Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: pv20YSx0OQKQ7on/PjHcdXKoHwnP3bi6U88RooKn4VU=
Subject key identifier: 47:77:04:10:34:1A:FB:62:1A:C5:C4:4F:0E:E7:E8:DB:5B:81:A0:C5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 28137F3614E5C51CFC3F280417EB6BE005A5EB84
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203048.roa
Signing time: Sun 19 Apr 2026 00:48:19 +0000
ROA not before: Sun 19 Apr 2026 00:43:19 +0000
ROA not after: Sun 18 Apr 2027 00:48:19 +0000
asID: 203048
IP address blocks: 51.194.82.0/24 maxlen: 24
51.194.112.0/24 maxlen: 24
51.194.129.0/24 maxlen: 24
51.194.139.0/24 maxlen: 24
51.194.145.0/24 maxlen: 24
51.194.158.0/24 maxlen: 24
51.194.189.0/24 maxlen: 24
51.194.194.0/24 maxlen: 24
51.194.202.0/24 maxlen: 24
51.194.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:13:7f:36:14:e5:c5:1c:fc:3f:28:04:17:eb:6b:e0:05:a5:eb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 19 00:43:19 2026 GMT
Not After : Apr 18 00:48:19 2027 GMT
Subject: CN=47770410341AFB621AC5C44F0EE7E8DB5B81A0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:01:8c:9a:26:c4:4d:76:47:96:05:76:e6:
03:68:18:63:bd:25:4b:4e:0f:e5:0b:09:35:80:5f:
18:68:ef:fd:f4:5e:ae:d8:65:97:98:ef:b4:fc:83:
20:dc:49:55:c2:8f:cc:93:0f:3e:11:ad:8f:6a:e0:
ab:41:08:8b:2a:53:94:06:ed:bd:e3:ed:cc:af:65:
82:ae:70:ae:2f:b2:ea:6e:18:7c:c2:cf:95:5e:00:
c9:2c:f3:7d:90:04:d8:de:cd:39:79:16:29:91:f4:
6e:89:eb:c8:ad:cf:e1:6e:b6:84:17:b1:60:83:5b:
8b:87:ef:1a:94:5a:3f:bd:a5:21:fa:95:23:67:4d:
af:c0:7e:92:8b:ee:aa:cc:6b:d9:61:13:c1:16:cc:
e3:e8:60:27:f3:a6:fd:82:ce:20:a4:db:62:72:8e:
8c:56:88:00:c3:ee:8b:14:c7:7c:70:67:fa:16:9f:
6b:36:34:f1:4e:71:01:0f:49:d7:35:95:4f:01:b6:
7f:a2:e5:6a:d1:54:1c:d2:ed:5a:8b:e3:78:a0:06:
66:86:73:13:fe:b6:b3:15:68:18:0e:b5:ab:9f:8b:
5c:3d:1a:90:62:b7:a7:c5:c1:dd:96:94:1e:ba:59:
ae:f7:7b:e1:9d:6b:9a:c8:64:1e:f1:22:d9:26:42:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:04:10:34:1A:FB:62:1A:C5:C4:4F:0E:E7:E8:DB:5B:81:A0:C5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.82.0/24
51.194.112.0/24
51.194.129.0/24
51.194.139.0/24
51.194.145.0/24
51.194.158.0/24
51.194.189.0/24
51.194.194.0/24
51.194.202.0/24
51.194.218.0/24
Signature Algorithm: sha256WithRSAEncryption
35:06:be:54:f9:4f:f6:f2:0c:f8:42:c6:fb:91:7b:8d:fe:66:
5e:52:03:42:0b:27:a0:c1:be:9f:dd:10:bc:4d:2f:7f:1f:5d:
55:c1:64:69:97:2d:35:27:f2:9d:e5:bd:9b:85:ff:32:ed:6d:
ee:d3:3b:4e:ec:4b:40:f1:03:ac:71:e3:cc:e1:33:8d:5c:eb:
2f:79:17:9a:a3:ec:12:54:8c:42:81:b7:f5:62:78:7f:7b:ea:
80:20:74:2e:32:51:b6:a7:17:0b:bd:56:bb:d8:92:c1:de:aa:
f7:85:15:4b:f2:e0:58:d0:2a:50:24:c4:e1:34:29:8b:24:e6:
1f:9e:a1:11:93:67:6d:5f:8c:80:f8:59:8c:19:12:32:e5:b5:
c7:03:4b:54:40:a3:86:39:13:3e:d5:e9:27:05:11:5f:38:c5:
29:95:ec:06:cd:72:05:39:f1:88:93:50:e2:81:b4:be:ac:19:
0a:47:21:00:2a:f8:10:b4:a9:67:6a:2a:de:ce:66:61:6b:c4:
77:e4:7d:b3:1e:dc:be:56:88:d5:f6:fe:ff:77:68:26:04:6a:
db:28:6d:8f:63:8e:34:dd:dd:e5:f3:04:11:6b:97:71:36:eb:
dd:ae:5e:a6:b3:28:61:ac:19:58:95:8c:bb:06:26:12:a3:bb:
e9:f1:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 03:17:26 2026 by rpki-client