Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396526.roa
File: AS396526.roa (raw, json)
Hash identifier: zKGZ3i+NoJ22aZx6eQmOZORWvtNkDeFuG4WK1ZbO0qw=
Subject key identifier: 8F:86:F7:22:9B:66:00:5A:CF:FB:8D:8B:EF:2E:27:D0:90:36:19:BA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5F1187251D019EFB79EEAA8EC54927E3075D0614
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396526.roa
Signing time: Wed 09 Sep 2026 19:11:23 +0000
ROA not before: Wed 09 Sep 2026 19:06:23 +0000
ROA not after: Wed 08 Sep 2027 19:11:23 +0000
asID: 396526
IP address blocks: 51.194.194.0/24 maxlen: 24
51.194.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:11:87:25:1d:01:9e:fb:79:ee:aa:8e:c5:49:27:e3:07:5d:06:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 9 19:06:23 2026 GMT
Not After : Sep 8 19:11:23 2027 GMT
Subject: CN=8F86F7229B66005ACFFB8D8BEF2E27D0903619BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:13:ac:2f:81:cb:08:49:4b:93:91:ae:0b:
ce:32:73:3e:e4:56:94:57:11:bd:30:16:10:44:c2:
1f:09:ad:3f:a3:5f:58:03:69:b7:d0:1f:d5:d1:af:
c0:01:47:10:dd:8b:ce:57:9b:ec:86:2d:26:2d:a1:
33:cb:5f:05:16:a9:d9:da:1b:51:16:4f:e8:d0:9d:
af:01:d5:7b:41:a1:dd:17:b9:2d:90:32:a2:f5:2e:
61:3e:44:de:ce:49:cc:d3:1e:fe:9a:dc:56:49:b4:
13:37:89:1a:25:00:20:3a:b9:02:03:9b:a2:ed:72:
92:e0:01:99:8e:7e:dc:0d:ad:f6:9d:63:33:bd:62:
4c:4f:c5:71:66:96:7f:e3:a1:ce:7e:08:ef:85:e0:
de:a1:95:82:7c:2f:ce:0c:c6:24:25:a1:72:2e:6c:
43:f8:5c:e5:4c:d8:44:e0:1d:68:b8:05:df:4e:8b:
31:f9:db:f0:31:76:3a:b8:49:d5:91:3d:d3:b5:de:
de:19:c8:9f:b8:9e:bf:90:b0:e0:aa:07:1b:45:58:
33:d0:85:77:fa:44:71:bb:39:4b:04:e3:d4:8e:fc:
8f:25:03:16:b4:2a:92:31:d4:ea:bb:c4:4f:08:b4:
77:bb:f0:f0:f9:1a:6b:c8:42:c7:39:0a:1e:44:da:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:F7:22:9B:66:00:5A:CF:FB:8D:8B:EF:2E:27:D0:90:36:19:BA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.194.0/24
51.194.230.0/24
Signature Algorithm: sha256WithRSAEncryption
67:00:37:be:f3:19:2d:0c:8d:fa:1f:f0:69:40:e6:19:7d:c8:
ef:12:40:a6:85:5c:5f:fc:de:0d:31:b3:1d:96:37:99:bd:8e:
9a:d3:41:3e:71:cc:d5:47:43:c5:d2:0c:e5:88:53:56:1b:e0:
97:70:7f:b0:ea:23:c1:b4:bf:bf:fd:6a:f1:07:04:73:63:0e:
36:5f:0a:91:97:d4:28:6a:b0:27:4b:89:1b:54:79:cb:90:b4:
c3:5e:40:7d:55:01:1d:7b:08:47:4a:c5:67:af:ac:2e:98:4a:
31:ec:75:a4:11:0d:a1:19:28:f0:91:44:bd:da:e7:5d:7e:56:
f1:35:b9:b2:57:9e:c7:dc:7a:f2:ae:c9:cf:1d:08:9b:40:ca:
0f:08:03:05:08:09:6b:e1:8e:53:71:96:c2:2f:fb:57:8b:0e:
3b:a2:ee:16:4d:f4:16:24:f7:ed:9b:3f:a5:af:2e:d0:06:82:
2c:4b:aa:9d:f7:6b:d3:6d:1f:d5:c9:d7:0e:4b:3b:e5:87:5e:
86:3d:d8:62:48:68:94:54:b2:94:07:e6:1a:ed:f4:75:72:b8:
d6:52:0a:b5:b3:5f:3c:a5:1e:b7:4d:17:93:95:9b:cb:c4:47:
c9:3a:3b:97:bb:48:87:e1:af:fc:70:9d:d3:c0:4d:1e:ef:6d:
ec:53:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:25 2026 by rpki-client