Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199550.roa
File: AS199550.roa (raw, json)
Hash identifier: 0jk7TRjORyfNQn/xc2qWFW7dCVo3tUGvPF9ZWZGW13I=
Subject key identifier: FD:D0:33:1D:5C:0C:CB:DE:10:C2:F8:44:09:19:64:46:E1:55:F7:C9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 257CD758CFB83B77A74E94FE3DDA3E151E2696D5
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199550.roa
Signing time: Wed 10 Jun 2026 20:48:18 +0000
ROA not before: Wed 10 Jun 2026 20:43:18 +0000
ROA not after: Wed 09 Jun 2027 20:48:18 +0000
asID: 199550
IP address blocks: 51.146.5.0/24 maxlen: 24
51.146.8.0/22 maxlen: 24
51.146.14.0/24 maxlen: 24
51.146.18.0/24 maxlen: 24
51.146.22.0/24 maxlen: 24
51.146.244.0/24 maxlen: 24
51.146.245.0/24 maxlen: 24
51.241.194.0/24 maxlen: 24
51.241.200.0/24 maxlen: 24
51.241.209.0/24 maxlen: 24
51.241.218.0/24 maxlen: 24
51.241.240.0/21 maxlen: 24
188.220.0.0/22 maxlen: 24
188.220.24.0/22 maxlen: 24
188.220.72.0/22 maxlen: 24
188.220.104.0/22 maxlen: 24
188.220.140.0/22 maxlen: 24
188.220.176.0/22 maxlen: 24
188.220.180.0/22 maxlen: 24
188.221.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7c:d7:58:cf:b8:3b:77:a7:4e:94:fe:3d:da:3e:15:1e:26:96:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 10 20:43:18 2026 GMT
Not After : Jun 9 20:48:18 2027 GMT
Subject: CN=FDD0331D5C0CCBDE10C2F84409196446E155F7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:b1:92:4d:b0:80:c3:46:54:ee:91:4e:6c:
16:c2:f4:9c:69:4c:2d:16:cd:52:a6:c5:db:4c:b7:
b4:48:5f:94:ea:a6:eb:4d:4b:58:b5:ee:22:bb:13:
8d:21:18:76:8d:8a:6c:9d:42:3e:d9:4f:1d:48:85:
e0:d5:78:2d:44:00:3a:c8:68:26:8c:e9:1f:be:08:
75:f4:d0:a1:39:da:64:dc:c3:c4:99:fe:e1:5e:6e:
c5:03:2c:52:e8:ba:1c:78:39:4d:92:8a:fc:09:20:
33:b7:57:61:0c:ab:22:c4:f2:fd:db:10:40:11:4f:
b0:c7:b2:17:d2:c4:a1:77:b5:56:dc:6f:74:74:1b:
37:b3:5c:0e:8a:8f:26:90:f9:34:c6:cb:eb:0e:3d:
cf:71:90:b4:73:1f:e5:0e:b0:9a:a9:c8:90:e6:e7:
91:54:e8:bb:f1:d6:13:86:7e:f2:8c:77:f5:fb:a8:
d7:ff:da:e4:89:17:8c:e3:59:e4:d5:8e:e0:d5:46:
1e:df:ab:80:ea:87:34:35:e8:53:48:06:d6:82:47:
2b:2c:67:12:16:e5:dc:58:2a:77:28:66:f1:b7:87:
49:2c:66:86:a4:00:e5:c9:0f:8a:97:95:b0:41:7b:
3e:ff:1e:29:62:9d:83:59:f2:36:f5:56:e6:01:c5:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D0:33:1D:5C:0C:CB:DE:10:C2:F8:44:09:19:64:46:E1:55:F7:C9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.5.0/24
51.146.8.0/22
51.146.14.0/24
51.146.18.0/24
51.146.22.0/24
51.146.244.0/23
