Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: qISbjoyKGoWhVcQSeHB6aazGDBTFIoXOWrRxB1xlNLs=
Subject key identifier: 7A:75:BF:67:2F:A8:A4:82:1C:DF:14:D5:0F:63:25:B7:E2:1E:67:0D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6B31F2C9744C70F9B35804F93AD5C71B0AC05CB8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203048.roa
Signing time: Sat 13 Jun 2026 03:02:34 +0000
ROA not before: Sat 13 Jun 2026 02:57:34 +0000
ROA not after: Sat 12 Jun 2027 03:02:34 +0000
asID: 203048
IP address blocks: 51.146.20.0/24 maxlen: 24
51.146.21.0/24 maxlen: 24
51.146.76.0/24 maxlen: 24
51.146.82.0/24 maxlen: 24
51.146.87.0/24 maxlen: 24
51.146.105.0/24 maxlen: 24
51.146.114.0/24 maxlen: 24
51.146.232.0/24 maxlen: 24
51.146.236.0/24 maxlen: 24
51.146.239.0/24 maxlen: 24
51.146.241.0/24 maxlen: 24
51.146.242.0/24 maxlen: 24
51.146.243.0/24 maxlen: 24
51.194.33.0/24 maxlen: 24
51.194.54.0/24 maxlen: 24
51.194.135.0/24 maxlen: 24
51.194.181.0/24 maxlen: 24
51.241.92.0/24 maxlen: 24
51.241.142.0/24 maxlen: 24
51.241.164.0/24 maxlen: 24
51.241.187.0/24 maxlen: 24
51.241.201.0/24 maxlen: 24
51.241.216.0/24 maxlen: 24
51.241.217.0/24 maxlen: 24
51.241.219.0/24 maxlen: 24
51.241.239.0/24 maxlen: 24
78.105.101.0/24 maxlen: 24
78.105.214.0/24 maxlen: 24
188.220.12.0/24 maxlen: 24
188.220.22.0/24 maxlen: 24
188.220.38.0/24 maxlen: 24
188.220.57.0/24 maxlen: 24
188.220.67.0/24 maxlen: 24
188.220.101.0/24 maxlen: 24
188.220.113.0/24 maxlen: 24
188.220.118.0/24 maxlen: 24
188.220.120.0/24 maxlen: 24
188.220.122.0/24 maxlen: 24
188.220.126.0/24 maxlen: 24
188.220.130.0/24 maxlen: 24
188.220.133.0/24 maxlen: 24
188.220.160.0/24 maxlen: 24
188.220.165.0/24 maxlen: 24
188.220.195.0/24 maxlen: 24
188.220.204.0/24 maxlen: 24
188.220.210.0/24 maxlen: 24
188.221.2.0/24 maxlen: 24
188.221.10.0/24 maxlen: 24
188.221.15.0/24 maxlen: 24
188.221.16.0/24 maxlen: 24
188.221.19.0/24 maxlen: 24
188.221.32.0/24 maxlen: 24
188.221.36.0/24 maxlen: 24
188.221.64.0/24 maxlen: 24
188.221.66.0/24 maxlen: 24
188.221.81.0/24 maxlen: 24
188.221.121.0/24 maxlen: 24
188.221.129.0/24 maxlen: 24
188.221.132.0/24 maxlen: 24
188.221.136.0/24 maxlen: 24
188.221.159.0/24 maxlen: 24
188.221.166.0/24 maxlen: 24
188.221.178.0/24 maxlen: 24
188.221.185.0/24 maxlen: 24
188.221.196.0/24 maxlen: 24
188.221.197.0/24 maxlen: 24
188.221.211.0/24 maxlen: 24
188.221.212.0/24 maxlen: 24
188.221.248.0/24 maxlen: 24
188.221.249.0/24 maxlen: 24
188.221.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:31:f2:c9:74:4c:70:f9:b3:58:04:f9:3a:d5:c7:1b:0a:c0:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 13 02:57:34 2026 GMT
Not After : Jun 12 03:02:34 2027 GMT
Subject: CN=7A75BF672FA8A4821CDF14D50F6325B7E21E670D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ed:a3:f0:1b:b5:7d:ad:b4:3e:7b:43:1d:22:
d7:42:60:f1:55:d8:73:20:37:0c:df:a4:70:a3:d2:
