Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7459.roa
File: AS7459.roa (raw, json)
Hash identifier: SpChg3LYwFxqOnTGJFwmLtOuBANFw4eKj3vpIGyLINo=
Subject key identifier: 24:38:0B:28:90:50:76:84:2E:A3:C8:F2:FF:7A:37:C7:1C:58:14:8B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 77797483B01DCEA985D1FBE44200BBE03592DA68
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7459.roa
Signing time: Fri 18 Sep 2026 12:36:21 +0000
ROA not before: Fri 18 Sep 2026 12:31:21 +0000
ROA not after: Fri 17 Sep 2027 12:36:21 +0000
asID: 7459
IP address blocks: 51.194.155.0/24 maxlen: 24
51.194.158.0/24 maxlen: 24
51.194.165.0/24 maxlen: 24
51.194.166.0/24 maxlen: 24
94.116.36.0/22 maxlen: 24
94.116.40.0/22 maxlen: 24
94.116.44.0/22 maxlen: 24
94.116.52.0/22 maxlen: 24
94.116.56.0/22 maxlen: 24
94.116.72.0/22 maxlen: 24
188.221.8.0/24 maxlen: 24
188.221.81.0/24 maxlen: 24
188.221.84.0/24 maxlen: 24
188.221.96.0/24 maxlen: 24
188.221.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:79:74:83:b0:1d:ce:a9:85:d1:fb:e4:42:00:bb:e0:35:92:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 18 12:31:21 2026 GMT
Not After : Sep 17 12:36:21 2027 GMT
Subject: CN=24380B28905076842EA3C8F2FF7A37C71C58148B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:18:e5:81:80:17:9a:68:22:df:b0:b4:1c:
7f:2f:60:31:71:04:49:e9:79:12:a9:6e:2a:21:7a:
3f:16:46:52:c8:b1:e6:04:b0:53:2d:9d:7f:14:dc:
ec:ca:91:ae:47:f0:aa:86:3d:b7:0d:25:2d:4f:f8:
5f:76:a5:32:90:a2:9c:04:53:39:34:0f:29:79:8c:
3b:4f:e5:3c:2c:d7:bb:c3:e9:88:df:eb:0d:cf:80:
67:ad:85:f8:2e:a6:9e:5b:b6:ca:97:9e:d8:98:5c:
16:65:b8:80:61:76:53:46:6d:4c:ab:28:c3:4e:cd:
b0:8b:c0:7b:e9:ef:e7:89:46:72:22:c5:f9:e2:43:
b0:1a:62:24:e0:df:5c:73:df:e3:fa:a3:ec:24:19:
df:6b:0f:7f:a9:3f:42:85:5b:5d:65:b0:d2:c4:1f:
52:1b:c3:94:8b:ea:ad:7b:14:b1:a1:88:29:91:70:
12:0c:90:d6:19:9e:29:de:95:ee:c2:26:3d:1a:95:
b7:94:8d:09:8a:56:a4:bf:36:73:d9:00:95:22:16:
c3:87:85:5c:9a:1f:53:36:9f:26:1c:f3:26:43:56:
e2:c4:82:c5:91:3d:3b:8b:87:6b:58:90:95:f6:b3:
93:67:ea:97:ff:c5:0f:2c:f1:71:38:e2:6c:1d:48:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:0B:28:90:50:76:84:2E:A3:C8:F2:FF:7A:37:C7:1C:58:14:8B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS7459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.155.0/24
51.194.158.0/24
51.194.165.0-51.194.166.255
94.116.36.0-94.116.47.255
94.116.52.0-94.116.59.255
94.116.72.0/22
188.221.8.0/24
188.221.81.0/24
188.221.84.0/24
188.221.96.0/24
188.221.108.0/23
Signature Algorithm: sha256WithRSAEncryption
77:fd:0d:5d:67:b9:69:86:e0:e2:53:d9:cf:1a:60:2f:04:6e:
93:15:65:bc:19:70:ed:54:00:2d:9d:5b:19:88:7c:df:1e:0f:
8f:36:80:c6:e0:16:2e:a0:a1:2a:df:12:d7:44:86:57:d7:2e:
1e:69:a1:09:21:93:d9:54:1e:1d:fe:fe:d3:d0:b0:7c:b7:ca:
d2:a4:e8:23:fe:1d:64:95:81:23:bc:66:e1:79:1f:c4:c0:c1:
12:cf:e8:22:57:85:d2:57:18:a1:b4:d3:e5:a1:07:aa:57:12:
11:ed:44:0e:8d:f3:7b:f1:c8:46:5d:9e:78:6f:8d:5b:8f:43:
6c:37:4a:22:f4:91:a8:e2:d0:8b:fc:42:13:79:2b:04:e3:7a:
7a:e2:14:ab:59:9d:44:a5:f3:7a:50:14:11:3b:7e:16:8f:86:
7d:b1:3a:8c:8a:32:1b:98:2e:1b:a1:5f:a0:cb:9f:69:36:42:
50:1f:2d:d0:86:78:72:88:26:04:f5:3e:7c:0e:c6:2d:e2:28:
37:92:04:96:e2:2d:37:e8:83:09:bd:4a:15:48:6a:6a:e1:39:
d0:27:ce:7c:32:32:8c:d9:39:43:e5:1a:20:da:ec:c0:45:86:
5c:80:e9:49:e1:e9:4e:5e:11:89:c5:d6:09:b0:ff:dd:26:2e:
b4:aa:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:32:41 2026 by rpki-client