Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401783.roa
File: AS401783.roa (raw, json)
Hash identifier: miuv1fYVxRfRluwmnKrAJUZjHfrFkSYLUtorLWJ4DBY=
Subject key identifier: F2:2D:B2:29:72:78:6C:E7:80:6B:FF:F7:16:45:B1:C3:93:90:6E:95
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 42D5221FD3FE8CBFA6AC351B86E33A01D0107573
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401783.roa
Signing time: Mon 31 Aug 2026 09:31:46 +0000
ROA not before: Mon 31 Aug 2026 09:26:46 +0000
ROA not after: Mon 30 Aug 2027 09:31:46 +0000
asID: 401783
IP address blocks: 51.146.9.0/24 maxlen: 24
51.146.15.0/24 maxlen: 24
51.146.23.0/24 maxlen: 24
51.146.36.0/24 maxlen: 24
51.146.37.0/24 maxlen: 24
51.146.39.0/24 maxlen: 24
51.146.58.0/24 maxlen: 24
51.146.65.0/24 maxlen: 24
51.146.70.0/24 maxlen: 24
51.146.75.0/24 maxlen: 24
51.146.78.0/24 maxlen: 24
51.146.81.0/24 maxlen: 24
51.146.82.0/24 maxlen: 24
51.146.84.0/24 maxlen: 24
51.146.86.0/24 maxlen: 24
51.146.87.0/24 maxlen: 24
51.146.109.0/24 maxlen: 24
51.146.110.0/24 maxlen: 24
51.146.111.0/24 maxlen: 24
51.146.112.0/24 maxlen: 24
51.146.113.0/24 maxlen: 24
51.146.115.0/24 maxlen: 24
51.146.116.0/24 maxlen: 24
51.146.117.0/24 maxlen: 24
51.146.118.0/24 maxlen: 24
51.146.119.0/24 maxlen: 24
51.146.122.0/24 maxlen: 24
51.146.123.0/24 maxlen: 24
51.146.124.0/24 maxlen: 24
51.146.125.0/24 maxlen: 24
51.146.133.0/24 maxlen: 24
51.146.134.0/24 maxlen: 24
51.146.135.0/24 maxlen: 24
51.146.141.0/24 maxlen: 24
51.146.142.0/24 maxlen: 24
51.146.143.0/24 maxlen: 24
51.146.150.0/24 maxlen: 24
51.146.218.0/24 maxlen: 24
51.146.236.0/24 maxlen: 24
51.146.239.0/24 maxlen: 24
51.146.241.0/24 maxlen: 24
51.146.242.0/24 maxlen: 24
51.146.243.0/24 maxlen: 24
51.146.246.0/24 maxlen: 24
51.194.64.0/24 maxlen: 24
51.194.68.0/24 maxlen: 24
51.194.87.0/24 maxlen: 24
51.194.113.0/24 maxlen: 24
51.194.140.0/24 maxlen: 24
51.194.193.0/24 maxlen: 24
51.194.202.0/24 maxlen: 24
51.194.204.0/24 maxlen: 24
51.194.206.0/24 maxlen: 24
51.194.208.0/24 maxlen: 24
51.194.209.0/24 maxlen: 24
51.194.214.0/24 maxlen: 24
51.194.216.0/24 maxlen: 24
51.194.217.0/24 maxlen: 24
51.194.218.0/24 maxlen: 24
51.194.220.0/24 maxlen: 24
51.194.222.0/24 maxlen: 24
94.116.96.0/21 maxlen: 24
94.116.104.0/21 maxlen: 24
94.116.208.0/21 maxlen: 24
94.116.216.0/21 maxlen: 24
188.220.144.0/24 maxlen: 24
