Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203054.roa
File: AS203054.roa (raw, json)
Hash identifier: u+L+OC1aI9uBbLXfGpGOgxLk2sUaxnwgiMU7uGyggn0=
Subject key identifier: 2D:69:9D:CE:CB:8B:CA:E7:11:9B:F1:01:E0:24:E0:8A:A0:4D:C2:72
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 32B2BD1ADA6C10C16FE4C3FE1029A24AF3C5B598
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203054.roa
Signing time: Wed 03 Jun 2026 04:54:03 +0000
ROA not before: Wed 03 Jun 2026 04:49:03 +0000
ROA not after: Wed 02 Jun 2027 04:54:03 +0000
asID: 203054
IP address blocks: 51.146.13.0/24 maxlen: 24
51.146.16.0/24 maxlen: 24
51.146.73.0/24 maxlen: 24
51.146.83.0/24 maxlen: 24
51.146.94.0/24 maxlen: 24
51.194.113.0/24 maxlen: 24
51.241.18.0/24 maxlen: 24
51.241.19.0/24 maxlen: 24
51.241.52.0/24 maxlen: 24
51.241.80.0/24 maxlen: 24
51.241.166.0/24 maxlen: 24
51.241.192.0/24 maxlen: 24
51.241.193.0/24 maxlen: 24
51.241.195.0/24 maxlen: 24
51.241.202.0/24 maxlen: 24
51.241.235.0/24 maxlen: 24
51.241.236.0/24 maxlen: 24
51.241.238.0/24 maxlen: 24
78.105.119.0/24 maxlen: 24
78.105.124.0/24 maxlen: 24
78.105.155.0/24 maxlen: 24
78.105.160.0/24 maxlen: 24
78.105.189.0/24 maxlen: 24
78.105.191.0/24 maxlen: 24
78.105.194.0/24 maxlen: 24
78.105.195.0/24 maxlen: 24
78.105.202.0/24 maxlen: 24
78.105.206.0/24 maxlen: 24
188.220.51.0/24 maxlen: 24
188.220.87.0/24 maxlen: 24
188.220.149.0/24 maxlen: 24
188.220.150.0/24 maxlen: 24
188.220.164.0/24 maxlen: 24
188.220.194.0/24 maxlen: 24
188.221.28.0/24 maxlen: 24
188.221.111.0/24 maxlen: 24
188.221.135.0/24 maxlen: 24
188.221.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b2:bd:1a:da:6c:10:c1:6f:e4:c3:fe:10:29:a2:4a:f3:c5:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 3 04:49:03 2026 GMT
Not After : Jun 2 04:54:03 2027 GMT
Subject: CN=2D699DCECB8BCAE7119BF101E024E08AA04DC272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:a5:89:86:b0:b0:3d:88:a1:e4:c0:4c:eb:
a4:97:bc:18:55:3d:aa:6a:b2:b5:cf:ac:0c:39:be:
d0:a6:25:32:8a:75:78:9e:f4:5a:e4:15:d4:42:d3:
e9:ba:4e:c3:60:6a:1d:7e:6c:9a:cb:61:3e:48:9b:
58:01:9a:e5:71:0f:7b:52:66:c3:aa:3d:70:13:62:
03:34:68:96:2c:1d:36:41:d4:cf:27:e7:73:83:57:
ac:cf:3f:4a:02:54:62:92:fb:6e:67:8f:58:6b:6c:
fc:4f:5a:e8:bf:a2:a8:5f:6b:83:12:46:e4:82:52:
e5:c0:4e:de:0b:50:e6:0e:05:bb:91:02:18:b1:1c:
c1:a0:0a:e2:1b:bb:bc:06:11:2a:63:2b:6a:51:f1:
ae:b9:a4:99:89:51:68:c6:99:6b:ef:e6:1f:ee:50:
f5:1b:10:ab:39:f6:57:e9:45:68:e4:4d:52:6b:51:
9e:75:94:a4:7f:62:71:f2:18:f0:d9:9a:91:2b:6a:
35:9c:b8:00:ce:87:50:f2:fb:4c:3d:fc:52:c9:1b:
22:06:38:f1:ed:c9:d7:d4:75:be:ab:1d:e2:af:68:
0d:f9:d6:c0:b1:da:cd:a2:77:99:a3:78:7d:a6:91:
40:68:1d:03:c8:45:55:18:72:5b:a7:98:27:e3:0e:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:69:9D:CE:CB:8B:CA:E7:11:9B:F1:01:E0:24:E0:8A:A0:4D:C2:72
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203054.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.13.0/24
51.146.16.0/24
51.146.73.0/24
51.146.83.0/24
51.146.94.0/24
51.194.113.0/24
51.241.18.0/23
51.241.52.0/24
51.241.80.0/24
51.241.166.0/24
51.241.192.0/23
51.241.195.0/24
51.241.202.0/24
51.241.235.0-51.241.236.255
51.241.238.0/24
78.105.119.0/24
78.105.124.0/24
78.105.155.0/24
78.105.160.0/24
78.105.189.0/24
78.105.191.0/24
78.105.194.0/23
78.105.202.0/24
78.105.206.0/24
188.220.51.0/24
188.220.87.0/24
188.220.149.0-188.220.150.255
188.220.164.0/24
188.220.194.0/24
188.221.28.0/24
188.221.111.0/24
188.221.135.0/24
188.221.186.0/24
Signature Algorithm: sha256WithRSAEncryption
27:48:d1:20:cb:16:01:2f:24:de:f4:51:64:e2:33:a6:67:51:
e9:3c:87:d3:73:7f:b9:7d:7d:e3:b4:aa:97:78:bd:08:3f:b1:
8a:17:30:66:bb:ae:7b:b6:4b:a0:74:96:2b:52:c2:54:94:a1:
43:f2:27:ef:ef:e1:07:1c:6c:8a:23:d1:d7:d2:52:64:95:60:
e4:2f:76:18:a4:94:50:ea:0b:ac:c6:39:b7:8d:33:26:8b:be:
3a:d4:1a:b6:c5:18:6a:22:31:b5:8c:e0:be:11:13:83:cf:94:
af:92:b9:15:6f:02:c9:75:50:b2:eb:b7:fc:a2:61:e2:1c:ce:
17:6c:dd:47:c7:e7:bd:c5:82:32:89:6d:ea:fd:70:4d:82:15:
9f:cc:d3:55:d3:bd:27:22:af:fa:14:82:d5:70:05:21:ac:1b:
f4:c7:97:aa:d6:28:cf:bf:60:b9:4c:72:96:ca:a7:9d:1a:ab:
34:73:29:65:18:e3:41:dc:24:9b:3e:ee:00:e5:4f:23:0e:fa:
1c:3b:3d:51:7d:0c:9e:73:70:1b:fc:66:3e:1a:f2:39:91:a7:
6a:ff:cc:6f:1c:01:a7:88:93:aa:8d:f3:69:b1:e8:d3:38:93:
d5:08:a6:c1:64:a9:54:8e:e7:0a:42:bd:29:ed:72:7a:ef:a7:
d6:97:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:20 2026 by rpki-client