Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS132359.roa
File: AS132359.roa (raw, json)
Hash identifier: QKqMPICwrj2Kgyxs0MHUSopbjBhW+gBxzLpchIQbAOo=
Subject key identifier: E1:FD:73:4A:82:04:9C:49:BF:35:87:59:73:07:5E:B9:1C:0B:6B:F1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 58D0177ED916AD3E68CA74A6E106351A79C3A2D4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS132359.roa
Signing time: Thu 11 Jun 2026 07:45:11 +0000
ROA not before: Thu 11 Jun 2026 07:40:11 +0000
ROA not after: Thu 10 Jun 2027 07:45:11 +0000
asID: 132359
IP address blocks: 51.194.68.0/24 maxlen: 24
51.241.53.0/24 maxlen: 24
78.105.112.0/24 maxlen: 24
78.105.149.0/24 maxlen: 24
78.105.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d0:17:7e:d9:16:ad:3e:68:ca:74:a6:e1:06:35:1a:79:c3:a2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 11 07:40:11 2026 GMT
Not After : Jun 10 07:45:11 2027 GMT
Subject: CN=E1FD734A82049C49BF35875973075EB91C0B6BF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:a2:15:f7:d0:66:e9:ea:d0:87:87:30:1a:
c3:8d:e1:60:a9:43:59:31:ee:45:9d:0b:2c:58:cc:
83:d2:7c:a0:7c:2f:12:b2:10:92:26:0c:d3:7a:53:
e5:c2:10:3d:43:f9:30:7f:7b:c0:a3:dc:65:30:6f:
2c:83:c2:30:a8:b1:d8:13:5c:86:e1:67:69:28:b6:
a1:66:f3:98:a8:c1:d1:fc:13:9f:7a:99:68:3f:62:
d9:ac:6f:b0:05:2d:3d:9a:a0:83:d3:64:af:1d:71:
f7:66:51:18:0b:85:ac:25:1a:79:11:2b:7a:1c:69:
8f:6c:56:1c:21:1d:ca:99:ff:a0:38:ef:9f:ab:67:
8a:70:78:9b:58:65:e5:41:4d:d2:f5:ea:c6:17:04:
39:31:bb:e4:df:11:d0:ba:a7:01:31:ce:80:25:9c:
08:d9:9e:32:0a:f6:84:48:14:9d:80:ad:35:42:06:
cc:31:aa:b1:68:b4:81:ed:c6:10:34:c6:b4:57:d4:
6c:8e:88:9e:95:8c:96:30:64:b7:66:fe:f1:b9:aa:
eb:58:1e:a2:ab:72:42:bd:a5:d6:fa:43:f0:44:da:
0d:d4:5e:17:17:58:78:ec:12:79:11:03:23:64:5f:
ba:95:ae:86:78:17:e7:9f:ff:3b:e4:9d:6d:dc:63:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:73:4A:82:04:9C:49:BF:35:87:59:73:07:5E:B9:1C:0B:6B:F1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS132359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.68.0/24
51.241.53.0/24
78.105.112.0/24
78.105.149.0/24
78.105.204.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e1:27:ff:21:5d:11:de:e3:c4:ad:78:39:f6:ee:90:18:c2:
e6:b1:5d:d7:14:bd:11:df:f5:35:b0:dd:97:de:dd:b7:dd:74:
0a:71:6a:d9:fa:ed:94:bd:7b:cc:f5:55:43:f7:dc:a1:41:8b:
c1:f7:e1:7c:dd:2f:6a:51:6b:53:7e:23:b9:11:8c:f8:1d:4e:
e1:3c:91:2f:24:2e:8c:52:94:54:a0:bc:f8:66:30:e4:63:63:
0a:2f:4b:b5:c0:e2:37:34:d5:f2:af:e9:3a:9a:01:eb:cb:77:
35:b3:58:63:fd:ee:e4:9b:23:df:44:37:82:27:47:a1:78:7a:
5b:5b:23:95:4a:4e:3c:26:8d:3a:ca:3d:ea:9d:10:e6:40:68:
20:89:b9:d7:73:44:ad:aa:46:7e:b7:7d:6c:05:81:ba:54:46:
d4:bf:08:4d:40:c5:c2:ba:85:18:e5:d2:2e:22:9b:a8:36:61:
9f:be:e4:fe:98:ff:e2:c3:63:ac:2c:b3:b6:bb:ef:36:e3:25:
b0:b7:7c:32:e6:3d:13:d5:11:4d:15:71:74:6e:11:a8:17:83:
6c:32:a5:19:ed:e6:46:3d:5c:ab:b3:e2:43:3d:b1:af:59:0c:
2e:dd:84:01:d9:9e:bc:0b:1e:73:de:15:c9:2a:79:bf:28:97:
17:1c:7c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:53 2026 by rpki-client