Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393559.roa
File: AS393559.roa (raw, json)
Hash identifier: RqGU1OGMUJgIgEswT/+b16Fh8d5xnrC8/usxs/YdrnM=
Subject key identifier: 8C:AE:10:4C:35:45:C4:B7:7B:97:55:46:89:7B:90:71:84:25:6F:AE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4FF6F580FED5E9483E872D4CD711F3A0A8642029
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393559.roa
Signing time: Thu 04 Jun 2026 20:50:51 +0000
ROA not before: Thu 04 Jun 2026 20:45:51 +0000
ROA not after: Thu 03 Jun 2027 20:50:51 +0000
asID: 393559
IP address blocks: 51.194.212.0/23 maxlen: 24
51.194.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f6:f5:80:fe:d5:e9:48:3e:87:2d:4c:d7:11:f3:a0:a8:64:20:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 4 20:45:51 2026 GMT
Not After : Jun 3 20:50:51 2027 GMT
Subject: CN=8CAE104C3545C4B77B975546897B907184256FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:df:43:00:5e:de:8c:8c:7f:d8:53:3c:0c:
88:4b:bf:22:67:d5:83:1c:93:d2:af:07:d7:6e:74:
49:be:76:1f:49:30:f9:c0:8d:07:4e:74:a7:72:73:
c9:d9:a7:d2:13:ca:35:67:90:e3:db:b5:6d:ed:33:
dc:65:f6:fb:7a:1a:0f:22:1a:0a:1a:b1:7c:76:82:
4f:47:c8:1c:e9:c1:e8:b7:25:80:79:f0:cf:ea:9b:
c9:fd:8b:21:ab:53:84:dd:4e:b4:e6:88:50:68:e4:
0d:d8:88:f3:54:74:b2:96:f7:5f:a4:b3:c7:cc:42:
fd:32:8a:b0:3f:5b:09:34:0b:9d:c9:99:ee:e7:93:
55:15:f4:4b:96:5c:68:02:06:50:d2:ba:f5:7e:08:
6e:6a:fa:f8:d8:53:82:7e:60:18:96:66:c1:26:97:
41:c9:6b:76:cf:c7:17:22:77:89:82:9b:05:7c:cb:
fd:e7:19:10:a7:f6:a2:c7:16:d3:be:ba:77:b0:d4:
f1:c3:a6:72:ad:1d:78:a2:f5:d6:b2:1f:bb:94:1a:
a6:35:48:a6:6c:70:c5:26:19:b6:bf:e7:18:dc:c7:
e2:d6:00:8e:a8:c2:ca:df:1e:cb:04:c2:50:a8:73:
29:51:e8:13:ab:79:bd:04:d7:81:cd:25:fb:77:7c:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:10:4C:35:45:C4:B7:7B:97:55:46:89:7B:90:71:84:25:6F:AE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393559.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.212.0/23
51.194.228.0/24
Signature Algorithm: sha256WithRSAEncryption
07:2a:45:2f:3f:ef:c6:8e:17:f0:c1:f7:53:01:34:be:a6:e6:
6b:e1:a7:2f:f9:18:ea:2e:c6:61:2b:df:23:a5:79:79:11:df:
a8:57:00:e6:e6:ac:f5:3d:e8:b4:aa:dc:81:34:a0:dc:75:b7:
49:4b:87:23:74:de:3f:8d:ad:5f:1d:9f:33:a3:32:d9:f5:eb:
4e:c1:c4:b8:3b:e6:98:1f:86:76:56:f5:76:9a:07:32:81:97:
d3:91:5a:c2:e5:23:86:e8:d8:cb:22:8e:e3:bb:05:58:70:f1:
76:b2:35:55:68:91:82:f9:10:a6:e0:73:f4:f6:e7:47:75:31:
91:f8:6f:08:aa:bd:39:bb:1e:ab:fd:1f:07:0a:71:6a:94:35:
82:98:8c:2a:5a:fa:28:a9:6c:f8:3c:fe:0e:47:80:64:ee:b0:
60:95:7a:4b:ac:c2:46:04:4b:e5:96:78:51:21:63:ac:ef:d6:
5d:a4:37:23:f3:f1:ac:80:3b:3b:0e:46:df:61:fb:e2:e3:8c:
3b:00:3b:d0:59:13:86:07:f4:37:58:f5:35:a1:02:86:05:d1:
1e:b9:b5:8a:b6:7a:f5:01:dc:52:77:2f:fc:47:3f:4f:a3:b4:
db:66:cf:7e:ca:c6:b6:56:20:99:57:b7:74:9a:67:97:34:b6:
5b:4d:8b:3b
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUT/b1gP7V6Ug+hy1M1xHzoKhkICkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MDQyMDQ1NTFaFw0yNzA2MDMyMDUwNTFaMDMxMTAvBgNV
BAMTKDhDQUUxMDRDMzU0NUM0Qjc3Qjk3NTU0Njg5N0I5MDcxODQyNTZGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVcd9DAF7ejIx/2FM8DIhLvyJn
1YMck9KvB9dudEm+dh9JMPnAjQdOdKdyc8nZp9ITyjVnkOPbtW3tM9xl9vt6Gg8i
GgoasXx2gk9HyBzpwei3JYB58M/qm8n9iyGrU4TdTrTmiFBo5A3YiPNUdLKW91+k
s8fMQv0yirA/Wwk0C53Jme7nk1UV9EuWXGgCBlDSuvV+CG5q+vjYU4J+YBiWZsEm
l0HJa3bPxxcid4mCmwV8y/3nGRCn9qLHFtO+unew1PHDpnKtHXii9dayH7uUGqY1
SKZscMUmGba/5xjcx+LWAI6owsrfHssEwlCocylR6BOreb0E14HNJft3fIL7AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUjK4QTDVFxLd7l1VGiXuQcYQlb64wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzkzNTU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBM8LU
AwQAM8LkMA0GCSqGSIb3DQEBCwUAA4IBAQAHKkUvP+/GjhfwwfdTATS+puZr4acv
+RjqLsZhK98jpXl5Ed+oVwDm5qz1Pei0qtyBNKDcdbdJS4cjdN4/ja1fHZ8zozLZ
9etOwcS4O+aYH4Z2VvV2mgcygZfTkVrC5SOG6NjLIo7juwVYcPF2sjVVaJGC+RCm
4HP09udHdTGR+G8Iqr05ux6r/R8HCnFqlDWCmIwqWvooqWz4PP4OR4Bk7rBglXpL
rMJGBEvllnhRIWOs79ZdpDcj8/GsgDs7DkbfYfvi44w7ADvQWROGB/Q3WPU1oQKG
BdEeubWKtnr1AdxSdy/8Rz9Po7TbZs9+ysa2ViCZV7d0mmeXNLZbTYs7
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:17:41 2026 by rpki-client