Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS273120.roa
File: AS273120.roa (raw, json)
Hash identifier: p/PoEuSMbax+VpMOFvxl/htOBogkLApy6x2roZtJj+s=
Subject key identifier: FD:CA:8E:5C:1A:88:3D:5F:41:8D:DF:74:0A:DB:E3:F5:D9:06:CE:DE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4A61C150D85F0F10210D9598ADA11408BB0974D7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS273120.roa
Signing time: Wed 05 Aug 2026 00:54:17 +0000
ROA not before: Wed 05 Aug 2026 00:49:17 +0000
ROA not after: Wed 04 Aug 2027 00:54:17 +0000
asID: 273120
IP address blocks: 51.194.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:61:c1:50:d8:5f:0f:10:21:0d:95:98:ad:a1:14:08:bb:09:74:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 5 00:49:17 2026 GMT
Not After : Aug 4 00:54:17 2027 GMT
Subject: CN=FDCA8E5C1A883D5F418DDF740ADBE3F5D906CEDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:54:6b:e8:36:09:58:c8:7a:ff:08:a7:67:
03:35:9e:a6:dd:4c:58:dc:58:9b:2c:18:d3:bc:cb:
91:fe:10:2b:c8:fa:44:ec:09:b1:7f:46:53:74:e5:
9f:46:80:aa:5c:30:08:3a:c5:42:56:68:ce:e8:bf:
86:d0:d7:60:ab:1e:82:87:f6:d6:e4:35:51:e6:0d:
8a:07:af:d0:fc:07:50:d8:9c:98:85:11:c2:82:15:
9c:c2:c0:e5:d1:0f:d9:bf:3f:c3:ca:6e:0a:28:bc:
28:e3:82:68:7c:65:3e:4f:6e:69:4f:92:54:79:e9:
3d:c9:ac:a6:c6:34:fe:92:7b:f1:60:85:ee:64:dd:
42:ad:53:d5:2d:d0:15:ce:55:bd:30:b1:cb:b6:42:
e2:11:01:1a:a8:b3:51:1d:f4:b1:62:78:f2:80:59:
f4:0d:ca:e3:d5:2a:72:11:56:21:79:5e:06:43:9f:
11:ee:13:95:7f:e4:6c:5a:d3:1c:7f:99:d9:51:e1:
1d:8e:4e:27:44:e7:a8:a7:c3:28:db:ef:59:9e:a9:
5f:d5:07:10:c6:e7:5c:56:96:06:72:af:0e:a6:33:
2d:18:6a:74:a7:af:a4:f1:01:f1:7a:e7:3a:f8:ee:
94:5b:6f:af:21:5f:8c:5c:c5:58:e4:5a:6c:1d:51:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:8E:5C:1A:88:3D:5F:41:8D:DF:74:0A:DB:E3:F5:D9:06:CE:DE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS273120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.196.0/22
Signature Algorithm: sha256WithRSAEncryption
56:24:84:7b:70:92:47:77:2f:d6:95:d3:0e:24:c1:32:25:11:
10:6e:31:ef:3b:6c:01:cc:a8:e3:d6:68:c9:70:33:35:3c:b7:
79:dc:8a:21:b0:7a:85:1f:a0:8c:e6:92:46:1e:70:1f:6f:25:
bb:03:e5:ac:c2:52:97:0a:76:45:ee:53:4c:60:0f:f0:c1:9a:
30:75:f4:8e:47:4b:36:76:5d:ed:98:d5:a7:22:5f:e2:c6:71:
e3:c7:9d:20:74:c9:13:60:95:6d:87:30:33:90:c1:e3:dd:72:
dc:8b:9a:18:c4:56:de:40:3e:6a:28:20:ec:d0:f0:ff:2d:31:
dc:5a:29:0f:bf:01:be:71:70:25:a8:9e:4e:6a:2a:19:ba:e1:
45:08:10:9a:aa:a8:6d:60:78:b2:48:a2:fa:d9:a8:da:88:9e:
ee:92:7c:c0:bb:fb:10:96:b0:ba:13:6c:62:a4:9c:58:a9:6c:
93:a2:b5:0f:47:10:e8:bf:9b:9e:76:02:10:35:25:55:de:17:
84:77:b5:2a:55:ba:d7:ea:12:31:3a:83:78:4a:59:1e:e8:e7:
55:80:36:b5:da:8d:77:99:87:fa:cd:03:dc:7f:39:2f:52:07:
2e:2e:d7:7f:0c:a5:36:2e:55:3c:62:a4:2c:f2:ba:8c:7f:9d:
90:38:12:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:49 2026 by rpki-client