Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS275002.roa
File: AS275002.roa (raw, json)
Hash identifier: D+0YTN8DyPzPKzHo8DCNLTZLTq+nf6Wo3Zr65lVHER4=
Subject key identifier: DD:56:38:28:1E:7B:2A:B0:3C:39:F4:5E:43:9C:9C:E3:A1:F3:42:0F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4E66CECC6AABD529E2CDB8C88E7C22A07E0D86B6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS275002.roa
Signing time: Wed 05 Aug 2026 21:18:30 +0000
ROA not before: Wed 05 Aug 2026 21:13:30 +0000
ROA not after: Wed 04 Aug 2027 21:18:30 +0000
asID: 275002
IP address blocks: 51.194.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 13:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:66:ce:cc:6a:ab:d5:29:e2:cd:b8:c8:8e:7c:22:a0:7e:0d:86:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 5 21:13:30 2026 GMT
Not After : Aug 4 21:18:30 2027 GMT
Subject: CN=DD5638281E7B2AB03C39F45E439C9CE3A1F3420F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:43:a5:c3:81:66:dd:38:36:12:49:3f:89:
d0:4e:8a:09:76:6b:e0:92:1b:b4:86:97:d8:41:d8:
93:64:34:27:16:fb:88:3d:58:79:ec:c7:c3:04:be:
14:8e:d7:37:33:27:20:32:d5:6e:50:7b:da:99:6e:
09:42:85:0f:9c:34:a0:b9:9e:41:9e:35:06:55:f2:
9f:86:6a:f7:52:df:f7:e7:33:20:e0:1c:62:8c:ce:
2c:74:03:30:ff:fb:4b:55:0b:b3:40:32:2f:81:35:
d8:75:7c:72:49:a7:8a:51:55:72:f4:2b:02:3a:e0:
e6:30:11:b7:50:c2:f1:ee:10:53:68:17:4b:ab:fd:
73:6f:4a:9f:36:07:72:70:3d:27:45:9f:fe:ce:e8:
48:ef:67:e0:1d:d5:59:d1:bf:a8:e8:ae:83:a7:0b:
21:07:0b:c7:05:c9:c8:e1:27:5a:77:f8:54:c9:80:
f1:2e:78:59:91:14:26:b2:f0:69:20:41:51:97:f9:
c0:2a:5c:82:ee:88:b3:0f:59:74:d3:78:c6:7b:fb:
f2:4e:15:a8:ef:14:ca:d7:c8:96:c1:1e:7c:a8:e2:
08:4f:d4:36:52:76:0f:41:6e:44:1e:bc:6a:75:db:
f2:49:7e:95:20:6f:79:b2:a6:87:d6:07:23:01:39:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:56:38:28:1E:7B:2A:B0:3C:39:F4:5E:43:9C:9C:E3:A1:F3:42:0F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS275002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.196.0/22
Signature Algorithm: sha256WithRSAEncryption
55:8a:9d:c2:c8:ba:70:ae:7a:f1:3f:c2:a8:31:b3:7b:37:20:
6c:e7:44:34:f5:c6:ec:93:bd:77:42:36:8b:5a:21:ba:26:28:
9c:d8:d8:49:05:e5:fd:eb:d8:2c:12:2b:86:3e:98:99:42:95:
3b:49:fe:36:e7:04:e8:20:3a:3f:79:6e:f1:7f:b2:6c:37:b2:
17:c7:29:fa:9b:7c:9b:27:eb:0a:b2:88:b2:03:84:02:e4:c5:
85:0b:af:95:97:7e:6c:28:cf:44:4e:77:e6:d9:45:2a:94:3a:
7f:07:10:31:cb:04:ab:0b:82:77:01:f5:ce:f6:27:41:bf:1b:
de:94:ae:1f:c8:08:6d:6b:08:c4:08:90:ea:d3:ad:bb:30:8d:
ec:d1:c7:b5:43:0c:85:62:98:aa:3b:af:88:35:86:d3:02:bd:
d1:78:a2:83:e2:64:9a:cb:64:c2:bd:e2:9a:56:ef:ea:68:22:
6b:3d:40:13:31:32:31:5c:61:c1:bc:89:72:d2:72:b1:ee:3c:
30:cf:0d:04:5c:7a:d8:55:72:d6:9c:81:93:cf:8f:f2:bb:bc:
f9:d5:78:ec:79:43:76:f3:79:26:9e:7e:86:42:6b:3b:df:0c:
8f:38:56:5f:a5:f2:4e:16:d9:57:e9:91:2c:a7:fb:40:15:ba:
6f:3d:4b:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTmbOzGqr1SnizbjIjnwioH4NhrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MDUyMTEzMzBaFw0yNzA4MDQyMTE4MzBaMDMxMTAvBgNV
BAMTKERENTYzODI4MUU3QjJBQjAzQzM5RjQ1RTQzOUM5Q0UzQTFGMzQyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4kOlw4Fm3Tg2Ekk/idBOigl2
a+CSG7SGl9hB2JNkNCcW+4g9WHnsx8MEvhSO1zczJyAy1W5Qe9qZbglChQ+cNKC5
nkGeNQZV8p+GavdS3/fnMyDgHGKMzix0AzD/+0tVC7NAMi+BNdh1fHJJp4pRVXL0
KwI64OYwEbdQwvHuEFNoF0ur/XNvSp82B3JwPSdFn/7O6EjvZ+Ad1VnRv6joroOn
CyEHC8cFycjhJ1p3+FTJgPEueFmRFCay8GkgQVGX+cAqXILuiLMPWXTTeMZ7+/JO
FajvFMrXyJbBHnyo4ghP1DZSdg9BbkQevGp12/JJfpUgb3mypofWByMBOfw9AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU3VY4KB57KrA8OfReQ5yc46HzQg8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjc1MDAyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCM8LE
MA0GCSqGSIb3DQEBCwUAA4IBAQBVip3CyLpwrnrxP8KoMbN7NyBs50Q09cbsk713
QjaLWiG6Jiic2NhJBeX969gsEiuGPpiZQpU7Sf425wToIDo/eW7xf7JsN7IXxyn6
m3ybJ+sKsoiyA4QC5MWFC6+Vl35sKM9ETnfm2UUqlDp/BxAxywSrC4J3AfXO9idB
vxvelK4fyAhtawjECJDq0627MI3s0ce1QwyFYpiqO6+INYbTAr3ReKKD4mSay2TC
veKaVu/qaCJrPUATMTIxXGHBvIly0nKx7jwwzw0EXHrYVXLWnIGTz4/yu7z51Xjs
eUN283kmnn6GQms73wyPOFZfpfJOFtlX6ZEsp/tAFbpvPUse
-----END CERTIFICATE-----
Generated at Tue Aug 11 16:57:29 2026 by rpki-client