Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51430.roa
File: AS51430.roa (raw, json)
Hash identifier: D1038AryyFED9yluD9Xs38tFecqMRvm3xbzRNbvNtWg=
Subject key identifier: 42:6D:EE:33:E0:29:A6:D2:99:04:57:71:08:B7:D8:DF:DE:DB:66:1E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2AA2F953E0286B7579EA737082A74908DF5BD2AA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51430.roa
Signing time: Thu 05 Nov 2026 09:49:40 +0000
ROA not before: Thu 05 Nov 2026 09:44:40 +0000
ROA not after: Thu 04 Nov 2027 09:49:40 +0000
asID: 51430
IP address blocks: 82.21.212.0/24 maxlen: 24
82.22.247.0/24 maxlen: 24
82.23.201.0/24 maxlen: 24
82.23.230.0/24 maxlen: 24
82.23.237.0/24 maxlen: 24
82.24.247.0/24 maxlen: 24
82.25.240.0/24 maxlen: 24
82.25.247.0/24 maxlen: 24
82.26.232.0/24 maxlen: 24
82.26.247.0/24 maxlen: 24
82.27.228.0/24 maxlen: 24
82.27.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a2:f9:53:e0:28:6b:75:79:ea:73:70:82:a7:49:08:df:5b:d2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 5 09:44:40 2026 GMT
Not After : Nov 4 09:49:40 2027 GMT
Subject: CN=426DEE33E029A6D29904577108B7D8DFDEDB661E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:38:0a:a9:9d:0c:67:0c:3a:cd:1d:5c:43:
99:12:c8:1b:84:25:da:46:bf:6b:7f:72:dc:72:54:
f2:ff:70:8a:30:d0:9e:63:e9:c1:6e:14:d9:35:5a:
bd:b1:30:9c:84:c8:6f:f3:1e:38:c7:d0:3c:8a:60:
00:aa:93:92:26:8c:f8:9f:44:10:5c:27:69:a9:46:
12:4e:ff:3b:3e:72:63:cf:f1:f0:95:89:86:e2:c4:
d9:38:62:9b:ae:59:00:a5:53:03:25:d6:0e:1d:6f:
1f:44:3c:f2:13:8d:60:20:d6:09:ff:c9:73:3f:06:
9f:28:68:55:18:bf:47:78:d6:eb:e1:88:8b:ef:14:
44:ff:7a:e5:c9:70:b3:25:8c:11:d6:d8:35:2d:ba:
46:1b:6a:02:ef:37:87:df:c5:4e:00:9c:20:46:e9:
a2:0d:d1:b6:14:a7:35:d6:b3:df:91:97:e9:0c:65:
0a:b6:fc:33:9e:d2:35:c1:09:84:82:e2:88:18:0f:
1e:f0:58:15:39:f0:3e:48:e2:25:bc:41:db:fd:4a:
cf:88:4b:3f:27:ca:d2:a8:34:c4:ac:84:52:cb:0c:
ec:3d:2f:97:6d:dd:0b:61:43:d6:2b:21:c1:0c:68:
48:da:02:94:7b:c3:bf:95:c5:9a:7c:3c:89:fa:ff:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:EE:33:E0:29:A6:D2:99:04:57:71:08:B7:D8:DF:DE:DB:66:1E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.212.0/24
82.22.247.0/24
82.23.201.0/24
82.23.230.0/24
82.23.237.0/24
82.24.247.0/24
82.25.240.0/24
82.25.247.0/24
82.26.232.0/24
82.26.247.0/24
82.27.228.0/24
82.27.247.0/24
Signature Algorithm: sha256WithRSAEncryption
49:71:6a:bd:db:1c:b1:fa:81:5c:79:ee:e6:49:15:95:3d:32:
ad:60:7c:e8:ec:25:0f:1f:32:f6:d5:48:0c:5a:1d:e0:1d:f4:
89:c1:ca:73:1b:98:35:18:05:80:d1:b8:36:d6:25:ba:93:bb:
96:5d:9e:03:92:ae:82:b8:cf:b7:f7:5c:6e:3c:bc:b8:2c:24:
6d:2a:4a:d1:6b:62:fe:2c:14:fb:7b:ba:33:92:ac:b8:c4:db:
ed:c0:bd:b0:64:b2:0d:b8:ea:e0:8f:52:54:4f:4e:c6:e5:40:
01:fe:6f:4d:12:8d:5f:f1:69:e1:10:47:87:f9:84:a7:52:49:
62:58:63:f7:9d:33:c7:81:f0:e5:65:f5:3c:3a:84:9f:44:d2:
17:f9:58:73:a1:dd:0c:6e:14:ea:1d:63:01:e5:8b:fe:a8:ce:
5a:50:25:fc:a4:96:45:b5:3e:a1:66:40:6e:d0:66:55:63:0c:
ea:f2:6d:e7:d0:81:85:eb:a2:3e:80:bb:b9:3e:24:0e:55:28:
de:2a:59:02:2d:b5:f7:b6:b5:e6:43:14:b4:07:d2:eb:0d:0d:
de:23:39:13:bc:31:73:7e:25:1b:3c:a1:a8:71:45:9f:e8:c7:
99:9f:34:b9:36:09:cb:10:2c:1d:98:d9:18:a0:f8:c8:32:d3:
72:ac:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:57:07 2026 by rpki-client