Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: E6VdqxjhJ5bPqHTl5mIInRjZe3Y5eahPa+CPrhfNLF8=
Subject key identifier: DD:A2:D0:38:02:FD:0C:34:A1:FB:72:FA:98:11:85:21:65:C2:44:60
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 424091E7789853886251CCA7551E4B14375584F6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
Signing time: Sat 19 Sep 2026 23:43:16 +0000
ROA not before: Sat 19 Sep 2026 23:38:16 +0000
ROA not after: Sat 18 Sep 2027 23:43:16 +0000
asID: 199741
IP address blocks: 51.194.131.0/24 maxlen: 24
51.194.137.0/24 maxlen: 24
51.194.139.0/24 maxlen: 24
51.194.153.0/24 maxlen: 24
51.194.164.0/24 maxlen: 24
51.194.174.0/24 maxlen: 24
51.194.175.0/24 maxlen: 24
51.194.190.0/24 maxlen: 24
51.241.120.0/24 maxlen: 24
51.241.131.0/24 maxlen: 24
51.241.132.0/24 maxlen: 24
51.241.134.0/24 maxlen: 24
188.220.58.0/24 maxlen: 24
188.220.59.0/24 maxlen: 24
188.220.88.0/24 maxlen: 24
188.220.94.0/24 maxlen: 24
188.220.121.0/24 maxlen: 24
188.220.126.0/24 maxlen: 24
188.220.214.0/24 maxlen: 24
188.220.218.0/24 maxlen: 24
188.220.228.0/24 maxlen: 24
188.220.230.0/24 maxlen: 24
188.220.232.0/24 maxlen: 24
188.221.2.0/24 maxlen: 24
188.221.33.0/24 maxlen: 24
188.221.192.0/24 maxlen: 24
188.221.193.0/24 maxlen: 24
188.221.195.0/24 maxlen: 24
188.221.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:40:91:e7:78:98:53:88:62:51:cc:a7:55:1e:4b:14:37:55:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 19 23:38:16 2026 GMT
Not After : Sep 18 23:43:16 2027 GMT
Subject: CN=DDA2D03802FD0C34A1FB72FA9811852165C24460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:98:72:db:4f:4e:69:cf:78:64:e9:2c:c8:
4e:6d:54:8b:a5:9f:1a:41:e8:75:e5:11:3e:57:1c:
c1:27:1b:aa:3f:9e:97:ea:00:c6:0c:22:64:72:13:
d6:23:e7:38:16:48:ca:9c:32:ba:e2:a4:04:ca:85:
5d:0d:52:16:ae:04:a9:a7:c0:bb:d7:07:43:cc:22:
5d:28:00:b3:c3:79:45:16:69:ec:34:b1:48:34:4c:
d6:1b:fc:6d:5c:db:d4:34:97:1c:d3:39:d9:59:6a:
08:3f:3a:d7:f0:7d:6a:b5:f8:33:bf:b2:a0:a3:3d:
df:30:26:42:54:62:b0:04:4f:ab:a6:ee:ae:16:26:
bf:ec:e2:fd:76:69:49:05:70:41:d0:73:ed:85:31:
57:ac:7a:26:2f:c2:6c:ec:5b:e7:67:e0:0d:4b:dd:
40:fe:37:de:c9:fb:95:aa:82:c0:3b:d7:08:13:85:
4c:9a:fb:59:cc:9a:40:d8:21:83:6c:aa:2b:ff:9a:
17:ed:e7:87:21:7c:f9:e5:ca:18:11:85:41:13:6d:
8b:74:4a:0d:e2:a2:81:80:de:b1:d6:3b:f8:05:99:
d7:95:c6:df:2d:17:de:dc:36:4f:4b:d9:6d:7e:12:
8e:ef:c9:34:43:5f:b4:fa:1b:fd:5b:68:d7:9b:fc:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:D0:38:02:FD:0C:34:A1:FB:72:FA:98:11:85:21:65:C2:44:60
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.131.0/24
51.194.137.0/24
51.194.139.0/24
51.194.153.0/24
51.194.164.0/24
51.194.174.0/23
51.194.190.0/24
51.241.120.0/24
51.241.131.0-51.241.132.255
51.241.134.0/24
188.220.58.0/23
188.220.88.0/24
188.220.94.0/24
188.220.121.0/24
188.220.126.0/24
188.220.214.0/24
188.220.218.0/24
188.220.228.0/24
188.220.230.0/24
188.220.232.0/24
188.221.2.0/24
188.221.33.0/24
188.221.192.0/23
188.221.195.0/24
188.221.199.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:53:14:86:90:d4:bd:30:84:de:88:14:e3:6c:53:7d:c5:07:
50:4c:ff:86:f6:67:53:0a:e0:45:a3:aa:46:8b:cb:cc:9f:b2:
e0:a1:ac:d7:19:ab:65:28:1d:a9:12:aa:9d:1b:24:98:f0:72:
64:dc:a0:37:15:c4:15:a6:81:00:51:bf:a7:bc:07:cb:cb:dd:
4f:fb:ff:29:4c:bd:8c:c3:22:4e:2f:fb:04:ff:0d:35:fe:04:
ab:20:9f:a1:82:21:eb:34:93:33:0d:62:65:d6:4c:ad:ad:7e:
fe:3b:0b:a0:c0:3f:e1:eb:4c:ba:da:f1:f8:a8:ff:a8:d5:fe:
bd:a2:86:fc:ba:d9:f3:44:7a:2b:31:80:71:cb:8f:85:20:31:
c5:86:1e:e8:9e:80:b1:3b:fe:97:52:45:09:a5:58:10:c3:bd:
37:a7:90:d8:36:98:4f:f6:08:60:16:c2:11:ca:8f:af:b1:3d:
f4:50:21:ab:3b:ed:56:eb:2b:23:15:21:29:51:ec:8c:8c:19:
f6:50:08:74:81:d8:51:df:61:4f:dc:83:48:72:c3:88:da:fd:
6b:c4:52:1d:85:c9:64:f6:2c:e7:3c:82:2b:66:1c:01:b3:91:
7a:37:21:3d:5d:17:ae:0e:a4:01:f9:8c:df:c3:52:52:b8:5f:
53:77:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:29:43 2026 by rpki-client