Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: C+ZSgw+0kSmXM9aq5weh9kVkz3t+hPwzvnS58qKAel0=
Subject key identifier: 3F:4D:4E:42:72:A6:D7:AA:78:D6:1A:DD:F5:B5:F8:A7:37:D9:67:9B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7228883D5A842C99D2E672CF66DD20D3E5518CB4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
Signing time: Wed 10 Jun 2026 15:18:11 +0000
ROA not before: Wed 10 Jun 2026 15:13:11 +0000
ROA not after: Wed 09 Jun 2027 15:18:11 +0000
asID: 199741
IP address blocks: 51.194.131.0/24 maxlen: 24
51.194.137.0/24 maxlen: 24
51.194.139.0/24 maxlen: 24
51.194.153.0/24 maxlen: 24
51.194.164.0/24 maxlen: 24
51.194.174.0/24 maxlen: 24
51.194.175.0/24 maxlen: 24
51.194.190.0/24 maxlen: 24
51.241.120.0/24 maxlen: 24
51.241.131.0/24 maxlen: 24
51.241.132.0/24 maxlen: 24
51.241.134.0/24 maxlen: 24
188.220.121.0/24 maxlen: 24
188.220.214.0/24 maxlen: 24
188.220.218.0/24 maxlen: 24
188.220.228.0/24 maxlen: 24
188.220.230.0/24 maxlen: 24
188.220.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:28:88:3d:5a:84:2c:99:d2:e6:72:cf:66:dd:20:d3:e5:51:8c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 10 15:13:11 2026 GMT
Not After : Jun 9 15:18:11 2027 GMT
Subject: CN=3F4D4E4272A6D7AA78D61ADDF5B5F8A737D9679B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:c2:60:79:fc:28:95:65:9e:78:9c:f8:d9:
08:74:70:ed:60:2b:d5:52:d0:07:ad:b7:ec:21:3f:
da:90:ef:9f:0d:98:04:69:79:b3:d1:9f:c3:29:59:
b5:70:4f:f0:aa:d5:39:8b:02:a9:1c:ae:28:ce:0d:
b9:5e:1d:22:11:f4:35:19:37:1c:43:85:eb:79:c4:
19:41:14:0e:c0:e1:f4:ab:f7:5c:11:0d:74:0f:4f:
b3:ea:97:7d:db:8d:90:b6:81:3b:bc:fb:0e:84:8d:
49:0a:fe:fb:0e:e6:1a:dd:58:bf:a8:50:9d:80:e4:
fd:63:2f:4d:12:b6:e6:a6:f4:92:61:7b:45:36:0d:
fe:e1:8b:fd:9f:86:ec:e5:a1:54:a5:cc:94:d0:34:
06:ae:00:a0:c8:e3:e9:df:09:e6:2c:f9:ac:4f:d7:
85:60:a6:19:9b:66:2b:95:43:08:ec:40:c4:f8:5e:
97:bb:da:be:4b:75:97:43:df:45:17:e3:f5:83:26:
77:40:cf:c1:a4:81:1c:92:11:27:0c:47:94:d3:c6:
2f:59:85:c9:01:1c:d0:53:a9:a3:a2:3e:f8:d7:45:
ac:f8:79:a1:bc:74:a3:56:95:1a:2e:47:06:0e:5e:
43:02:5f:df:38:36:59:09:d9:9b:38:77:cd:15:16:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4D:4E:42:72:A6:D7:AA:78:D6:1A:DD:F5:B5:F8:A7:37:D9:67:9B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.131.0/24
51.194.137.0/24
51.194.139.0/24
51.194.153.0/24
51.194.164.0/24
51.194.174.0/23
51.194.190.0/24
51.241.120.0/24
51.241.131.0-51.241.132.255
51.241.134.0/24
188.220.121.0/24
188.220.214.0/24
188.220.218.0/24
188.220.228.0/24
188.220.230.0/24
188.220.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0e:22:89:68:72:8f:f1:55:42:09:99:56:33:09:af:23:6a:
14:4d:2a:53:b5:ca:93:de:a5:e3:ef:01:ed:46:fb:c2:82:17:
b6:00:e4:7f:1d:ab:cf:5b:d4:d8:cb:01:02:c0:57:43:ad:0b:
4d:0e:6c:9f:63:ad:ac:47:82:57:75:df:64:47:05:1f:6c:7c:
fb:37:0f:cb:bd:6a:eb:41:a0:a0:8b:9e:28:37:95:ce:8c:ba:
93:09:10:49:7d:6d:9e:38:31:90:c9:89:a1:82:c4:93:ad:41:
34:6c:cd:6c:c4:9a:30:93:36:34:39:02:a2:40:f9:a8:65:c3:
71:32:a5:ca:40:5a:6c:55:fc:51:03:c4:1a:10:db:a8:38:d9:
2c:04:ea:b4:21:cc:8d:9d:7e:0d:b5:76:6b:8a:d4:fc:be:d2:
f7:25:58:01:b8:c1:a8:69:41:5e:d7:a9:77:9e:b8:92:07:19:
ab:94:c9:6d:f1:de:32:86:72:27:7c:17:f6:7e:3d:ed:95:c9:
20:12:f4:65:0b:c6:5a:03:28:f8:52:a8:fd:be:ce:0f:53:20:
5e:c6:b3:97:8d:db:99:2c:e6:9f:89:55:4d:50:d2:70:f4:7e:
9b:b6:28:3f:30:6e:77:1e:c8:dc:2e:16:7d:fa:0d:a4:7f:0f:
77:a1:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:03 2026 by rpki-client