Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401881.roa
File: AS401881.roa (raw, json)
Hash identifier: 19y+ECnm/t7ne1dnkI2AhsNGDaHzCpBvCeTjdzxrAt8=
Subject key identifier: 9C:49:BE:95:9B:0B:ED:59:5D:06:88:AB:76:6A:70:3D:CC:77:79:0C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5A647CB69DF66C61D5580497B2A4E707651A0BF0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401881.roa
Signing time: Fri 12 Jun 2026 07:36:40 +0000
ROA not before: Fri 12 Jun 2026 07:31:40 +0000
ROA not after: Fri 11 Jun 2027 07:36:40 +0000
asID: 401881
IP address blocks: 51.194.229.0/24 maxlen: 24
78.105.124.0/24 maxlen: 24
78.105.161.0/24 maxlen: 24
188.220.89.0/24 maxlen: 24
188.220.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:64:7c:b6:9d:f6:6c:61:d5:58:04:97:b2:a4:e7:07:65:1a:0b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 12 07:31:40 2026 GMT
Not After : Jun 11 07:36:40 2027 GMT
Subject: CN=9C49BE959B0BED595D0688AB766A703DCC77790C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:9e:3f:ad:36:33:98:50:31:3a:76:35:9a:
6f:9c:06:d6:bc:37:65:f5:24:77:9e:07:31:c1:94:
e6:ff:14:2a:18:8f:4b:c4:a7:f9:f5:0a:a7:17:bc:
24:5a:e0:5a:04:e6:f5:99:a9:63:47:27:cd:04:cb:
f3:e7:e0:96:a9:05:4d:c2:e9:20:d7:7a:72:f5:3a:
5d:a9:e3:6f:fb:41:17:7c:38:de:50:e4:c3:b2:29:
74:81:33:7b:a5:f8:e6:80:a0:68:a9:bb:52:04:bc:
97:22:b3:39:91:5f:61:20:99:cb:87:8b:a3:de:de:
34:63:52:4b:58:28:26:5b:0d:16:67:8d:e3:a5:82:
87:81:bf:0f:f8:a7:ec:e5:98:3a:94:20:8e:d9:9b:
b2:75:50:25:5c:63:57:df:d8:b8:b2:79:b2:6d:3b:
40:75:40:6f:c1:00:e6:3f:44:ef:61:32:ae:20:1f:
d4:de:cc:eb:c8:d9:21:b0:a7:81:64:f1:99:01:da:
17:a6:61:fa:3a:4c:a8:b5:e0:59:d9:39:e9:61:34:
9f:38:e2:88:a1:0d:b5:3a:73:f6:9d:8f:2c:d7:93:
01:28:ce:11:44:68:61:ae:8f:a7:a0:77:ed:04:27:
4d:88:be:bb:26:ed:d1:7f:7b:7f:82:cd:08:50:85:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:BE:95:9B:0B:ED:59:5D:06:88:AB:76:6A:70:3D:CC:77:79:0C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.229.0/24
78.105.124.0/24
78.105.161.0/24
188.220.89.0/24
188.220.100.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c7:cb:23:81:e4:f3:37:b3:b3:86:6f:49:ce:a5:16:25:6c:
cd:08:1e:58:3b:84:3f:46:7b:c9:cb:f4:56:1e:73:da:54:bb:
83:f4:f0:99:ca:db:d4:8f:21:cb:99:0a:d3:b6:b5:08:f7:df:
f5:f5:b5:df:25:5c:61:4d:c3:a7:0e:a8:53:9a:05:a0:af:a8:
56:9c:d0:30:06:4d:fb:3f:39:28:10:96:89:ef:d0:08:20:cf:
77:6f:32:01:78:fb:ac:7e:d2:b2:7b:c0:ab:99:0b:f8:4f:c0:
98:bc:73:57:77:e7:82:c7:f8:44:51:77:43:a2:24:6f:8f:74:
f6:3f:93:94:1e:f6:77:80:4c:2c:43:74:b5:db:65:f2:03:27:
63:68:0f:e7:15:a7:0e:ef:b3:3c:95:54:cc:f2:68:49:b0:b4:
5a:4f:14:d7:38:d3:67:ac:9c:e7:43:dd:d7:69:bf:3c:28:88:
68:c8:9b:f4:1c:11:ac:f4:be:da:68:55:08:8e:1f:c1:1a:fc:
90:ff:44:63:b8:f4:f7:dc:66:2d:d9:a1:69:68:e8:d1:63:de:
2d:0c:e8:91:b6:14:e5:7e:f3:0f:c7:a4:d7:9a:bc:1f:4a:ec:
ad:b3:52:47:80:17:fd:51:e9:d4:33:16:fb:71:4b:b4:36:4b:
21:7e:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:26 2026 by rpki-client