Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS154132.roa
File: AS154132.roa (raw, json)
Hash identifier: 0zqrT9LI4cp0Gz0rhp8JCX2cVILwhiVg5tcxEpB7RzA=
Subject key identifier: 59:06:AB:D8:11:F5:E4:E8:43:B0:4C:FC:92:ED:39:71:0E:65:8E:77
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 566AA80D7EED622B1D0A526D8E9F37287B1AC13A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS154132.roa
Signing time: Fri 12 Jun 2026 05:46:07 +0000
ROA not before: Fri 12 Jun 2026 05:41:07 +0000
ROA not after: Fri 11 Jun 2027 05:46:07 +0000
asID: 154132
IP address blocks: 51.146.111.0/24 maxlen: 24
51.194.165.0/24 maxlen: 24
51.241.255.0/24 maxlen: 24
78.105.145.0/24 maxlen: 24
188.220.16.0/24 maxlen: 24
188.220.37.0/24 maxlen: 24
188.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:6a:a8:0d:7e:ed:62:2b:1d:0a:52:6d:8e:9f:37:28:7b:1a:c1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 12 05:41:07 2026 GMT
Not After : Jun 11 05:46:07 2027 GMT
Subject: CN=5906ABD811F5E4E843B04CFC92ED39710E658E77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:81:5c:6d:b5:b2:3e:37:ae:1e:c0:af:02:
b4:4b:2e:a5:e8:ab:ed:8d:7f:34:a2:52:68:e2:2b:
4e:fa:13:ca:45:a4:45:24:a7:ce:30:27:69:12:f9:
4c:35:b8:39:c5:2b:98:c3:f1:f6:5f:b4:bf:93:50:
b1:b0:23:0c:f7:8b:9a:07:d8:d3:cb:42:f2:1d:30:
6c:a3:84:08:3b:ae:87:75:c1:b6:39:8d:63:2b:f3:
3d:97:11:01:ff:5d:62:11:85:f8:18:f2:67:d5:e1:
4c:48:74:f9:fc:c8:92:93:80:75:2a:14:68:b1:4f:
b4:4c:a9:9c:c5:6e:73:67:bd:c6:72:52:3c:7e:cf:
19:08:78:7a:8e:ce:77:01:fd:1c:ac:78:08:fd:e8:
c5:90:8e:99:ff:e1:ad:a1:dd:55:9a:68:67:7c:c2:
38:a2:47:ab:31:da:b6:a5:c4:d2:ba:0b:76:46:f5:
30:2c:a7:3b:0f:8c:7e:3f:0d:4b:ea:58:0d:0d:8d:
2c:ee:05:a0:bd:b0:40:d1:e4:12:46:d9:c1:70:1c:
56:ed:39:b2:72:35:53:ae:3b:dc:87:4e:e7:b2:81:
c4:d9:b4:0f:e3:28:5c:13:e8:83:07:b9:51:d6:71:
bb:c9:0f:09:fe:16:67:7e:d1:ac:07:24:e6:aa:e3:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:06:AB:D8:11:F5:E4:E8:43:B0:4C:FC:92:ED:39:71:0E:65:8E:77
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS154132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.111.0/24
51.194.165.0/24
51.241.255.0/24
78.105.145.0/24
188.220.16.0/24
188.220.37.0/24
188.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:86:db:e4:7f:f3:40:09:06:a9:87:da:f3:20:45:f6:35:93:
3c:12:79:ce:d9:aa:ee:02:3b:37:55:6d:22:22:a2:cb:57:19:
c0:0f:19:7f:81:8f:8b:8b:fd:27:b8:22:06:42:f4:8f:45:b6:
45:5d:17:12:c2:2d:ce:f7:75:16:22:ee:33:6c:97:84:a9:63:
27:ef:54:a3:59:3e:c0:2f:dd:f9:36:12:0d:11:67:73:c6:aa:
9f:18:49:1f:cb:d6:aa:9a:e5:36:1d:22:ea:84:8f:9c:33:58:
8c:23:24:00:f4:32:06:ce:22:78:06:6f:ad:b5:a0:d9:9a:74:
c8:d5:b2:63:f4:da:20:4a:0c:5d:8b:30:e1:09:22:e7:33:ef:
ce:57:ba:76:c7:3a:5e:ac:22:80:43:90:a3:58:1e:25:3d:02:
9c:0f:39:6e:07:94:b0:54:96:22:85:b2:9c:16:7d:86:e9:ea:
25:aa:d9:a1:fd:69:e4:40:c3:32:78:5f:6e:2b:85:da:44:ea:
9e:5d:fa:ef:af:43:15:45:0d:60:d0:63:c6:d1:3a:64:e9:84:
a0:42:7f:c1:d9:d8:fd:66:57:ce:ee:00:1a:a1:24:be:eb:d8:
ac:74:09:5a:9f:17:04:2b:c0:6e:ef:06:64:45:50:8f:d9:46:
ce:36:e4:cc
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUVmqoDX7tYisdClJtjp83KHsawTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MTIwNTQxMDdaFw0yNzA2MTEwNTQ2MDdaMDMxMTAvBgNV
BAMTKDU5MDZBQkQ4MTFGNUU0RTg0M0IwNENGQzkyRUQzOTcxMEU2NThFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjoFcbbWyPjeuHsCvArRLLqXo
q+2NfzSiUmjiK076E8pFpEUkp84wJ2kS+Uw1uDnFK5jD8fZftL+TULGwIwz3i5oH
2NPLQvIdMGyjhAg7rod1wbY5jWMr8z2XEQH/XWIRhfgY8mfV4UxIdPn8yJKTgHUq
FGixT7RMqZzFbnNnvcZyUjx+zxkIeHqOzncB/RyseAj96MWQjpn/4a2h3VWaaGd8
wjiiR6sx2ralxNK6C3ZG9TAspzsPjH4/DUvqWA0NjSzuBaC9sEDR5BJG2cFwHFbt
ObJyNVOuO9yHTueygcTZtA/jKFwT6IMHuVHWcbvJDwn+Fmd+0awHJOaq4/vzAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUWQar2BH15OhDsEz8ku05cQ5ljncwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTU0MTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAM5Jv
AwQAM8KlAwQAM/H/AwQATmmRAwQAvNwQAwQAvNwlAwQAvN0AMA0GCSqGSIb3DQEB
CwUAA4IBAQCPhtvkf/NACQaph9rzIEX2NZM8EnnO2aruAjs3VW0iIqLLVxnADxl/
gY+Li/0nuCIGQvSPRbZFXRcSwi3O93UWIu4zbJeEqWMn71SjWT7AL935NhINEWdz
xqqfGEkfy9aqmuU2HSLqhI+cM1iMIyQA9DIGziJ4Bm+ttaDZmnTI1bJj9NogSgxd
izDhCSLnM+/OV7p2xzperCKAQ5CjWB4lPQKcDzluB5SwVJYihbKcFn2G6eolqtmh
/WnkQMMyeF9uK4XaROqeXfrvr0MVRQ1g0GPG0Tpk6YSgQn/B2dj9ZlfO7gAaoSS+
69isdAlanxcEK8Bu7wZkRVCP2UbONuTM
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:51 2026 by rpki-client