Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203054.roa
File: AS203054.roa (raw, json)
Hash identifier: tX8lJNT9UHGQBvzHTNO9ejtjEy1HIkRP+9QUUjzw8PY=
Subject key identifier: 11:36:EA:A9:7D:9D:7C:7B:21:C3:E3:D5:E0:98:D9:F0:9E:BB:7B:F9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7F49AC1609261371030E75B8E89361990D0718E0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203054.roa
Signing time: Mon 15 Jun 2026 09:01:59 +0000
ROA not before: Mon 15 Jun 2026 08:56:59 +0000
ROA not after: Mon 14 Jun 2027 09:01:59 +0000
asID: 203054
IP address blocks: 51.146.13.0/24 maxlen: 24
51.146.16.0/24 maxlen: 24
51.146.73.0/24 maxlen: 24
51.146.77.0/24 maxlen: 24
51.146.83.0/24 maxlen: 24
51.146.94.0/24 maxlen: 24
51.146.95.0/24 maxlen: 24
51.194.66.0/24 maxlen: 24
51.194.87.0/24 maxlen: 24
51.241.5.0/24 maxlen: 24
51.241.166.0/24 maxlen: 24
51.241.192.0/24 maxlen: 24
51.241.193.0/24 maxlen: 24
51.241.195.0/24 maxlen: 24
51.241.202.0/24 maxlen: 24
51.241.235.0/24 maxlen: 24
51.241.236.0/24 maxlen: 24
51.241.238.0/24 maxlen: 24
188.220.51.0/24 maxlen: 24
188.220.87.0/24 maxlen: 24
188.220.131.0/24 maxlen: 24
188.220.145.0/24 maxlen: 24
188.220.149.0/24 maxlen: 24
188.220.150.0/24 maxlen: 24
188.220.164.0/24 maxlen: 24
188.220.194.0/24 maxlen: 24
188.220.216.0/24 maxlen: 24
188.220.219.0/24 maxlen: 24
188.220.248.0/24 maxlen: 24
188.220.250.0/24 maxlen: 24
188.221.13.0/24 maxlen: 24
188.221.28.0/24 maxlen: 24
188.221.40.0/24 maxlen: 24
188.221.42.0/24 maxlen: 24
188.221.67.0/24 maxlen: 24
188.221.103.0/24 maxlen: 24
188.221.109.0/24 maxlen: 24
188.221.111.0/24 maxlen: 24
188.221.135.0/24 maxlen: 24
188.221.141.0/24 maxlen: 24
188.221.180.0/24 maxlen: 24
188.221.186.0/24 maxlen: 24
188.221.215.0/24 maxlen: 24
188.221.222.0/24 maxlen: 24
188.221.241.0/24 maxlen: 24
188.221.242.0/24 maxlen: 24
188.221.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 13:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:49:ac:16:09:26:13:71:03:0e:75:b8:e8:93:61:99:0d:07:18:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 15 08:56:59 2026 GMT
Not After : Jun 14 09:01:59 2027 GMT
Subject: CN=1136EAA97D9D7C7B21C3E3D5E098D9F09EBB7BF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:1f:bc:89:ab:d3:25:77:a5:e4:36:60:7e:
0a:59:72:99:31:41:06:0f:29:5a:f6:06:0a:2a:c5:
8d:69:51:00:b5:b3:c0:da:88:6d:9d:07:64:37:35:
14:d6:5f:8c:92:73:27:e4:87:22:85:56:a8:e5:80:
6a:de:20:40:42:7f:ba:7e:19:77:cc:2f:09:da:37:
65:b7:05:b0:52:e2:01:26:1b:11:dc:a9:c1:66:ee:
0e:59:0e:9c:25:23:eb:bc:be:fc:8c:cb:d9:18:83:
db:02:ce:4f:ca:ce:d5:2a:6d:6d:1a:8e:2e:d9:34:
78:ba:23:2a:dd:b6:d9:54:b6:f4:87:2d:a6:bf:f7:
d4:85:a0:0c:c8:2c:6f:98:24:22:6f:f5:ae:4b:0b:
23:e6:a0:fd:ae:e1:f2:07:cb:05:4e:6e:3e:9c:35:
1b:ca:7e:73:4f:0b:aa:06:27:1a:a9:83:c8:a5:1d:
55:10:86:9a:79:99:83:49:f3:67:64:13:36:53:9f:
1d:3d:b8:63:e8:69:99:ca:fe:0d:7d:a5:19:e7:23:
8b:d0:ee:67:1b:31:fb:21:04:bb:c8:5d:57:d8:63:
3b:b6:07:bb:db:d6:71:9b:27:bc:ce:a2:72:c6:a9:
13:74:e8:62:80:03:10:70:5c:22:e8:9a:97:78:3f:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:EA:A9:7D:9D:7C:7B:21:C3:E3:D5:E0:98:D9:F0:9E:BB:7B:F9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203054.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.13.0/24
51.146.16.0/24
51.146.73.0/24
51.146.77.0/24
51.146.83.0/24
51.146.94.0/23
51.194.66.0/24
51.194.87.0/24
51.241.5.0/24
51.241.166.0/24
51.241.192.0/23
51.241.195.0/24
51.241.202.0/24
51.241.235.0-51.241.236.255
51.241.238.0/24
188.220.51.0/24
188.220.87.0/24
188.220.131.0/24
188.220.145.0/24
188.220.149.0-188.220.150.255
188.220.164.0/24
188.220.194.0/24
188.220.216.0/24
188.220.219.0/24
188.220.248.0/24
188.220.250.0/24
188.221.13.0/24
188.221.28.0/24
188.221.40.0/24
188.221.42.0/24
188.221.67.0/24
188.221.103.0/24
188.221.109.0/24
188.221.111.0/24
188.221.135.0/24
188.221.141.0/24
188.221.180.0/24
188.221.186.0/24
188.221.215.0/24
188.221.222.0/24
188.221.241.0-188.221.242.255
188.221.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:11:db:e9:51:fe:eb:94:d0:16:d8:34:cb:63:ed:83:6d:54:
29:4a:0f:11:83:28:eb:c3:5f:e1:3a:d9:fb:a9:77:62:18:73:
e4:43:46:25:fd:7d:18:46:07:52:78:87:de:1b:0a:ba:91:2b:
d4:1b:12:60:4a:d6:92:48:f6:6b:10:5b:9c:96:8d:be:66:0e:
e4:8e:19:f6:e4:05:8c:ef:a4:16:08:86:8f:e6:7b:43:0d:c4:
a7:ea:07:ab:97:7b:95:cb:e8:fa:85:49:60:b8:2d:35:72:c4:
ba:1e:43:0e:a3:44:3d:94:2c:6d:2e:b6:09:56:8c:53:c2:35:
5d:17:e5:72:cd:98:c8:5b:f8:bf:43:13:98:82:17:d5:a1:25:
68:cb:5f:d9:8e:d6:2e:47:2b:53:e0:af:17:0d:92:a6:11:be:
59:1b:9f:70:42:a6:49:5d:73:4f:b3:53:97:5b:d8:4f:0a:70:
91:1f:cd:78:7b:ef:5a:01:2e:d1:ff:41:49:b2:1a:dd:e9:82:
38:c6:8f:65:79:d5:b7:8a:47:90:40:3b:a2:cc:78:68:e2:51:
e0:24:56:8b:8a:ed:1d:af:3a:48:8c:3c:cc:6e:8e:10:80:53:
65:09:25:42:16:cd:5e:62:01:24:1d:de:2c:3c:d0:3b:5d:cf:
fe:2e:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 16:49:01 2026 by rpki-client