Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396073.roa
File: AS396073.roa (raw, json)
Hash identifier: 6kvq7pORAculgF58L3ZNuFZQU+xV6u9PCJX282trECc=
Subject key identifier: 11:90:3F:DF:C2:07:05:F4:C3:99:56:1B:78:AD:1F:64:E4:74:27:9F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0F3C80040419DBC79BE01C6B681F11550A2FEB33
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396073.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 396073
IP address blocks: 191.101.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:3c:80:04:04:19:db:c7:9b:e0:1c:6b:68:1f:11:55:0a:2f:eb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=11903FDFC20705F4C399561B78AD1F64E474279F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:53:b8:13:31:62:3c:cd:88:ef:31:66:b0:
63:13:f3:d4:07:10:b6:34:8d:cb:4c:86:ba:b0:a5:
b1:e0:63:64:1f:8c:4f:bd:6a:b2:e5:91:c1:69:d4:
0d:ac:8f:20:f1:d2:5d:51:ab:b7:4f:70:c4:12:44:
fa:06:93:8b:1c:9b:3c:f7:68:0d:2d:4b:f0:5d:2a:
08:3c:aa:fb:a9:fa:ab:12:6c:ca:71:f0:d4:a4:74:
89:3f:16:60:a7:ef:c7:53:2d:83:3c:2b:b2:de:65:
2b:39:4d:81:55:58:b8:c4:db:6c:68:2a:14:e2:60:
8b:12:fc:ae:1e:7d:9d:84:58:d0:72:6a:34:f5:1d:
84:79:f9:48:19:08:12:4f:c0:43:9a:48:4a:b2:5a:
1d:d7:3e:d4:3e:8c:76:cf:cc:b9:9b:67:5e:cd:66:
36:c9:d0:94:f0:5e:8d:be:2c:c7:45:e0:a9:db:b6:
eb:74:32:b4:aa:a8:e5:29:c6:7f:d1:09:08:35:a4:
8d:a8:45:a9:d7:7e:03:85:08:18:0b:6c:46:e4:cb:
4e:c8:2f:2a:0f:05:20:b3:b0:ac:e3:c4:3f:e7:bf:
48:a4:99:26:4a:03:20:12:52:dd:9c:fd:b6:07:c9:
a8:fd:e7:86:f1:54:6f:8e:46:d8:36:72:41:48:f3:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:3F:DF:C2:07:05:F4:C3:99:56:1B:78:AD:1F:64:E4:74:27:9F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.130.0/24
Signature Algorithm: sha256WithRSAEncryption
42:96:7e:11:fd:a5:54:5f:12:99:a9:45:46:fd:14:f9:80:99:
01:76:68:96:a2:39:91:e0:7d:73:8f:60:57:47:6b:19:c9:34:
ef:ef:3f:e9:da:f5:4e:7f:d3:ab:c2:65:2b:40:fc:f2:09:64:
7e:63:84:df:cf:f7:e9:3a:a2:43:ba:fe:ec:33:9b:73:94:45:
51:5f:f7:d6:3d:d4:af:d7:5b:02:65:e2:1a:e2:7a:0c:31:84:
1c:1c:12:ac:1e:be:b7:05:f7:4d:c6:41:9f:47:af:d6:f0:85:
3e:2d:36:40:61:8f:cf:0f:6e:0d:7d:c1:a0:bd:22:72:0e:cb:
db:bd:b2:bc:cb:18:e9:b7:d2:1b:d5:7e:10:6b:83:cd:b0:45:
6d:cf:59:19:e4:20:e1:e6:96:b2:d1:ef:3c:42:5d:c5:cd:a5:
70:24:28:cc:d5:64:36:35:1c:8e:3d:fd:83:a2:41:b1:0c:81:
37:e8:97:98:d4:a1:96:a9:12:1a:e2:f1:cc:6b:b7:f8:06:d1:
d9:e4:ad:4a:60:db:b4:9a:32:37:15:7d:9b:12:ae:ac:5c:c9:
54:78:d6:81:4e:da:52:29:67:2d:39:da:68:0d:b2:89:bb:3d:
4f:fe:70:b2:a9:bb:41:a6:4f:31:7c:91:3b:27:3b:f2:3d:da:
a9:30:a1:c1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUDzyABAQZ28eb4BxraB8RVQov6zMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjExMDQwOTQ0MzlaFw0yNzExMDMwOTQ5MzlaMDMxMTAvBgNV
BAMTKDExOTAzRkRGQzIwNzA1RjRDMzk5NTYxQjc4QUQxRjY0RTQ3NDI3OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtulO4EzFiPM2I7zFmsGMT89QH
ELY0jctMhrqwpbHgY2QfjE+9arLlkcFp1A2sjyDx0l1Rq7dPcMQSRPoGk4scmzz3
aA0tS/BdKgg8qvup+qsSbMpx8NSkdIk/FmCn78dTLYM8K7LeZSs5TYFVWLjE22xo
KhTiYIsS/K4efZ2EWNByajT1HYR5+UgZCBJPwEOaSEqyWh3XPtQ+jHbPzLmbZ17N
ZjbJ0JTwXo2+LMdF4Knbtut0MrSqqOUpxn/RCQg1pI2oRanXfgOFCBgLbEbky07I
LyoPBSCzsKzjxD/nv0ikmSZKAyASUt2c/bYHyaj954bxVG+ORtg2ckFI83otAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUEZA/38IHBfTDmVYbeK0fZOR0J58wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMzk2MDczLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2WC
MA0GCSqGSIb3DQEBCwUAA4IBAQBCln4R/aVUXxKZqUVG/RT5gJkBdmiWojmR4H1z
j2BXR2sZyTTv7z/p2vVOf9OrwmUrQPzyCWR+Y4Tfz/fpOqJDuv7sM5tzlEVRX/fW
PdSv11sCZeIa4noMMYQcHBKsHr63BfdNxkGfR6/W8IU+LTZAYY/PD24NfcGgvSJy
DsvbvbK8yxjpt9Ib1X4Qa4PNsEVtz1kZ5CDh5pay0e88Ql3FzaVwJCjM1WQ2NRyO
Pf2DokGxDIE36JeY1KGWqRIa4vHMa7f4BtHZ5K1KYNu0mjI3FX2bEq6sXMlUeNaB
TtpSKWctOdpoDbKJuz1P/nCyqbtBpk8xfJE7JzvyPdqpMKHB
-----END CERTIFICATE-----
Generated at Sat Nov 7 14:36:40 2026 by rpki-client