Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203054.roa
File: AS203054.roa (raw, json)
Hash identifier: Fd/rHYEseOg5059B+hSx9oFHFGdIatiS9Rb1gDDe62s=
Subject key identifier: E0:70:BC:04:09:AF:ED:8B:DE:02:5C:8F:4F:EA:2F:74:F0:5A:47:E8
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5AF015479E835B1077B8379F3CC78E91E33B4389
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203054.roa
Signing time: Sat 18 Apr 2026 16:26:41 +0000
ROA not before: Sat 18 Apr 2026 16:21:41 +0000
ROA not after: Sat 17 Apr 2027 16:26:41 +0000
asID: 203054
IP address blocks: 51.194.80.0/24 maxlen: 24
51.194.131.0/24 maxlen: 24
51.194.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f0:15:47:9e:83:5b:10:77:b8:37:9f:3c:c7:8e:91:e3:3b:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 18 16:21:41 2026 GMT
Not After : Apr 17 16:26:41 2027 GMT
Subject: CN=E070BC0409AFED8BDE025C8F4FEA2F74F05A47E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:da:46:d2:66:22:1d:8e:22:08:38:5f:c2:f0:
60:ef:21:7c:e7:84:d6:a8:1e:ad:93:80:de:8e:91:
79:83:2d:01:36:47:b7:34:7a:b2:ad:e1:f0:f9:02:
a5:ee:34:2b:c3:be:98:6a:12:b1:5b:ae:24:ba:9d:
09:4d:e0:b0:c5:dc:90:ca:f4:6b:2b:1a:e9:bf:4a:
fa:af:5a:61:06:e9:e6:6e:57:fd:44:c2:cc:84:72:
64:af:d2:b1:69:eb:f6:89:12:67:59:68:a6:11:ec:
42:c9:e0:80:e9:cf:27:67:e3:66:f5:be:1f:6c:43:
e3:e7:f0:d5:57:03:05:e6:c8:dd:6d:8e:2a:a6:3c:
48:b8:06:5d:58:8b:b0:7d:18:cb:c1:a3:e7:78:18:
88:cb:68:36:20:5a:54:75:f9:86:f1:57:8b:a6:75:
ae:aa:d5:f1:8f:f6:58:c5:06:7c:5c:b6:33:47:45:
ed:8e:53:34:73:0e:16:38:07:1b:97:da:03:7b:3e:
ae:1a:12:f3:d6:63:c8:7b:29:4c:92:82:eb:9c:48:
02:30:1f:f1:e1:18:3c:27:f3:e4:12:03:bb:21:99:
28:2d:d8:b1:b2:cc:b1:7c:4c:6d:24:4d:fb:cb:eb:
33:42:a2:98:aa:3a:69:d6:cd:f6:b9:e2:de:c9:fd:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:BC:04:09:AF:ED:8B:DE:02:5C:8F:4F:EA:2F:74:F0:5A:47:E8
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203054.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.80.0/24
51.194.131.0/24
51.194.153.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cf:54:d5:22:d5:99:7a:23:98:75:d5:1d:19:5d:1d:87:87:
e0:14:d9:65:5f:40:c9:8b:38:7a:26:f3:99:90:7b:27:69:59:
28:43:1b:ad:20:ab:f0:e7:df:74:e5:b0:fe:cb:47:72:51:7c:
4b:96:37:c1:08:a9:41:23:63:e4:d6:b4:4c:31:31:66:a7:83:
b2:cd:54:78:fd:9f:31:ff:28:3b:d5:f7:a2:73:6f:74:07:16:
cb:2d:27:d2:d7:d1:16:7a:e8:15:d1:a8:52:5b:1e:0a:8f:a2:
2b:bf:84:cb:2b:7f:c6:e0:62:1f:27:fd:de:2a:14:aa:18:4d:
99:33:bc:9b:cd:62:e7:3f:bc:14:26:2b:9a:b5:18:e5:fd:28:
95:08:b3:7d:41:28:32:e0:18:df:ce:d8:7b:63:f3:e9:87:35:
4c:a2:a5:2e:da:8e:78:88:2b:38:fc:46:bd:22:b0:ce:81:cd:
89:e5:ef:79:cb:64:28:07:ef:5b:e6:42:7e:b7:2b:6d:ef:45:
7d:0c:d6:c1:3d:ae:6b:00:93:3e:e4:20:8c:e2:e5:c1:56:d4:
dd:df:28:0e:0f:a0:b6:e8:87:6d:d9:51:eb:43:67:df:c1:e6:
dc:77:7a:42:cc:0e:df:48:af:84:41:ca:25:00:92:83:1b:7b:
31:8a:2d:b5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUWvAVR56DWxB3uDefPMeOkeM7Q4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA0MTgxNjIxNDFaFw0yNzA0MTcxNjI2NDFaMDMxMTAvBgNV
BAMTKEUwNzBCQzA0MDlBRkVEOEJERTAyNUM4RjRGRUEyRjc0RjA1QTQ3RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw2kbSZiIdjiIIOF/C8GDvIXzn
hNaoHq2TgN6OkXmDLQE2R7c0erKt4fD5AqXuNCvDvphqErFbriS6nQlN4LDF3JDK
9GsrGum/SvqvWmEG6eZuV/1EwsyEcmSv0rFp6/aJEmdZaKYR7ELJ4IDpzydn42b1
vh9sQ+Pn8NVXAwXmyN1tjiqmPEi4Bl1Yi7B9GMvBo+d4GIjLaDYgWlR1+YbxV4um
da6q1fGP9ljFBnxctjNHRe2OUzRzDhY4BxuX2gN7Pq4aEvPWY8h7KUySguucSAIw
H/HhGDwn8+QSA7shmSgt2LGyzLF8TG0kTfvL6zNCopiqOmnWzfa54t7J/V5zAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU4HC8BAmv7YveAlyPT+ovdPBaR+gwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjAzMDU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAM8JQ
AwQAM8KDAwQAM8KZMA0GCSqGSIb3DQEBCwUAA4IBAQCFz1TVItWZeiOYddUdGV0d
h4fgFNllX0DJizh6JvOZkHsnaVkoQxutIKvw59905bD+y0dyUXxLljfBCKlBI2Pk
1rRMMTFmp4OyzVR4/Z8x/yg71feic290BxbLLSfS19EWeugV0ahSWx4Kj6Irv4TL
K3/G4GIfJ/3eKhSqGE2ZM7ybzWLnP7wUJiuatRjl/SiVCLN9QSgy4Bjfzth7Y/Pp
hzVMoqUu2o54iCs4/Ea9IrDOgc2J5e95y2QoB+9b5kJ+tytt70V9DNbBPa5rAJM+
5CCM4uXBVtTd3ygOD6C26Idt2VHrQ2ffwebcd3pCzA7fSK+EQcolAJKDG3sxii21
-----END CERTIFICATE-----
Generated at Sun Apr 19 03:17:24 2026 by rpki-client