Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS207158.roa
File: AS207158.roa (raw, json)
Hash identifier: ZYmZJ02m8PMwRK1H7uYhoq0Go4fn9K7+xrF2/5Lc4Vs=
Subject key identifier: B8:C2:66:93:0A:7D:E8:1B:D0:8E:0D:AD:9E:20:DA:59:8F:99:07:D6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 49D4AA0F6E97C02469CB91AACB0B0A4986CA5E2E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS207158.roa
Signing time: Fri 12 Jun 2026 07:38:16 +0000
ROA not before: Fri 12 Jun 2026 07:33:16 +0000
ROA not after: Fri 11 Jun 2027 07:38:16 +0000
asID: 207158
IP address blocks: 51.194.113.0/24 maxlen: 24
51.194.249.0/24 maxlen: 24
51.194.251.0/24 maxlen: 24
51.194.254.0/24 maxlen: 24
51.194.255.0/24 maxlen: 24
51.241.2.0/24 maxlen: 24
51.241.5.0/24 maxlen: 24
51.241.149.0/24 maxlen: 24
78.105.140.0/24 maxlen: 24
78.105.141.0/24 maxlen: 24
78.105.146.0/24 maxlen: 24
78.105.152.0/24 maxlen: 24
78.105.155.0/24 maxlen: 24
78.105.156.0/24 maxlen: 24
78.105.157.0/24 maxlen: 24
78.105.160.0/24 maxlen: 24
188.220.21.0/24 maxlen: 24
188.220.32.0/24 maxlen: 24
188.220.39.0/24 maxlen: 24
188.220.46.0/24 maxlen: 24
188.220.62.0/24 maxlen: 24
188.220.66.0/24 maxlen: 24
188.220.68.0/24 maxlen: 24
188.221.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d4:aa:0f:6e:97:c0:24:69:cb:91:aa:cb:0b:0a:49:86:ca:5e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 12 07:33:16 2026 GMT
Not After : Jun 11 07:38:16 2027 GMT
Subject: CN=B8C266930A7DE81BD08E0DAD9E20DA598F9907D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:b0:0e:33:a3:2a:e9:e0:24:35:b1:f6:0c:
a2:19:f6:26:a2:98:7c:10:2a:bc:98:cb:5e:f7:b4:
31:0a:b5:d8:37:54:0f:cb:59:81:f6:0d:d8:e2:aa:
4e:9e:a5:f5:a5:8f:ec:36:a0:ce:37:07:99:b7:fa:
56:06:13:70:e6:a9:a6:fb:99:9a:dd:95:2f:82:86:
81:fc:8a:ab:bb:e4:e3:b2:aa:84:0f:af:d9:d2:5c:
e9:47:45:10:a8:c1:01:8e:eb:e3:4d:cd:90:9a:03:
ce:0f:28:9e:59:eb:3e:91:ae:5c:10:0e:29:2c:de:
58:50:b5:bd:c9:a9:8f:c9:f8:15:9d:ca:b2:49:59:
67:2a:55:fe:26:e6:08:07:a3:31:ec:3d:30:53:8f:
20:20:cc:eb:91:cb:4c:f8:c4:7b:91:24:71:23:6b:
b4:20:11:d3:9c:64:a0:bf:28:d2:e2:2b:6a:23:f3:
7f:75:e5:04:6c:06:75:bc:4f:22:95:f6:e9:62:6f:
63:57:2d:21:23:72:1d:76:bb:a9:53:c6:c8:57:9b:
b8:8b:e7:83:72:67:2d:35:c0:57:ac:50:44:5f:3e:
7e:c9:34:47:15:45:a5:70:7c:f0:44:20:29:06:b2:
48:b3:82:d5:47:cf:f2:d1:1c:2c:0c:23:1b:9f:01:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C2:66:93:0A:7D:E8:1B:D0:8E:0D:AD:9E:20:DA:59:8F:99:07:D6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS207158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.113.0/24
51.194.249.0/24
51.194.251.0/24
51.194.254.0/23
51.241.2.0/24
51.241.5.0/24
51.241.149.0/24
78.105.140.0/23
78.105.146.0/24
78.105.152.0/24
78.105.155.0-78.105.157.255
78.105.160.0/24
188.220.21.0/24
188.220.32.0/24
188.220.39.0/24
188.220.46.0/24
188.220.62.0/24
188.220.66.0/24
188.220.68.0/24
188.221.39.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9b:78:51:1d:b2:db:bf:da:20:ba:eb:dc:3c:c1:6e:5d:f0:
42:06:6c:cd:da:69:8f:fc:95:6e:d1:a1:b6:c0:25:22:b4:f2:
03:d4:d7:4b:89:05:f6:46:08:78:39:18:a5:df:86:45:c3:13:
c6:ca:8d:13:50:2f:97:73:9f:76:99:88:4d:07:f7:4a:39:a0:
74:87:10:29:95:20:0d:88:7e:a1:40:83:4a:8a:17:bb:42:b8:
b8:0c:6c:d8:b8:3f:eb:68:a6:1d:15:54:f3:63:36:38:81:04:
9c:0f:7c:39:0f:db:82:b1:36:3e:5c:36:06:a8:72:85:92:b4:
35:4b:ac:3e:09:18:cb:4e:36:7c:51:11:3c:f0:08:19:a0:ae:
79:f2:94:3a:7f:91:b2:4f:26:61:8a:05:d7:2c:8e:ef:3a:d8:
18:b7:02:20:f9:14:19:b2:7a:06:ee:cf:3a:f1:98:b2:9a:bb:
e1:30:72:81:07:5d:cc:32:c6:66:d4:dd:03:ab:08:ed:bf:e1:
0a:01:13:3d:f1:a5:22:25:b3:a7:a2:58:cd:7a:4b:08:63:cd:
c6:d9:14:7d:81:6f:01:9d:67:ed:64:c0:8e:43:c3:10:52:b8:
e9:89:72:a7:e4:d5:63:ba:49:b3:a6:57:ea:d3:7d:a9:81:4c:
7f:c6:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:32 2026 by rpki-client