0f:c3:d6:a2:ee:18:c2:93:e6:97:a0:0d:4e:6a:83:
9f:c6:d0:5c:16:4b:a1:9b:cd:09:b7:cf:c5:15:40:
92:f2:17:cc:0f:07:21:a1:99:6c:26:2b:ec:83:e4:
6b:df:69:5d:50:ab:45:1d:a3:97:42:e6:07:47:b7:
04:10:db:5c:26:81:42:29:b4:4a:66:5d:08:6c:a9:
24:96:bd:34:b9:40:a5:62:5a:0e:31:a6:3c:c5:e8:
58:ba:1b:d6:dd:bc:bd:28:a8:5e:00:2f:5d:83:93:
0b:23:24:72:a5:4f:4f:92:58:33:d4:3d:ff:eb:7c:
4f:44:02:82:a2:c5:bf:ea:c5:16:ef:08:14:91:ed:
d8:11:fa:7f:64:63:e7:2a:f8:11:fb:3b:55:5d:b8:
ef:0f:67:a5:8d:eb:77:c5:d1:c5:c0:60:a8:ce:9e:
5d:10:2c:ee:bd:1e:a3:bc:2e:a5:ea:27:09:38:dc:
5d:b0:28:14:bc:9e:87:55:38:be:11:98:fc:3b:77:
1f:1e:26:4a:a7:26:31:3c:06:fd:37:c7:09:48:4d:
fa:31:52:39:ba:6e:c5:31:90:fc:10:50:a7:84:20:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:75:BF:67:2F:A8:A4:82:1C:DF:14:D5:0F:63:25:B7:E2:1E:67:0D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.20.0/23
51.146.76.0/24
51.146.82.0/24
51.146.87.0/24
51.146.105.0/24
51.146.114.0/24
51.146.232.0/24
51.146.236.0/24
51.146.239.0/24
51.146.241.0-51.146.243.255
51.194.33.0/24
51.194.54.0/24
51.194.135.0/24
51.194.181.0/24
51.241.92.0/24
51.241.142.0/24
51.241.164.0/24
51.241.187.0/24
51.241.201.0/24
51.241.216.0/23
51.241.219.0/24
51.241.239.0/24
78.105.101.0/24
78.105.214.0/24
188.220.12.0/24
188.220.22.0/24
188.220.38.0/24
188.220.57.0/24
188.220.67.0/24
188.220.101.0/24
188.220.113.0/24
188.220.118.0/24
188.220.120.0/24
188.220.122.0/24
188.220.126.0/24
188.220.130.0/24
188.220.133.0/24
188.220.160.0/24
188.220.165.0/24
188.220.195.0/24
188.220.204.0/24
188.220.210.0/24
188.221.2.0/24
188.221.10.0/24
188.221.15.0-188.221.16.255
188.221.19.0/24
188.221.32.0/24
188.221.36.0/24
188.221.64.0/24
188.221.66.0/24
188.221.81.0/24
188.221.121.0/24
188.221.129.0/24
188.221.132.0/24
188.221.136.0/24
188.221.159.0/24
188.221.166.0/24
188.221.178.0/24
188.221.185.0/24
188.221.196.0/23
188.221.211.0-188.221.212.255
188.221.248.0/23
188.221.251.0/24
Signature Algorithm: sha256WithRSAEncryption
79:0a:c6:a4:10:80:dc:f2:b1:41:33:71:67:bd:75:df:51:9f:
c8:0b:b6:8b:93:90:a1:66:07:33:0c:83:f7:0a:a0:ef:23:79:
9e:67:bc:4c:2d:ba:f7:e4:d5:4b:79:84:64:54:42:0a:0d:b8:
9d:fa:55:7b:9e:05:a8:a9:a9:79:58:1e:77:38:72:00:63:f3:
90:e1:65:5f:38:96:01:ea:66:c8:d8:62:f9:5c:c1:5b:1f:e7:
6a:e6:6f:df:e6:ee:c4:b2:80:63:53:61:85:21:96:f0:01:b5:
b7:0d:a4:33:4a:c4:46:d2:63:07:91:8b:7c:53:9c:fc:4f:01:
2d:14:ef:9d:38:71:68:09:85:1d:07:d5:b3:b8:64:cf:1b:57:
05:27:11:47:1c:16:fe:25:c0:b4:21:63:8c:be:b9:ce:2e:bf:
a6:b1:bf:0a:c7:5b:cb:e3:79:f2:21:a7:5c:9c:81:c0:91:0f:
98:f2:f9:9b:32:72:08:68:3c:ac:30:0a:46:21:c4:4a:bc:53:
f4:ce:30:39:23:a8:9c:c1:b4:dd:13:2f:e2:83:05:65:1e:03:
93:da:39:76:86:58:07:97:ae:7b:1e:b0:8d:50:34:e8:63:14:
45:e9:ac:5c:ac:8b:f0:57:ba:5e:b4:cd:a3:7f:bd:3f:f3:cc:
bf:fa:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:30 2026 by rpki-client