Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS51082.roa
File:                     AS51082.roa (raw, json)
Hash identifier:          ATAHYNsqtiz4sOgL9M9l9c+EzspQkiVVCv0mhajBgdM=
Subject key identifier:   2D:B3:9F:70:42:7F:F7:3D:DF:92:00:A8:71:82:0F:D6:0A:90:EB:43
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       35A9FF6894B9C29B802B43C705CB6C33282DFF84
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS51082.roa
Signing time:             Mon 08 Jun 2026 17:27:50 +0000
ROA not before:           Mon 08 Jun 2026 17:22:50 +0000
ROA not after:            Mon 07 Jun 2027 17:27:50 +0000
asID:                     51082
IP address blocks:        51.146.233.0/24 maxlen: 24
                          51.194.158.0/24 maxlen: 24
                          188.220.16.0/24 maxlen: 24
                          188.220.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a9:ff:68:94:b9:c2:9b:80:2b:43:c7:05:cb:6c:33:28:2d:ff:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jun  8 17:22:50 2026 GMT
            Not After : Jun  7 17:27:50 2027 GMT
        Subject: CN=2DB39F70427FF73DDF9200A871820FD60A90EB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:91:16:bf:98:8c:fe:bf:76:d8:bf:24:2e:
                    2f:b4:37:0f:7c:14:d4:41:e7:f7:93:6d:df:0e:57:
                    26:6e:07:f5:e2:e3:c1:e8:d4:1d:87:51:0a:3e:cd:
                    ba:89:37:1b:27:5e:53:09:9d:1e:3a:15:4d:10:38:
                    60:87:b8:0c:93:fb:1f:13:7c:df:fc:6e:e6:df:51:
                    50:a6:99:d7:d3:b6:84:3c:00:0b:2b:4e:62:27:2d:
                    df:82:e9:80:f9:5c:ed:30:ea:96:a0:88:f1:9c:92:
                    fc:7e:c2:eb:69:66:a4:2c:ac:32:48:0e:96:7c:8d:
                    0b:1d:49:0d:fc:49:6a:f2:44:5c:ce:be:d1:e4:7e:
                    f4:f2:13:d6:98:df:3a:23:17:ff:ba:66:66:1c:15:
                    4b:48:61:61:fa:17:17:5f:aa:bb:50:86:82:09:2a:
                    ef:9a:cb:77:8f:fb:65:db:bb:51:fc:6f:73:d7:23:
                    8d:7e:00:45:45:e0:99:80:56:21:e0:d2:3e:e5:51:
                    35:8c:4c:6f:42:ab:b0:9f:38:be:52:44:95:1b:87:
                    cd:10:9a:1e:5a:55:5b:14:27:78:46:a9:8e:30:60:
                    f1:c3:bc:38:38:f2:1c:1c:11:8f:66:64:a1:70:e5:
                    24:a5:69:f0:8f:c9:44:29:08:5a:83:f3:14:8e:80:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B3:9F:70:42:7F:F7:3D:DF:92:00:A8:71:82:0F:D6:0A:90:EB:43
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS51082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.233.0/24
                  51.194.158.0/24
                  188.220.16.0/24
                  188.220.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:74:8f:30:52:18:55:6b:fc:e0:a4:ca:02:0b:c3:6f:41:f1:
         c9:fa:8b:8e:73:b8:dc:06:9a:7c:50:0c:f5:40:4a:09:7c:52:
         4f:80:04:20:74:4f:21:22:42:40:49:ef:83:78:b4:21:26:e2:
         16:83:52:94:ab:af:01:4e:40:4b:76:e3:88:f3:2f:30:48:9a:
         3e:5c:f8:1f:09:4b:3e:90:7d:3b:a5:35:70:4e:a4:22:ae:2b:
         13:41:74:e5:08:66:9c:26:7d:81:25:e0:b4:b7:71:76:ab:b5:
         f8:85:bc:c9:6f:6f:59:a4:48:54:5e:08:22:6f:f5:73:c7:ec:
         29:2a:61:2e:e5:e9:7f:19:6c:68:19:75:f3:23:15:42:3c:ff:
         b4:06:32:c1:15:84:84:b5:37:1f:f8:cb:3e:f7:2b:15:70:cf:
         a5:81:f6:46:64:49:cc:90:52:bb:ce:17:10:a6:54:ea:b8:c4:
         e5:5b:dc:10:cd:c7:dc:26:ac:23:e8:9b:0f:71:fe:93:55:b9:
         60:a2:a6:45:a3:ad:74:0e:1d:26:a9:bc:a7:10:ed:f6:45:a3:
         93:d2:96:ad:1c:71:c6:e3:a7:73:52:88:aa:f0:93:98:9e:5f:
         a5:1f:a8:1b:19:2a:23:df:46:e6:7f:3d:8f:f2:e1:df:f6:9a:
         4a:71:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:38:39 2026 by rpki-client