Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51082.roa
File:                     AS51082.roa (raw, json)
Hash identifier:          da7pWCCMDfqwcq0vJjeJfmQXoh4ECLErLfk8wjpI3mY=
Subject key identifier:   18:3D:81:56:4F:4B:57:22:1D:5E:E6:C1:97:37:D3:A5:B6:23:C5:8B
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       0407A8F6DC21F13A74D191FA0E34ED267377651E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51082.roa
Signing time:             Mon 08 Jun 2026 11:40:06 +0000
ROA not before:           Mon 08 Jun 2026 11:35:06 +0000
ROA not after:            Mon 07 Jun 2027 11:40:06 +0000
asID:                     51082
IP address blocks:        181.214.209.0/24 maxlen: 24
                          191.101.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:07:a8:f6:dc:21:f1:3a:74:d1:91:fa:0e:34:ed:26:73:77:65:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jun  8 11:35:06 2026 GMT
            Not After : Jun  7 11:40:06 2027 GMT
        Subject: CN=183D81564F4B57221D5EE6C19737D3A5B623C58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:66:dc:32:14:57:51:e0:57:cb:00:1c:37:
                    29:47:d1:7a:52:b8:46:40:95:4b:39:32:a4:89:a1:
                    e6:6f:78:c8:51:68:5d:17:f5:db:42:0a:02:bd:ef:
                    f9:c3:f3:4f:f1:a8:2e:5b:21:14:f7:3b:75:29:a9:
                    5d:e8:9a:90:62:14:d7:77:ab:3f:b6:1d:6d:be:a1:
                    50:e6:46:c7:8b:15:9b:41:92:d7:ed:54:b7:33:c8:
                    72:8d:4f:1f:be:3e:ea:6e:0a:cd:dd:1a:c7:2b:55:
                    1a:fa:ca:71:56:7a:d3:0a:95:2b:a9:16:fa:cb:4e:
                    a3:83:5b:c9:dd:79:dc:d6:2b:18:90:45:d2:bc:7f:
                    ef:1b:ed:a4:54:ac:75:93:ff:72:21:8c:1b:67:71:
                    db:56:a7:14:a8:9f:cd:0d:68:eb:47:b0:09:d2:b5:
                    ea:4b:da:57:b7:c2:11:8d:d7:75:eb:b1:39:7f:c8:
                    c9:1e:a7:de:60:4c:67:1d:00:74:a2:d5:4c:dc:b2:
                    b8:e3:02:c6:92:72:7d:f3:b8:1a:81:57:f4:cf:da:
                    e7:40:d8:c1:9e:bb:30:6f:3c:38:e6:fd:9d:8a:0b:
                    75:e4:d3:f4:cb:bb:d7:91:22:35:a2:bb:1c:05:ea:
                    67:42:54:f4:6d:8b:4f:17:5e:b9:d2:0b:83:e3:78:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3D:81:56:4F:4B:57:22:1D:5E:E6:C1:97:37:D3:A5:B6:23:C5:8B
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.209.0/24
                  191.101.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:27:e5:d5:5b:28:30:61:c0:60:37:54:25:94:8e:81:88:70:
         7c:54:08:fd:eb:12:02:7e:a1:a9:66:eb:ab:6b:f2:e5:e8:97:
         36:d3:6d:c5:37:47:00:8c:3d:59:bf:6f:e0:ae:7d:f0:bc:23:
         7d:a4:44:50:38:47:08:cb:96:85:30:fd:26:8b:63:ef:f5:97:
         38:86:8d:a2:02:6c:44:96:c2:cf:5e:3e:54:b9:1d:5c:9a:56:
         bd:c8:32:b0:78:ca:1c:cf:b9:b1:f8:f1:c5:34:fa:5d:dc:bb:
         11:63:94:30:91:58:a1:86:d2:4d:55:fb:07:5c:fb:95:ac:8b:
         91:7c:52:1f:55:38:da:09:c6:8d:e5:4d:fa:82:02:84:e3:0d:
         14:0b:17:ba:cf:8a:03:98:de:c5:21:06:d3:20:7d:aa:72:fe:
         38:6a:fe:88:5b:80:ec:bf:95:b5:fa:de:bd:6c:ee:85:87:30:
         f4:5b:0f:c0:e9:8c:fc:9d:8b:a1:2d:bc:2c:80:c7:2a:09:03:
         28:47:2a:62:50:9e:04:4d:ea:67:d7:1d:7d:20:87:97:be:b9:
         65:65:21:84:df:59:5e:a9:71:6b:9f:dc:86:50:53:3b:12:c1:
         e1:04:66:88:7c:6f:3b:6a:40:d8:9c:fa:12:0a:cf:0e:f0:e5:
         b0:ed:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:44 2026 by rpki-client