51.241.194.0/24
51.241.200.0/24
51.241.209.0/24
51.241.218.0/24
51.241.240.0/21
188.220.0.0/22
188.220.24.0/22
188.220.72.0/22
188.220.104.0/22
188.220.140.0/22
188.220.176.0/21
188.221.192.0/24
Signature Algorithm: sha256WithRSAEncryption
05:db:08:13:48:eb:88:d5:e4:c9:66:d4:fb:25:c6:7a:40:13:
83:45:62:e0:73:a5:2f:7a:c0:e0:32:09:5a:ab:8a:c2:60:e6:
2c:01:14:b2:07:8e:54:33:87:9a:2c:59:23:9c:f0:7c:11:de:
f1:f4:97:d6:ea:fb:6c:10:aa:3f:5e:8e:a3:72:c8:fe:1a:81:
27:92:f7:ef:ec:ec:68:b8:ff:94:8a:5b:54:2d:15:fc:19:d8:
ab:99:63:50:0b:19:f2:ca:08:82:6f:b4:9f:9f:33:b1:7a:0a:
c3:d3:04:4a:3d:f6:bb:ab:1c:a9:90:c1:1f:bd:53:47:db:ce:
65:57:3a:83:84:69:d8:3a:c4:b3:4d:c5:24:96:cb:98:09:be:
d5:28:7b:96:6e:c5:1a:a0:82:ae:fd:0f:ff:78:0c:ff:4a:08:
f5:c5:98:ef:98:0c:df:75:38:73:20:a9:e4:e4:84:b6:a3:31:
b1:c5:b3:36:ad:0e:f6:98:9c:8b:c8:0e:42:6e:19:f9:88:3d:
11:cd:17:09:8e:a6:83:52:24:03:ef:e3:e7:2c:ac:29:4a:4f:
df:a0:c8:88:9b:fa:29:e2:98:6b:00:ab:79:54:02:3d:7b:2d:
2c:e9:31:0a:ad:f1:22:fd:52:f2:4d:f8:cc:bc:63:b2:31:96:
f4:6f:c0:f2
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIUJXzXWM+4O3enTpT+Pdo+FR4mltUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MTAyMDQzMThaFw0yNzA2MDkyMDQ4MThaMDMxMTAvBgNV
BAMTKEZERDAzMzFENUMwQ0NCREUxMEMyRjg0NDA5MTk2NDQ2RTE1NUY3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8rGSTbCAw0ZU7pFObBbC9Jxp
TC0WzVKmxdtMt7RIX5TqputNS1i17iK7E40hGHaNimydQj7ZTx1IheDVeC1EADrI
aCaM6R++CHX00KE52mTcw8SZ/uFebsUDLFLouhx4OU2SivwJIDO3V2EMqyLE8v3b
EEART7DHshfSxKF3tVbcb3R0GzezXA6KjyaQ+TTGy+sOPc9xkLRzH+UOsJqpyJDm
55FU6Lvx1hOGfvKMd/X7qNf/2uSJF4zjWeTVjuDVRh7fq4DqhzQ16FNIBtaCRyss
ZxIW5dxYKncoZvG3h0ksZoakAOXJD4qXlbBBez7/HilinYNZ8jb1VuYBxW9fAgMB
AAGjggJxMIICbTAdBgNVHQ4EFgQU/dAzHVwMy94QwvhECRlkRuFV98kwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTk5NTUwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEADOS
BQMEAjOSCAMEADOSDgMEADOSEgMEADOSFgMEATOS9AMEADPxwgMEADPxyAMEADPx
0QMEADPx2gMEAzPx8AMEArzcAAMEArzcGAMEArzcSAMEArzcaAMEArzcjAMEA7zc
sAMEALzdwDANBgkqhkiG9w0BAQsFAAOCAQEABdsIE0jriNXkyWbU+yXGekATg0Vi
4HOlL3rA4DIJWquKwmDmLAEUsgeOVDOHmixZI5zwfBHe8fSX1ur7bBCqP16Oo3LI
/hqBJ5L37+zsaLj/lIpbVC0V/BnYq5ljUAsZ8soIgm+0n58zsXoKw9MESj32u6sc
qZDBH71TR9vOZVc6g4Rp2DrEs03FJJbLmAm+1Sh7lm7FGqCCrv0P/3gM/0oI9cWY
75gM33U4cyCp5OSEtqMxscWzNq0O9pici8gOQm4Z+Yg9Ec0XCY6mg1IkA+/j5yys
KUpP36DIiJv6KeKYawCreVQCPXstLOkxCq3xIv1S8k34zLxjsjGW9G/A8g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:36 2026 by rpki-client