Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: pkcGuNoc41jp2pjGtRElKUVh8vs/FLRX9eCDzcNBYeo=
Subject key identifier: FF:9D:71:D1:80:E1:72:B6:42:F3:78:DB:AE:D4:03:18:9F:7D:82:39
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 55FB82A7A72911C58C437960701393E1ECAD211A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
Signing time: Sun 25 Oct 2026 08:35:41 +0000
ROA not before: Sun 25 Oct 2026 08:30:41 +0000
ROA not after: Sun 24 Oct 2027 08:35:41 +0000
asID: 199741
IP address blocks: 51.194.131.0/24 maxlen: 24
51.194.137.0/24 maxlen: 24
51.194.139.0/24 maxlen: 24
51.194.153.0/24 maxlen: 24
51.194.164.0/24 maxlen: 24
51.194.174.0/24 maxlen: 24
51.194.175.0/24 maxlen: 24
51.194.190.0/24 maxlen: 24
51.241.46.0/24 maxlen: 24
51.241.120.0/24 maxlen: 24
51.241.131.0/24 maxlen: 24
51.241.132.0/24 maxlen: 24
51.241.134.0/24 maxlen: 24
51.241.161.0/24 maxlen: 24
51.241.184.0/23 maxlen: 23
78.105.140.0/24 maxlen: 24
78.105.195.0/24 maxlen: 24
78.105.214.0/24 maxlen: 24
188.220.39.0/24 maxlen: 24
188.220.46.0/24 maxlen: 24
188.220.57.0/24 maxlen: 24
188.220.58.0/24 maxlen: 24
188.220.59.0/24 maxlen: 24
188.220.66.0/24 maxlen: 24
188.220.88.0/24 maxlen: 24
188.220.94.0/24 maxlen: 24
188.220.121.0/24 maxlen: 24
188.220.126.0/24 maxlen: 24
188.220.214.0/24 maxlen: 24
188.220.218.0/24 maxlen: 24
188.220.228.0/24 maxlen: 24
188.220.230.0/24 maxlen: 24
188.220.232.0/24 maxlen: 24
188.221.2.0/24 maxlen: 24
188.221.33.0/24 maxlen: 24
188.221.64.0/24 maxlen: 24
188.221.74.0/24 maxlen: 24
188.221.76.0/24 maxlen: 24
188.221.101.0/24 maxlen: 24
188.221.141.0/24 maxlen: 24
188.221.142.0/24 maxlen: 24
188.221.147.0/24 maxlen: 24
188.221.163.0/24 maxlen: 24
188.221.192.0/24 maxlen: 24
188.221.193.0/24 maxlen: 24
188.221.195.0/24 maxlen: 24
188.221.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fb:82:a7:a7:29:11:c5:8c:43:79:60:70:13:93:e1:ec:ad:21:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 25 08:30:41 2026 GMT
Not After : Oct 24 08:35:41 2027 GMT
Subject: CN=FF9D71D180E172B642F378DBAED403189F7D8239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:a6:ab:df:25:e9:fb:87:01:d9:1e:6a:8a:
21:f2:28:0a:77:3c:b3:76:8b:0a:85:7b:14:1a:e0:
27:ba:74:e5:d7:32:04:f1:a2:5f:16:7d:27:6a:71:
a8:b4:cc:b0:e6:02:87:37:25:7a:cb:3d:4d:81:9b:
cf:5e:5d:97:8b:63:c3:5a:6d:80:c6:e0:86:31:06:
95:a3:a2:68:dc:7c:a6:f5:1f:8c:2d:bb:6f:a5:12:
62:e5:15:76:56:91:f4:dc:e0:3d:ac:0c:87:57:60:
61:20:8f:d9:a6:18:c3:01:0f:2b:69:3b:9a:9a:24:
f5:2f:e2:f2:8e:ed:b7:61:35:3d:c1:92:22:fd:bd:
05:72:08:62:ab:4a:fc:ae:9c:df:d2:fa:31:74:84:
97:ee:6e:f6:7f:e8:8c:8b:50:b9:9d:cc:fe:b5:9a:
4b:13:fc:23:8d:ac:8e:00:39:d0:05:2a:3b:0f:00:
2e:be:f8:be:d9:27:1f:a3:af:49:b5:c9:61:44:69:
32:48:f7:93:9e:8e:e5:f0:a4:27:9c:f7:ca:85:0f:
6a:41:e3:5a:9d:d5:8d:60:e0:1b:dc:f9:73:7d:13:
62:f8:c7:6f:14:a0:03:a3:d3:83:28:0c:85:c6:0d:
3a:fc:37:9e:74:ab:95:87:e9:96:63:e2:77:24:e2:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:71:D1:80:E1:72:B6:42:F3:78:DB:AE:D4:03:18:9F:7D:82:39
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.131.0/24
51.194.137.0/24
51.194.139.0/24
51.194.153.0/24
51.194.164.0/24
51.194.174.0/23
51.194.190.0/24
51.241.46.0/24
51.241.120.0/24
51.241.131.0-51.241.132.255
51.241.134.0/24
51.241.161.0/24
51.241.184.0/23
78.105.140.0/24
78.105.195.0/24
78.105.214.0/24
188.220.39.0/24
188.220.46.0/24
188.220.57.0-188.220.59.255
188.220.66.0/24
188.220.88.0/24
188.220.94.0/24
188.220.121.0/24
188.220.126.0/24
188.220.214.0/24
188.220.218.0/24
188.220.228.0/24
188.220.230.0/24
188.220.232.0/24
188.221.2.0/24
188.221.33.0/24
188.221.64.0/24
188.221.74.0/24
188.221.76.0/24
188.221.101.0/24
188.221.141.0-188.221.142.255
188.221.147.0/24
188.221.163.0/24
188.221.192.0/23
188.221.195.0/24
188.221.199.0/24
Signature Algorithm: sha256WithRSAEncryption
01:91:cd:4b:b4:fa:d9:ff:93:16:78:57:f8:6b:28:4d:f3:dc:
5c:d0:9b:42:97:dc:ea:2a:f4:d9:2f:b6:eb:fe:83:ac:bc:4e:
08:48:2b:3d:b1:02:7b:22:e6:d5:58:fd:fc:2e:0e:29:8f:38:
56:e8:99:af:cb:83:7c:0a:2f:db:03:a6:85:5b:55:15:e7:dc:
f9:f6:bf:60:11:ee:89:fb:a4:8f:6a:56:e3:8f:55:51:bb:7e:
e0:39:35:e4:e8:dd:a4:06:b0:53:72:83:8e:1c:cd:69:fb:10:
09:9c:87:af:7a:42:68:d4:e6:54:84:d9:66:53:b4:75:02:03:
06:b0:a6:b6:d3:38:37:48:31:d2:1c:9e:97:ca:0d:72:53:5b:
a3:cb:0e:55:11:ec:7e:c7:7d:65:b5:7c:35:fa:2a:52:7a:79:
45:06:1e:99:92:a9:42:03:63:97:c1:fd:dd:f1:82:e2:46:f6:
84:fb:08:fe:81:4c:a8:32:0a:2f:f6:10:64:30:9c:05:01:46:
4b:b2:55:65:b9:1c:a2:75:77:2b:f2:d3:bc:a7:93:4a:eb:9c:
93:56:2f:c4:4c:58:06:00:d8:7e:63:00:f3:e0:37:a1:cd:38:
f3:63:23:d3:c8:a9:75:c4:bf:10:90:64:f1:83:5f:58:f5:99:
32:6a:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:18:43 2026 by rpki-client