Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: 1lAtcQgLgtc/CbsDGEKylbi1OXucMZnLszuJOTUgMlk=
Subject key identifier: C9:F5:AE:3F:27:5F:7E:53:5D:90:17:BA:AE:2E:B8:42:74:CB:B0:D2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 69E0FD292CA05F1250D8FD9E46E5B39AA8B0A00B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
Signing time: Fri 28 Aug 2026 06:59:26 +0000
ROA not before: Fri 28 Aug 2026 06:54:26 +0000
ROA not after: Fri 27 Aug 2027 06:59:26 +0000
asID: 396356
IP address blocks: 2.58.29.0/24 maxlen: 24
2.58.30.0/24 maxlen: 24
2.58.31.0/24 maxlen: 24
2.58.174.0/24 maxlen: 24
5.181.133.0/24 maxlen: 24
5.252.76.0/24 maxlen: 24
5.253.200.0/24 maxlen: 24
5.253.201.0/24 maxlen: 24
5.253.203.0/24 maxlen: 24
45.81.2.0/24 maxlen: 24
45.89.251.0/24 maxlen: 24
45.89.252.0/24 maxlen: 24
45.137.31.0/24 maxlen: 24
45.137.156.0/24 maxlen: 24
45.139.181.0/24 maxlen: 24
109.106.2.0/24 maxlen: 24
130.185.125.0/24 maxlen: 24
179.61.167.0/24 maxlen: 24
179.61.175.0/24 maxlen: 24
179.61.178.0/24 maxlen: 24
179.61.179.0/24 maxlen: 24
179.61.218.0/24 maxlen: 24
179.61.233.0/24 maxlen: 24
181.41.204.0/24 maxlen: 24
181.41.208.0/24 maxlen: 24
181.41.218.0/24 maxlen: 24
181.214.56.0/24 maxlen: 24
181.214.59.0/24 maxlen: 24
181.214.61.0/24 maxlen: 24
181.214.64.0/24 maxlen: 24
181.214.66.0/24 maxlen: 24
181.214.70.0/24 maxlen: 24
181.214.86.0/24 maxlen: 24
181.214.102.0/24 maxlen: 24
181.214.196.0/24 maxlen: 24
181.214.225.0/24 maxlen: 24
181.214.226.0/24 maxlen: 24
181.215.92.0/24 maxlen: 24
181.215.117.0/24 maxlen: 24
181.215.118.0/24 maxlen: 24
181.215.120.0/24 maxlen: 24
181.215.125.0/24 maxlen: 24
181.215.126.0/24 maxlen: 24
181.215.129.0/24 maxlen: 24
181.215.131.0/24 maxlen: 24
181.215.146.0/24 maxlen: 24
181.215.153.0/24 maxlen: 24
181.215.155.0/24 maxlen: 24
181.215.156.0/24 maxlen: 24
181.215.158.0/24 maxlen: 24
181.215.169.0/24 maxlen: 24
181.215.172.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
185.34.43.0/24 maxlen: 24
185.142.24.0/24 maxlen: 24
185.143.229.0/24 maxlen: 24
185.151.59.0/24 maxlen: 24
185.158.100.0/24 maxlen: 24
185.158.101.0/24 maxlen: 24
185.158.102.0/24 maxlen: 24
185.158.103.0/24 maxlen: 24
185.158.134.0/24 maxlen: 24
191.96.4.0/24 maxlen: 24
191.96.44.0/24 maxlen: 24
191.96.45.0/24 maxlen: 24
191.96.46.0/24 maxlen: 24
191.96.47.0/24 maxlen: 24
191.96.107.0/24 maxlen: 24
191.96.122.0/24 maxlen: 24
191.96.160.0/24 maxlen: 24
191.96.161.0/24 maxlen: 24
191.96.162.0/24 maxlen: 24
191.96.163.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
191.96.239.0/24 maxlen: 24