188.220.207.0/24 maxlen: 24
188.220.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d5:22:1f:d3:fe:8c:bf:a6:ac:35:1b:86:e3:3a:01:d0:10:75:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 31 09:26:46 2026 GMT
Not After : Aug 30 09:31:46 2027 GMT
Subject: CN=F22DB22972786CE7806BFFF71645B1C393906E95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:0d:56:ef:a6:29:78:d5:08:dc:4b:9a:d6:
c3:0d:aa:96:bd:79:80:5b:1b:ba:5d:26:c3:d0:17:
93:a3:a7:86:70:bb:22:dc:d3:e0:64:95:f6:b0:d6:
91:e0:36:56:0a:9d:2e:e5:63:bc:20:b2:33:6a:de:
66:f7:60:12:ca:e6:80:16:53:26:07:01:14:10:09:
6f:41:8d:5a:4a:f9:f3:f5:68:11:94:29:9a:de:6f:
72:db:10:12:68:6e:fe:ff:dc:bc:76:21:1e:0b:00:
6b:e8:77:ac:19:79:05:d5:b3:b5:5c:70:e8:5b:74:
6e:30:8c:6c:a2:da:6a:a3:0c:53:35:be:85:6a:28:
bb:64:12:39:6e:d0:25:01:fc:36:80:c7:fe:75:b5:
2e:6e:02:53:da:89:3a:db:50:c9:bd:a4:29:10:4f:
4d:ed:d8:36:14:45:ed:fa:4a:70:51:6b:f1:e5:6a:
7d:48:17:4a:74:bd:71:59:04:2d:4a:1a:8b:8d:2b:
97:f9:0b:bf:68:95:b5:63:25:bc:f8:66:c0:2c:f3:
93:36:46:c4:c4:32:08:80:3d:da:78:bd:d6:b2:1d:
b0:b3:07:c2:f9:05:58:47:60:e7:9b:55:24:80:9f:
e9:da:31:a0:d3:86:58:ac:f2:55:cb:9b:aa:e3:c9:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2D:B2:29:72:78:6C:E7:80:6B:FF:F7:16:45:B1:C3:93:90:6E:95
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401783.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.9.0/24
51.146.15.0/24
51.146.23.0/24
51.146.36.0/23
51.146.39.0/24
51.146.58.0/24
51.146.65.0/24
51.146.70.0/24
51.146.75.0/24
51.146.78.0/24
51.146.81.0-51.146.82.255
51.146.84.0/24
51.146.86.0/23
51.146.109.0-51.146.113.255
51.146.115.0-51.146.119.255
51.146.122.0-51.146.125.255
51.146.133.0-51.146.135.255
51.146.141.0-51.146.143.255
51.146.150.0/24
51.146.218.0/24
51.146.236.0/24
51.146.239.0/24
51.146.241.0-51.146.243.255
51.146.246.0/24
51.194.64.0/24
51.194.68.0/24
51.194.87.0/24
51.194.113.0/24
51.194.140.0/24
51.194.193.0/24
51.194.202.0/24
51.194.204.0/24
51.194.206.0/24
51.194.208.0/23
51.194.214.0/24
51.194.216.0-51.194.218.255
51.194.220.0/24
51.194.222.0/24
94.116.96.0/20
94.116.208.0/20
188.220.144.0/24
188.220.207.0/24
188.220.209.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a6:c0:70:f1:2e:1a:b5:13:10:bc:35:66:15:10:68:f2:4b:
cc:c1:23:0e:ab:44:51:96:80:7a:47:27:22:d9:36:5c:7d:19:
1d:d2:e4:e9:0b:1a:76:49:e3:18:5a:92:8c:34:a5:2f:45:36:
