Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS204958.roa
File: AS204958.roa (raw, json)
Hash identifier: ys7HHF4pAQM8U29zfmB/cECz/2kHd//p3VFpSyxuRy8=
Subject key identifier: E0:B2:D9:CF:58:DB:B8:B3:7C:FA:61:69:E0:B7:34:32:BA:A6:D8:58
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 442776C45F51A5BF7A00753D160D4E364D63359A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS204958.roa
Signing time: Tue 19 May 2026 13:58:42 +0000
ROA not before: Tue 19 May 2026 13:53:42 +0000
ROA not after: Tue 18 May 2027 13:58:42 +0000
asID: 204958
IP address blocks: 51.241.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:27:76:c4:5f:51:a5:bf:7a:00:75:3d:16:0d:4e:36:4d:63:35:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 19 13:53:42 2026 GMT
Not After : May 18 13:58:42 2027 GMT
Subject: CN=E0B2D9CF58DBB8B37CFA6169E0B73432BAA6D858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:98:f9:f8:bd:ca:2c:57:e1:97:b0:75:87:
eb:a4:0f:f2:e8:5f:1b:7d:3f:ae:1c:f3:81:0a:0a:
6e:26:fe:ed:7b:2b:70:6d:58:d6:bb:0a:d9:6f:4d:
8a:41:84:f9:86:3a:4c:65:09:60:f9:e6:cb:e8:49:
94:f4:94:d3:42:70:04:ee:5f:ea:c5:99:25:77:8b:
0f:be:42:24:d6:03:b8:23:ee:57:24:8e:60:15:69:
8d:ed:c1:c9:b5:ac:42:f5:0b:b9:0e:7e:b9:6b:bd:
9b:4c:5e:d5:50:95:aa:76:0c:d6:38:e1:4a:f1:1a:
99:fa:5e:86:b9:b3:6a:7d:86:07:04:70:8a:c3:7f:
46:ba:9c:27:76:f3:43:79:a0:db:3b:6f:11:03:05:
82:0e:5f:b5:3e:1a:2a:4a:ba:c7:07:9e:b5:0f:01:
a4:51:69:84:c1:c0:a5:69:14:06:7f:f9:07:ac:fa:
9c:c6:d3:18:53:8a:f3:42:51:f8:54:97:12:85:9f:
be:15:8e:70:c3:fb:3e:9e:16:3d:73:24:64:cc:5d:
24:55:81:32:bc:ea:36:93:ce:5f:42:91:7c:52:44:
7c:9a:d3:03:bf:51:ac:65:1e:95:b3:75:3e:dd:da:
d0:48:2d:e6:74:4f:86:da:e8:f7:37:3c:92:2e:37:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B2:D9:CF:58:DB:B8:B3:7C:FA:61:69:E0:B7:34:32:BA:A6:D8:58
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS204958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:63:9e:f2:3c:50:24:0d:23:19:75:fc:9c:f3:da:e6:4c:87:
54:87:1e:87:bd:9a:d7:18:92:2d:b4:cc:26:30:d4:31:a5:7e:
f9:d4:8b:97:b7:e8:5a:ed:f0:96:d0:ef:72:b4:3a:ef:3d:30:
61:69:10:4b:6c:84:56:24:c0:db:6e:b7:8d:08:92:9f:dd:85:
26:be:37:0a:9d:8f:f6:f2:21:f7:12:69:21:f2:f6:9b:d4:0d:
3b:5e:e1:f4:39:f4:d9:7c:e7:aa:c9:a0:af:4d:a4:20:7e:ed:
4c:50:59:96:a2:e8:6f:f5:8d:3e:ce:53:47:ff:d1:51:1f:fc:
34:1b:23:f4:49:4b:7a:54:13:91:6f:5d:2f:47:09:5b:54:dc:
d6:13:23:d1:be:8b:59:ac:5c:15:70:c5:88:99:77:97:57:af:
fa:0c:55:da:4b:72:5c:73:17:91:1c:6c:5b:e9:ab:c8:b5:45:
dd:45:ec:f7:5d:fc:14:97:2e:3c:27:e0:23:6d:26:cf:84:2f:
56:c9:12:59:15:85:bc:84:50:5d:27:d4:27:1a:0c:2f:b2:8b:
4d:74:1d:05:48:ca:bf:02:9f:69:15:ac:7e:e8:94:3a:c0:57:
a3:d5:dc:9e:b6:09:cb:f5:31:42:18:35:50:6e:ce:70:6c:42:
82:94:c7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:11 2026 by rpki-client