Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197359.roa
File: AS197359.roa (raw, json)
Hash identifier: 4WjWHGFgj2BF8BYZg9nj6ec5Ezu3tC4ZQEs/C161Qg0=
Subject key identifier: 54:EB:2B:96:ED:58:3B:3E:07:D3:91:2B:4D:49:0F:68:49:C7:73:7E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1E0D3E3992D11DBB02B0D08558213FD39D79A99A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197359.roa
Signing time: Thu 11 Jun 2026 09:29:19 +0000
ROA not before: Thu 11 Jun 2026 09:24:19 +0000
ROA not after: Thu 10 Jun 2027 09:29:19 +0000
asID: 197359
IP address blocks: 51.146.116.0/22 maxlen: 24
51.146.120.0/22 maxlen: 24
188.220.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0d:3e:39:92:d1:1d:bb:02:b0:d0:85:58:21:3f:d3:9d:79:a9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 11 09:24:19 2026 GMT
Not After : Jun 10 09:29:19 2027 GMT
Subject: CN=54EB2B96ED583B3E07D3912B4D490F6849C7737E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:d0:32:10:01:1e:7c:00:1b:78:8d:64:da:
ea:23:a8:ca:a3:fb:9f:02:95:63:8c:7b:20:24:ba:
11:f3:d9:0d:d1:b3:ea:88:e8:2b:2e:8f:a4:db:5d:
61:c5:1e:4d:39:5a:95:f1:96:ff:29:8e:f3:5f:5f:
9b:51:c9:f5:53:bd:f5:03:fa:ec:0b:15:17:e3:d2:
6a:cc:64:a6:0d:0c:df:0a:a8:36:bc:36:40:67:0d:
b9:bb:2b:d5:87:f5:de:ba:38:81:7f:ca:06:0f:75:
8c:ce:45:c4:d4:09:9f:b7:9b:01:b8:08:c2:7c:9c:
19:4c:a6:1a:0c:3f:20:b1:29:1b:15:27:8c:f3:3c:
e7:75:fa:5e:ad:5c:ad:d6:17:88:a3:ef:3c:f5:15:
3a:81:53:80:8c:32:21:b0:53:cd:54:6b:39:62:62:
2c:c3:df:08:c9:51:be:88:62:b3:82:0b:80:30:7b:
6e:bd:77:dd:e8:1a:5a:7e:8b:15:43:f5:79:0f:53:
74:41:bd:0d:fc:28:3a:1c:46:23:0f:ce:2c:df:29:
4e:f0:33:48:24:e2:cf:0a:90:c2:41:44:e5:45:2f:
2d:45:5f:dc:36:47:54:64:6e:9e:21:b3:fc:db:72:
3b:1a:cc:57:2c:0f:e8:9b:16:07:d0:ce:61:d9:a9:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EB:2B:96:ED:58:3B:3E:07:D3:91:2B:4D:49:0F:68:49:C7:73:7E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.116.0-51.146.123.255
188.220.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:da:0e:a2:ff:ea:e4:f3:07:27:a7:36:d1:91:c0:d7:67:70:
fd:65:f8:1e:a1:ad:b3:c6:98:6e:de:0c:6d:4b:22:0c:ab:60:
25:d9:cd:af:06:f8:3b:55:4b:f5:06:5f:1f:a8:1b:0d:87:5f:
25:9c:f9:7d:1c:d1:5b:9e:ac:30:34:02:a4:d6:cc:3e:09:42:
71:b6:55:47:3b:53:6d:4f:23:8f:23:73:f7:ed:a7:d1:0a:af:
2e:e7:ac:fc:c0:a4:36:d1:af:0d:f7:48:ef:bc:8f:29:45:78:
00:ee:88:dd:55:31:02:cf:71:f3:52:48:2c:ae:de:2c:46:3b:
93:46:04:74:3a:51:b3:54:cf:27:cc:73:4c:af:40:80:f4:55:
91:5f:ed:11:16:ba:e1:99:f3:32:55:a7:8e:77:8e:fc:50:66:
bf:2d:89:9c:e5:47:63:9f:c7:75:c4:89:f3:ee:20:7f:6c:10:
db:ae:36:d9:af:87:d2:8d:19:7a:b8:85:9d:28:99:57:f7:64:
0c:ab:b9:43:15:d9:5b:24:42:6f:ea:10:93:a4:e5:e8:4c:fa:
6e:60:40:2e:1e:4e:cd:66:8a:56:12:76:5e:a8:50:5a:1b:e5:
63:bf:12:1c:70:7f:37:62:72:48:64:0e:2a:b9:6b:f6:96:69:
48:98:00:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUHg0+OZLRHbsCsNCFWCE/0515qZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MTEwOTI0MTlaFw0yNzA2MTAwOTI5MTlaMDMxMTAvBgNV
BAMTKDU0RUIyQjk2RUQ1ODNCM0UwN0QzOTEyQjRENDkwRjY4NDlDNzczN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDNAyEAEefAAbeI1k2uojqMqj
+58ClWOMeyAkuhHz2Q3Rs+qI6Csuj6TbXWHFHk05WpXxlv8pjvNfX5tRyfVTvfUD
+uwLFRfj0mrMZKYNDN8KqDa8NkBnDbm7K9WH9d66OIF/ygYPdYzORcTUCZ+3mwG4
CMJ8nBlMphoMPyCxKRsVJ4zzPOd1+l6tXK3WF4ij7zz1FTqBU4CMMiGwU81Uazli
YizD3wjJUb6IYrOCC4Awe269d93oGlp+ixVD9XkPU3RBvQ38KDocRiMPzizfKU7w
M0gk4s8KkMJBROVFLy1FX9w2R1Rkbp4hs/zbcjsazFcsD+ibFgfQzmHZqeddAgMB
AAGjggIYMIICFDAdBgNVHQ4EFgQUVOsrlu1YOz4H05ErTUkPaEnHc34wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTk3MzU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAIz
knQDBAIzkngDBAC83GcwDQYJKoZIhvcNAQELBQADggEBAEraDqL/6uTzByenNtGR
wNdncP1l+B6hrbPGmG7eDG1LIgyrYCXZza8G+DtVS/UGXx+oGw2HXyWc+X0c0Vue
rDA0AqTWzD4JQnG2VUc7U21PI48jc/ftp9EKry7nrPzApDbRrw33SO+8jylFeADu
iN1VMQLPcfNSSCyu3ixGO5NGBHQ6UbNUzyfMc0yvQID0VZFf7REWuuGZ8zJVp453
jvxQZr8tiZzlR2Ofx3XEifPuIH9sENuuNtmvh9KNGXq4hZ0omVf3ZAyruUMV2Vsk
Qm/qEJOk5ehM+m5gQC4eTs1milYSdl6oUFob5WO/EhxwfzdickhkDiq5a/aWaUiY
AFc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:54 2026 by rpki-client