Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS211192.roa
File: AS211192.roa (raw, json)
Hash identifier: VDsCHHbmMZ47DezbTJmgDnLLO1YGvm58LThY86Jei34=
Subject key identifier: 1B:EB:D9:5B:58:34:EF:EA:35:CE:17:D1:9B:E4:C3:40:77:3B:6A:95
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4BE1DC9380FE51D59B6D0209806AC6C9B3673BFD
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS211192.roa
Signing time: Wed 12 Aug 2026 07:59:20 +0000
ROA not before: Wed 12 Aug 2026 07:54:20 +0000
ROA not after: Wed 11 Aug 2027 07:59:20 +0000
asID: 211192
IP address blocks: 51.146.89.0/24 maxlen: 24
51.146.90.0/24 maxlen: 24
51.146.91.0/24 maxlen: 24
51.146.92.0/24 maxlen: 24
51.146.93.0/24 maxlen: 24
51.146.96.0/24 maxlen: 24
51.146.97.0/24 maxlen: 24
51.146.98.0/24 maxlen: 24
51.146.99.0/24 maxlen: 24
51.146.101.0/24 maxlen: 24
51.146.102.0/24 maxlen: 24
51.146.103.0/24 maxlen: 24
51.146.106.0/24 maxlen: 24
51.146.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e1:dc:93:80:fe:51:d5:9b:6d:02:09:80:6a:c6:c9:b3:67:3b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 12 07:54:20 2026 GMT
Not After : Aug 11 07:59:20 2027 GMT
Subject: CN=1BEBD95B5834EFEA35CE17D19BE4C340773B6A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:15:15:b7:07:7f:6a:65:95:d8:f7:e9:cf:
48:f2:aa:59:45:0d:46:ab:ee:45:06:1c:93:2a:d1:
d2:06:7b:60:70:37:12:56:07:c9:31:60:12:fa:e9:
3a:be:7e:ec:d8:db:c8:04:9d:c7:68:5c:4e:fd:49:
32:8f:5f:c4:b6:ba:a5:7e:8e:96:1b:96:f1:09:5a:
28:ca:e3:15:77:2e:90:22:26:5a:1b:bb:90:31:a1:
d3:75:ab:e1:7a:3d:75:3e:d0:46:a8:3b:2c:e0:5a:
fd:f1:24:49:b7:bc:64:4b:15:a2:6f:04:2e:03:d6:
47:53:17:88:cc:7e:42:89:20:29:b0:5b:fc:1a:fb:
5f:78:12:99:fd:f1:95:fa:67:a9:9c:91:4a:6a:22:
97:90:a1:28:db:6e:74:bc:97:9b:b6:40:fe:30:42:
70:26:e8:58:1d:02:ac:9f:8a:aa:1c:2e:87:2a:a4:
27:a5:2b:bb:a6:3b:b1:da:8a:88:cd:38:00:82:d1:
dc:b1:ed:34:42:7c:45:a1:1d:25:89:60:b9:05:bd:
f6:f0:ef:de:4a:be:6b:6a:c0:39:d3:e7:32:1f:0d:
eb:84:60:38:6e:55:80:f9:93:51:d0:e9:3d:55:61:
72:0a:95:da:aa:9e:ef:be:68:2b:8f:f5:6f:b1:81:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EB:D9:5B:58:34:EF:EA:35:CE:17:D1:9B:E4:C3:40:77:3B:6A:95
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS211192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.89.0-51.146.93.255
51.146.96.0/22
51.146.101.0-51.146.103.255
51.146.106.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:9b:9f:4d:f1:30:87:aa:26:5e:66:63:f9:0d:54:65:f4:7d:
90:82:1e:d5:22:c2:de:c9:93:06:3a:ca:85:27:f5:15:2a:91:
04:54:0c:92:18:45:78:10:15:0d:dd:da:e3:2c:29:b5:77:2c:
d1:1c:aa:0f:b7:8e:ac:37:19:a0:c3:94:10:36:94:1d:14:74:
53:e6:c9:c0:a8:12:c9:34:c1:e8:47:9a:2c:ca:2c:f8:88:fb:
df:1f:4c:e6:91:be:ec:a7:f1:47:55:35:78:4e:c0:8e:73:dc:
5a:a0:9d:13:3b:0d:9f:fd:ad:92:f6:82:73:16:69:c6:04:f2:
ed:56:0b:36:93:94:9e:43:58:0c:09:57:18:3e:88:2e:b3:f4:
7c:36:db:b7:34:40:b0:89:81:17:4f:ee:4d:00:8f:67:3a:7a:
11:f5:8c:7b:55:11:a8:4b:b2:88:fd:a1:4c:67:25:b6:d4:94:
10:21:70:08:2c:c9:03:a9:d3:e2:0e:13:49:b8:dd:38:f6:ce:
d1:ac:31:1c:d2:40:bf:d0:34:ad:58:9b:1c:ed:8c:0b:fc:6d:
8e:c3:68:24:ff:89:0b:f1:8f:26:54:ba:da:2b:54:6f:5a:51:
ee:c9:2b:5e:d7:49:13:4e:37:a1:ca:3d:46:5e:70:96:91:80:
ec:8b:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:47 2026 by rpki-client