Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393559.roa
File: AS393559.roa (raw, json)
Hash identifier: fLqwdc0cU5D8bistVkllLWCiowX5HBstbZ86XGqVi7Y=
Subject key identifier: 24:60:1B:2F:C4:11:BF:02:AF:23:0D:F2:E1:FD:8E:3B:3B:2A:FE:EB
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 46880C10E08B38EF3CDC054ED98302656783AA20
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393559.roa
Signing time: Thu 03 Sep 2026 10:25:05 +0000
ROA not before: Thu 03 Sep 2026 10:20:05 +0000
ROA not after: Thu 02 Sep 2027 10:25:05 +0000
asID: 393559
IP address blocks: 51.194.212.0/23 maxlen: 24
51.194.228.0/24 maxlen: 24
94.116.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:88:0c:10:e0:8b:38:ef:3c:dc:05:4e:d9:83:02:65:67:83:aa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 3 10:20:05 2026 GMT
Not After : Sep 2 10:25:05 2027 GMT
Subject: CN=24601B2FC411BF02AF230DF2E1FD8E3B3B2AFEEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:75:2f:1a:c8:4e:b0:e1:b8:db:70:42:a8:
13:36:0e:80:6c:0b:db:c0:ca:95:5e:16:5f:67:d8:
a1:a8:59:be:08:5e:b3:3a:df:5c:92:ff:cd:b4:b4:
ed:c8:3f:6f:18:dc:b3:6a:00:7a:c3:9d:61:45:8b:
72:4b:b1:73:0b:49:68:32:d2:39:8f:0a:49:5e:ac:
dc:7f:6f:6d:af:fc:bd:33:d2:f2:b2:6b:d4:ed:14:
af:9c:2b:dc:cc:2b:c1:8b:e0:60:f7:25:cc:ac:0a:
2d:d6:cc:e3:e8:cd:f2:15:90:19:d7:47:90:a8:25:
b7:2c:c3:9c:be:4c:dc:3f:47:d7:d0:54:46:da:48:
8e:27:9e:2a:87:4f:20:b3:33:4d:2a:28:61:a8:54:
e0:12:58:20:90:0e:6a:ce:87:22:a2:af:b6:8c:ad:
df:ff:fb:22:4a:ac:cf:b8:38:20:db:6e:c6:28:dc:
2b:e8:86:d3:20:bb:2c:4e:de:ed:ad:d5:10:78:10:
8d:88:cb:0f:d3:c1:00:0e:20:78:28:a0:63:7e:7e:
c6:2d:c7:66:6e:04:93:34:2d:7d:ad:b6:c2:94:e9:
22:bc:75:bb:8d:40:99:94:f8:e3:bf:ee:44:ad:a6:
a7:21:bc:62:23:00:70:17:c1:22:54:17:76:da:3d:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:60:1B:2F:C4:11:BF:02:AF:23:0D:F2:E1:FD:8E:3B:3B:2A:FE:EB
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393559.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.212.0/23
51.194.228.0/24
94.116.64.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:4c:e4:1a:85:a9:f3:65:3b:5b:bf:ec:2e:12:92:f4:78:d7:
58:ce:f5:48:41:1b:e4:57:5f:d5:db:73:2f:8d:a5:95:89:43:
ae:74:e2:f2:e2:f8:60:7d:db:1b:67:bd:be:0a:3b:54:b7:9a:
36:6b:84:49:a4:97:14:c7:4e:07:c7:d5:24:82:f5:ed:ea:a2:
87:39:d9:2c:fa:c4:c9:1e:4e:95:6e:d3:37:e6:27:6f:18:b7:
35:01:77:2e:86:3e:85:5e:70:19:29:d4:49:33:43:fb:89:9e:
d0:4a:ef:51:2e:8f:5b:17:13:06:16:59:84:e0:b6:50:cf:f7:
28:62:64:85:79:dd:8f:6b:d5:92:ac:09:50:33:a8:20:a6:f7:
d9:f0:68:24:59:90:c5:80:c7:1a:ae:a3:c1:62:8a:24:68:3b:
47:c5:67:96:3c:94:6a:33:91:22:c4:e3:bc:7f:a3:4f:16:3c:
20:f8:81:95:d5:9c:59:21:d0:4a:74:6c:ee:1b:a9:b9:b5:db:
db:d4:4b:d8:65:aa:c5:3b:9f:b5:ff:8a:42:d8:05:1e:1f:b9:
8d:29:5f:92:f0:bd:30:61:18:dd:ee:30:cf:85:15:b1:8c:26:
f5:c8:46:39:58:fd:ea:18:54:c7:ee:a7:e0:12:5f:a4:37:46:
ff:d5:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:05:34 2026 by rpki-client