b7:84:88:3e:d8:5d:ac:3b:45:8c:02:5c:15:84:22:69:32:d9:
80:33:e5:0d:26:41:8b:82:61:da:05:4b:94:60:e2:bc:84:b8:
d7:e5:34:a7:7c:17:ce:25:c0:5b:cb:a9:2e:c4:fb:53:7d:66:
99:de:6e:85:d4:de:2b:ca:e7:63:48:2b:cb:0a:c2:4e:e7:70:
54:49:39:21:5b:ba:d6:f3:d0:47:b9:23:78:fb:e6:4e:a5:7f:
24:55:2f:3a:be:4d:ec:7d:33:27:64:2a:b4:2d:2a:b9:50:fc:
e3:4b:c8:c1:80:bf:57:89:41:9f:3b:ca:13:28:52:79:a4:65:
8f:ca:4c:3e:d6:ca:4c:8b:2a:41:19:ff:43:1e:15:14:ff:a5:
87:95:f6:a7:75:85:54:ee:12:68:f5:b4:a4:45:24:0b:5b:96:
9a:46:c9:53:37:9e:3f:55:98:97:49:ac:97:5d:42:28:27:9d:
e1:13:09:1c:e9:d8:c2:bb:5f:05:dc:04:ff:34:4c:17:0c:4e:
bb:af:a7:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUQtUiH9P+jL+mrDUbhuM6AdAQdXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MzEwOTI2NDZaFw0yNzA4MzAwOTMxNDZaMDMxMTAvBgNV
BAMTKEYyMkRCMjI5NzI3ODZDRTc4MDZCRkZGNzE2NDVCMUMzOTM5MDZFOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUQ1W76YpeNUI3Eua1sMNqpa9
eYBbG7pdJsPQF5Ojp4ZwuyLc0+Bklfaw1pHgNlYKnS7lY7wgsjNq3mb3YBLK5oAW
UyYHARQQCW9BjVpK+fP1aBGUKZreb3LbEBJobv7/3Lx2IR4LAGvod6wZeQXVs7Vc
cOhbdG4wjGyi2mqjDFM1voVqKLtkEjlu0CUB/DaAx/51tS5uAlPaiTrbUMm9pCkQ
T03t2DYURe36SnBRa/Hlan1IF0p0vXFZBC1KGouNK5f5C79olbVjJbz4ZsAs85M2
RsTEMgiAPdp4vdayHbCzB8L5BVhHYOebVSSAn+naMaDThlis8lXLm6rjybM9AgMB
AAGjggNQMIIDTDAdBgNVHQ4EFgQU8i2yKXJ4bOeAa//3FkWxw5OQbpUwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAxNzgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIIBYwYIKwYBBQUHAQcBAf8EggFSMIIBTjCCAUoEAgAB
MIIBQgMEADOSCQMEADOSDwMEADOSFwMEATOSJAMEADOSJwMEADOSOgMEADOSQQME
ADOSRgMEADOSSwMEADOSTjAMAwQAM5JRAwQAM5JSAwQAM5JUAwQBM5JWMAwDBAAz
km0DBAEzknAwDAMEADOScwMEAzOScDAMAwQBM5J6AwQBM5J8MAwDBAAzkoUDBAMz
koAwDAMEADOSjQMEBDOSgAMEADOSlgMEADOS2gMEADOS7AMEADOS7zAMAwQAM5Lx
AwQCM5LwAwQAM5L2AwQAM8JAAwQAM8JEAwQAM8JXAwQAM8JxAwQAM8KMAwQAM8LB
AwQAM8LKAwQAM8LMAwQAM8LOAwQBM8LQAwQAM8LWMAwDBAMzwtgDBAAzwtoDBAAz
wtwDBAAzwt4DBARedGADBARedNADBAC83JADBAC83M8DBAC83NEwDQYJKoZIhvcN
AQELBQADggEBAJqmwHDxLhq1ExC8NWYVEGjyS8zBIw6rRFGWgHpHJyLZNlx9GR3S
5OkLGnZJ4xhakow0pS9FNreEiD7YXaw7RYwCXBWEImky2YAz5Q0mQYuCYdoFS5Rg
4ryEuNflNKd8F84lwFvLqS7E+1N9ZpneboXU3ivK52NIK8sKwk7ncFRJOSFbutbz
0Ee5I3j75k6lfyRVLzq+Tex9MydkKrQtKrlQ/ONLyMGAv1eJQZ87yhMoUnmkZY/K
TD7WykyLKkEZ/0MeFRT/pYeV9qd1hVTuEmj1tKRFJAtblppGyVM3nj9VmJdJrJdd
QignneETCRzp2MK7XwXcBP80TBcMTruvp+g=
-----END CERTIFICATE-----
Generated at Thu Sep 3 07:49:01 2026 by rpki-client