Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401650.roa
File: AS401650.roa (raw, json)
Hash identifier: evr1xKTia022YSnUZI17fYDd2PZgsu2RXomDtprHN3I=
Subject key identifier: 49:1D:6F:78:FF:12:4C:95:20:40:EE:E8:49:60:07:18:56:35:06:18
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 03D684DF3F53D79B34FC0DA75B1D177CA6C5BE32
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401650.roa
Signing time: Wed 24 Jun 2026 10:18:26 +0000
ROA not before: Wed 24 Jun 2026 10:13:26 +0000
ROA not after: Wed 23 Jun 2027 10:18:26 +0000
asID: 401650
IP address blocks: 51.146.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d6:84:df:3f:53:d7:9b:34:fc:0d:a7:5b:1d:17:7c:a6:c5:be:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 24 10:13:26 2026 GMT
Not After : Jun 23 10:18:26 2027 GMT
Subject: CN=491D6F78FF124C952040EEE84960071856350618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:3f:5d:50:80:07:e9:99:07:e6:af:cf:55:
c6:08:41:31:d7:d8:43:f6:43:b8:e8:8b:47:63:37:
06:4c:16:f8:a1:b6:a2:ba:bd:23:1d:ef:78:72:b9:
89:9b:ec:a6:90:fc:2d:97:b3:ca:4b:5f:29:8e:43:
ac:c1:d7:c3:fd:e4:e0:8a:63:f0:f6:ad:58:77:a3:
22:b1:f9:8a:c4:e8:39:b1:75:6b:10:42:9d:a2:78:
c8:f6:00:47:39:2f:40:82:23:fe:85:d8:f4:f7:ff:
b5:06:fb:0c:8f:56:45:5d:15:17:78:7b:3e:11:37:
2c:ba:0c:ce:8e:a5:80:df:7c:30:4a:7d:29:13:4e:
48:ec:43:87:01:39:ca:83:3d:2e:19:ed:be:aa:de:
53:65:ab:84:d1:b0:15:3f:e5:e6:02:38:1b:3b:03:
83:7e:ce:b5:6b:7c:ae:f6:db:06:7d:8b:d8:29:b5:
e1:69:06:53:5e:86:21:05:a2:05:14:12:54:03:bb:
49:e5:a4:c6:4e:f4:99:bc:8d:82:c2:e3:68:c6:03:
35:07:45:ce:ef:c0:d2:87:f1:95:f4:45:a9:14:d9:
eb:93:f0:48:56:d1:91:86:45:61:e2:69:47:ab:3b:
0d:0c:e0:57:49:89:e0:09:e2:31:b4:01:15:95:61:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1D:6F:78:FF:12:4C:95:20:40:EE:E8:49:60:07:18:56:35:06:18
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:83:ad:be:55:ed:3e:79:64:b0:48:1a:d5:3c:a1:63:e6:7d:
66:47:ae:23:93:e7:16:e2:68:5d:9d:40:82:88:c9:6d:01:17:
f8:12:ed:42:77:2c:50:9e:6b:e7:9c:86:02:a2:ee:e0:7a:71:
91:2d:bd:20:6e:ce:6c:71:92:1b:f1:60:9d:fc:e4:8b:58:ff:
2b:af:6d:4b:cb:3d:6e:19:6b:1f:f3:f5:35:24:85:ef:da:b3:
47:70:d9:18:6e:b5:6a:5d:e3:e2:92:5a:b9:87:71:09:78:8f:
70:40:f0:c3:f5:a1:61:51:80:65:87:eb:9e:aa:e3:a6:c6:45:
53:c2:ec:21:df:9d:05:bf:14:a9:ee:7a:61:12:49:4b:f9:8c:
c9:2c:0f:74:0a:1f:29:51:b5:4f:89:43:b6:df:12:15:31:13:
0f:49:7b:e4:b7:49:1a:33:0b:54:8d:98:df:11:02:57:dc:9c:
17:a1:aa:9e:69:e3:8e:ac:e6:af:1e:14:77:e5:f9:2d:14:4d:
5f:ea:da:05:76:cd:72:b3:57:ac:a6:65:ca:bf:a0:5f:cb:3a:
c5:12:c1:e7:82:2b:1a:1c:39:cd:9a:94:40:b3:07:ea:bb:4c:
c3:8c:49:49:08:fc:9e:e8:6a:98:e3:42:aa:5a:27:ae:ad:0c:
34:2b:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:38 2026 by rpki-client