Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395839.roa
File: AS395839.roa (raw, json)
Hash identifier: ZpmRW3ErRvZkRb0xE77WKRkd2YqjR3Tx9d9srmPXCVw=
Subject key identifier: E1:4C:E0:BD:CD:D6:55:43:B4:EC:4B:B3:DE:F4:D2:9B:E2:48:28:C7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 379E4151DA3E95C593FF58E89B42E13E13C93CDF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395839.roa
Signing time: Fri 06 Nov 2026 00:05:55 +0000
ROA not before: Fri 06 Nov 2026 00:00:55 +0000
ROA not after: Fri 05 Nov 2027 00:05:55 +0000
asID: 395839
IP address blocks: 191.96.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 00:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:9e:41:51:da:3e:95:c5:93:ff:58:e8:9b:42:e1:3e:13:c9:3c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 6 00:00:55 2026 GMT
Not After : Nov 5 00:05:55 2027 GMT
Subject: CN=E14CE0BDCDD65543B4EC4BB3DEF4D29BE24828C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:e3:b5:c0:c2:c6:61:b1:c1:c1:cb:15:18:
8a:d8:3e:8f:50:19:1b:0b:52:f4:81:84:fc:d6:3f:
34:43:ad:62:79:75:a0:7f:e2:54:b9:c3:a4:e1:e2:
cd:62:6f:32:f2:fd:f6:21:6b:f0:31:c9:a7:88:23:
54:41:77:da:fd:41:01:f0:5c:bb:bb:af:ea:26:76:
b4:7a:94:b4:eb:7f:bf:12:2b:7d:bc:96:ae:e9:a1:
98:ef:30:f8:6d:17:94:09:a1:29:a9:a8:db:dc:81:
fd:79:97:9b:9a:66:3d:3e:69:62:a6:21:b2:ae:48:
82:c9:d0:58:66:6a:91:77:13:db:68:f1:b9:43:88:
2e:51:d7:8f:f4:54:ae:66:5a:22:a2:fd:4d:0c:be:
a4:cc:8e:1a:4e:06:64:25:5a:cc:c5:ca:b0:fe:3a:
3b:66:2e:f4:5a:ac:ee:3a:7d:a4:73:ef:55:38:73:
5d:93:15:41:cf:e5:0a:ee:6f:a3:82:f4:15:48:ef:
4e:a0:82:5f:f7:14:bd:d3:0c:24:f0:9a:43:4a:36:
67:62:ef:88:50:ae:53:d5:83:d3:ad:4b:f4:e5:32:
dc:3c:fc:cb:36:9b:b5:99:03:4b:9b:eb:bc:0f:20:
5f:60:8e:76:c1:f7:a4:db:43:e7:2f:6c:bd:ab:da:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4C:E0:BD:CD:D6:55:43:B4:EC:4B:B3:DE:F4:D2:9B:E2:48:28:C7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2a:1f:fe:32:3d:a5:76:23:57:93:f8:49:42:8a:84:a2:3a:
1f:61:cb:a3:1c:2d:65:31:33:31:98:26:da:e7:82:11:39:c0:
6f:28:e3:27:21:25:41:5c:40:8f:8a:2e:ef:35:a1:1e:25:09:
81:74:86:62:4e:8a:93:4d:48:d1:25:05:05:9a:2b:c1:dd:e1:
cd:b2:de:3f:8f:c1:4b:1b:3e:e9:74:c6:bc:28:9a:07:4a:cf:
c7:74:f7:ab:54:bb:68:e1:95:5f:08:05:58:d4:f6:ff:ae:39:
cb:14:00:74:84:7e:43:b0:14:78:b8:f2:fd:9e:ee:25:26:bd:
84:95:23:dd:2e:c1:06:1f:a0:cb:93:60:99:93:b8:a2:f0:bb:
45:c3:a8:d3:88:cd:42:ac:07:76:19:86:9c:e5:e9:f0:5e:99:
fc:01:7c:25:05:5b:0c:ab:76:30:95:bb:97:d8:2a:b6:e7:58:
60:cb:fd:9f:25:c9:3c:47:e3:c5:fc:00:93:9d:90:23:d4:21:
4c:8d:a0:18:e7:cc:13:85:45:ce:a4:06:e3:b3:d5:ee:65:3e:
f3:8e:b6:d3:98:64:5e:0b:0a:09:f0:2d:fd:b7:09:df:a2:6c:
a9:6d:51:ba:91:f9:b0:c9:71:94:73:e7:85:f0:28:55:0a:2c:
d0:9f:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 16:20:05 2026 by rpki-client