vmcto
0r/6TC27YuSWVuBqPQO9BREF6ESs0v3yKjjfkkOgseKsMioN
-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:17 2026 by rpki-client