Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51082.roa
File: AS51082.roa (raw, json)
Hash identifier: zapGDyepONzzK+Nb5No6773y0on7/L58OWSJWH25gHw=
Subject key identifier: BE:51:C6:3B:54:2F:31:A9:C5:20:D1:FE:8B:A7:62:8B:6C:5D:29:C8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3E842D6F4CEBF453ABC87342F1ED739B0F9CFFF1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51082.roa
Signing time: Mon 08 Jun 2026 17:27:54 +0000
ROA not before: Mon 08 Jun 2026 17:22:54 +0000
ROA not after: Mon 07 Jun 2027 17:27:54 +0000
asID: 51082
IP address blocks: 96.62.152.0/24 maxlen: 24
140.233.167.0/24 maxlen: 24
140.233.181.0/24 maxlen: 24
140.233.182.0/24 maxlen: 24
143.14.126.0/24 maxlen: 24
143.14.245.0/24 maxlen: 24
143.14.250.0/24 maxlen: 24
146.103.31.0/24 maxlen: 24
147.79.31.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
148.135.176.0/24 maxlen: 24
148.135.181.0/24 maxlen: 24
155.117.210.0/24 maxlen: 24
155.117.214.0/24 maxlen: 24
162.141.107.0/24 maxlen: 24
162.141.120.0/24 maxlen: 24
167.148.86.0/24 maxlen: 24
168.222.91.0/24 maxlen: 24
168.222.93.0/24 maxlen: 24
168.222.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:84:2d:6f:4c:eb:f4:53:ab:c8:73:42:f1:ed:73:9b:0f:9c:ff:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 8 17:22:54 2026 GMT
Not After : Jun 7 17:27:54 2027 GMT
Subject: CN=BE51C63B542F31A9C520D1FE8BA7628B6C5D29C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:8f:2c:b7:62:68:31:6e:b8:85:0c:bb:e1:
0f:5e:ea:c3:f7:23:e0:1c:9b:27:95:c9:5d:d4:30:
0a:7f:24:39:b9:c7:a5:5b:14:10:5c:d2:03:30:fa:
b9:84:b7:c9:db:45:4e:21:31:59:75:e3:28:f3:c8:
df:33:1f:89:39:1c:30:7d:44:78:a0:5e:7d:99:3f:
84:b2:8a:2e:05:0e:87:d6:76:73:8c:95:70:53:d8:
04:63:00:c8:e4:f4:c2:5a:b1:e1:d6:e5:7a:6a:97:
03:db:b7:5c:3d:00:b8:4f:5b:9c:82:ad:74:9c:90:
78:f5:9e:a9:43:9b:f4:b9:e1:6e:96:6f:bb:c5:39:
0f:df:c9:7f:57:8c:f1:50:67:a9:6c:1d:81:94:0a:
4c:c2:8f:4f:8b:ef:d4:06:1e:7c:cf:53:fb:c7:ce:
28:ea:8c:96:b4:a7:48:6b:a9:2a:48:1c:e8:8a:af:
de:f4:73:26:9f:e1:8a:5b:b6:44:6a:58:9e:98:fa:
37:dc:a7:66:a0:ab:91:6e:9b:bc:32:ea:b6:ca:37:
d7:d9:89:71:18:64:7f:56:10:75:d5:49:3f:51:cf:
74:db:ae:67:7b:ee:ce:ec:d9:9e:4e:92:ec:b5:61:
58:04:57:5e:6e:17:b2:95:0a:a6:c1:ee:96:ab:28:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:51:C6:3B:54:2F:31:A9:C5:20:D1:FE:8B:A7:62:8B:6C:5D:29:C8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.152.0/24
140.233.167.0/24
140.233.181.0-140.233.182.255
143.14.126.0/24
143.14.245.0/24
143.14.250.0/24
146.103.31.0/24
147.79.31.0/24
148.135.173.0/24
148.135.176.0/24
148.135.181.0/24
155.117.210.0/24
155.117.214.0/24
162.141.107.0/24
162.141.120.0/24
167.148.86.0/24
168.222.91.0/24
168.222.93.0/24
168.222.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b5:97:85:4d:42:2b:49:4a:4c:a6:50:cc:f4:7c:14:c6:40:
81:81:0b:fc:78:55:e0:e6:b3:6d:ff:b9:f4:31:5a:ee:20:43:
b4:0d:4c:78:92:89:dd:d3:84:c0:88:47:de:2f:e4:f2:a4:c3:
d3:b5:e0:69:8e:39:24:a0:e1:d5:11:98:a8:ee:d1:19:9d:20:
b0:1c:9f:b2:41:80:75:d0:cc:0b:98:06:9d:fb:a5:43:1f:9c:
47:cc:db:0c:4a:c2:d4:45:c5:c8:81:31:07:82:76:8a:51:3b:
60:fc:33:1c:a4:42:9b:b0:5b:f3:76:04:ea:c0:6c:de:ac:48:
54:73:0f:d6:be:e5:d1:79:81:f9:9e:05:e3:71:1e:88:51:55:
b2:95:87:3d:bb:44:0e:6d:c7:cf:a4:3b:81:2b:b2:80:2d:cc:
7c:48:56:f5:9a:bc:86:a7:6f:ca:90:01:6a:01:96:da:a2:f0:
d4:9b:32:48:2e:26:8a:20:f7:2e:61:ba:2f:3e:08:02:6c:d1:
c6:9a:28:77:f8:5e:eb:c1:ab:57:d8:fb:d7:4d:a0:35:2f:8d:
40:c6:60:be:13:df:76:86:64:2c:a4:91:b6:77:2c:80:18:95:
ce:78:35:e4:78:61:19:5a:3f:f8:02:7c:8d:26:20:4f:08:ec:
b3:db:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:06 2026 by rpki-client