Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197359.roa
File: AS197359.roa (raw, json)
Hash identifier: LxV1qHTmx57ye6FevjMqe52K6QyoP2lZyRqxrvdrXbQ=
Subject key identifier: 0B:CF:4F:10:1E:BD:BD:8B:E3:64:9C:66:74:7F:8D:8A:71:4A:88:34
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5EB85328D1E65C3A0C393CDD65140AAD71E42E36
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197359.roa
Signing time: Sun 06 Sep 2026 14:08:17 +0000
ROA not before: Sun 06 Sep 2026 14:03:17 +0000
ROA not after: Sun 05 Sep 2027 14:08:17 +0000
asID: 197359
IP address blocks: 51.146.105.0/24 maxlen: 24
188.220.103.0/24 maxlen: 24
188.221.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b8:53:28:d1:e6:5c:3a:0c:39:3c:dd:65:14:0a:ad:71:e4:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 6 14:03:17 2026 GMT
Not After : Sep 5 14:08:17 2027 GMT
Subject: CN=0BCF4F101EBDBD8BE3649C66747F8D8A714A8834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:d7:8c:b9:cc:80:d1:c5:30:6f:23:f5:54:
9e:79:75:bc:52:70:4c:20:6e:93:20:c8:64:ba:c1:
61:87:ed:7d:e6:1e:e6:39:0d:6a:a0:67:32:9b:60:
9e:c1:ef:b0:2e:bc:19:12:54:34:cb:00:0f:09:5e:
f6:3b:d4:61:9d:a5:6e:79:5b:4c:ec:0f:96:27:72:
c7:07:48:b6:d6:ac:10:fe:95:a5:aa:ca:a9:fc:05:
c8:e8:37:2f:87:48:e5:a4:a6:3e:3d:43:bd:2e:31:
0a:32:9b:99:d8:75:7c:9b:26:0d:9e:76:78:f8:84:
f8:e8:58:7c:09:5b:45:f3:3c:fb:eb:3f:a1:28:4f:
37:12:fc:07:0f:e1:ca:97:e8:e4:5f:ef:a0:f1:82:
60:ef:77:e5:02:26:c9:eb:af:a3:3b:78:ff:fe:6e:
5e:30:78:bb:89:16:21:4f:af:9f:b8:50:99:4e:20:
46:8c:00:f2:9c:6a:e2:ae:00:1d:3b:e3:e1:2b:71:
c8:e7:9e:d7:e7:2b:5d:b2:38:b6:df:87:b5:c1:37:
5e:84:05:4a:b1:6f:4d:4a:6d:bf:29:af:fe:5b:6f:
49:06:d3:63:53:22:e9:a6:80:4f:ba:03:dd:2e:a6:
a1:f8:5e:58:55:5d:e3:33:54:6c:03:27:26:fb:55:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CF:4F:10:1E:BD:BD:8B:E3:64:9C:66:74:7F:8D:8A:71:4A:88:34
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.105.0/24
188.220.103.0/24
188.221.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ff:c5:29:30:35:0b:5c:d1:8b:0b:4f:a5:5d:df:93:f5:3e:
be:ca:2c:c2:7b:ae:05:5c:32:17:3b:b6:12:0b:e6:97:5d:83:
a9:07:ab:87:9e:a8:3c:16:0e:62:82:80:66:da:ff:77:b5:c1:
bb:15:85:8c:50:f0:a1:e0:b9:e0:f3:cf:fa:41:b4:bf:90:cc:
a9:1c:37:57:64:2f:a3:9d:61:77:70:a2:39:9c:dd:0f:92:8c:
ed:89:9b:7c:b7:66:d5:a1:3e:e6:0a:06:6b:fd:0c:01:26:2e:
88:70:7d:0b:82:99:14:0f:34:f7:b9:3d:af:83:3f:cc:f0:40:
80:cd:d0:03:08:ac:66:b9:31:79:a6:7e:d9:7f:00:1a:5f:44:
76:35:e9:3c:7a:3e:85:29:3c:bc:ce:83:8a:fa:88:82:3e:a0:
c7:d4:15:65:f8:0e:ba:27:7e:42:31:94:53:0d:33:bb:13:80:
b6:24:79:f4:fb:09:d5:91:5a:0b:47:ec:14:67:c3:4e:91:3c:
0f:78:de:de:48:69:02:e7:67:08:fa:fc:06:4a:23:84:98:d7:
5b:d4:3a:0d:28:5c:ee:8b:41:0c:60:95:66:61:12:e6:2c:58:
23:f4:a6:3d:63:8f:3e:2d:f5:44:ef:cf:ad:95:fc:81:1d:ef:
a7:8a:dd:95
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUXrhTKNHmXDoMOTzdZRQKrXHkLjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MDYxNDAzMTdaFw0yNzA5MDUxNDA4MTdaMDMxMTAvBgNV
BAMTKDBCQ0Y0RjEwMUVCREJEOEJFMzY0OUM2Njc0N0Y4RDhBNzE0QTg4MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+NeMucyA0cUwbyP1VJ55dbxS
cEwgbpMgyGS6wWGH7X3mHuY5DWqgZzKbYJ7B77AuvBkSVDTLAA8JXvY71GGdpW55
W0zsD5YncscHSLbWrBD+laWqyqn8BcjoNy+HSOWkpj49Q70uMQoym5nYdXybJg2e
dnj4hPjoWHwJW0XzPPvrP6EoTzcS/AcP4cqX6ORf76DxgmDvd+UCJsnrr6M7eP/+
bl4weLuJFiFPr5+4UJlOIEaMAPKcauKuAB074+ErccjnntfnK12yOLbfh7XBN16E
BUqxb01Kbb8pr/5bb0kG02NTIummgE+6A90upqH4XlhVXeMzVGwDJyb7VXbrAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUC89PEB69vYvjZJxmdH+NinFKiDQwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTk3MzU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAM5Jp
AwQAvNxnAwQAvN3OMA0GCSqGSIb3DQEBCwUAA4IBAQAf/8UpMDULXNGLC0+lXd+T
9T6+yizCe64FXDIXO7YSC+aXXYOpB6uHnqg8Fg5igoBm2v93tcG7FYWMUPCh4Lng
88/6QbS/kMypHDdXZC+jnWF3cKI5nN0PkoztiZt8t2bVoT7mCgZr/QwBJi6IcH0L
gpkUDzT3uT2vgz/M8ECAzdADCKxmuTF5pn7ZfwAaX0R2Nek8ej6FKTy8zoOK+oiC
PqDH1BVl+A66J35CMZRTDTO7E4C2JHn0+wnVkVoLR+wUZ8NOkTwPeN7eSGkC52cI
+vwGSiOEmNdb1DoNKFzui0EMYJVmYRLmLFgj9KY9Y48+LfVE78+tlfyBHe+nit2V
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:09:19 2026 by rpki-client