191.101.4.0/24 maxlen: 24
191.101.5.0/24 maxlen: 24
191.101.43.0/24 maxlen: 24
191.101.99.0/24 maxlen: 24
191.101.119.0/24 maxlen: 24
191.101.154.0/24 maxlen: 24
191.101.160.0/24 maxlen: 24
191.101.216.0/24 maxlen: 24
191.101.255.0/24 maxlen: 24
213.109.171.0/24 maxlen: 24
2a00:d1a0:a::/48 maxlen: 48
2a0a:a700::/30 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e0:fd:29:2c:a0:5f:12:50:d8:fd:9e:46:e5:b3:9a:a8:b0:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 28 06:54:26 2026 GMT
Not After : Aug 27 06:59:26 2027 GMT
Subject: CN=C9F5AE3F275F7E535D9017BAAE2EB84274CBB0D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:3c:d9:73:8b:86:bc:a0:eb:a0:9b:36:b3:
24:8e:1f:3c:c0:3c:c6:5d:7e:3e:d6:ea:7b:90:2b:
f8:2d:77:74:ef:13:cb:53:a7:ce:56:dc:5a:90:b4:
d2:e9:5f:e9:ad:f9:45:71:dd:f3:3d:61:b4:70:c3:
c6:84:c5:f5:bb:49:dc:6f:e6:ae:d3:5e:c5:27:15:
c2:c8:a9:5e:41:0b:8d:93:8a:d7:67:74:10:e1:9a:
fb:7c:bc:d1:04:e6:02:fc:53:e3:75:90:ef:4f:36:
d7:c7:d5:ae:21:b6:2b:eb:cd:66:20:e6:cd:24:aa:
1a:de:5c:2b:41:67:e0:d4:10:ba:a0:a9:2d:9b:73:
c7:67:aa:ec:10:cc:cc:a3:aa:bd:eb:49:cd:d9:d0:
78:8b:e7:d4:79:95:60:51:24:7e:dd:78:56:6b:3a:
5d:14:40:39:4e:aa:a3:2d:d1:2f:db:0f:d7:1d:5a:
a9:b0:3c:96:cc:e6:f2:4e:64:26:e2:53:d6:4d:42:
7e:6f:72:e2:15:c2:ae:db:45:ca:57:11:a0:6f:b3:
63:09:ec:4f:d1:2c:3b:07:74:85:6d:e5:fd:25:a9:
ef:1c:cb:d8:e0:6a:b9:42:cf:63:36:16:41:8e:a4:
15:35:b0:7e:53:dc:09:e2:c5:ec:75:04:0a:d1:d6:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:AE:3F:27:5F:7E:53:5D:90:17:BA:AE:2E:B8:42:74:CB:B0:D2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.29.0-2.58.31.255
2.58.174.0/24
5.181.133.0/24
5.252.76.0/24
5.253.200.0/23
5.253.203.0/24
45.81.2.0/24
45.89.251.0-45.89.252.255
45.137.31.0/24
45.137.156.0/24
45.139.181.0/24
109.106.2.0/24
130.185.125.0/24
179.61.167.0/24
179.61.175.0/24
179.61.178.0/23
179.61.218.0/24
179.61.233.0/24
181.41.204.0/24
181.41.208.0/24
181.41.218.0/24
181.214.56.0/24
181.214.59.0/24
181.214.61.0/24
181.214.64.0/24
181.214.66.0/24
181.214.70.0/24
181.214.86.0/24
181.214.102.0/24
181.214.196.0/24
181.214.225.0-181.214.226.255
181.215.92.0/24
181.215.117.0-181.215.118.255
181.215.120.0/24
181.215.125.0-181.215.126.255
181.215.129.0/24
181.215.131.0/24
181.215.146.0/24
181.215.153.0/24
181.215.155.0-181.215.156.255
181.215.158.0/24
181.215.169.0/24
181.215.172.0/24
181.215.195.0/24
185.34.43.0/24
185.142.24.0/24
185.143.229.0/24
185.151.59.0/24
185.158.100.0/22
185.158.134.0/24
191.96.4.0/24
191.96.44.0/22
191.96.107.0/24
191.96.122.0/24
191.96.160.0/22
191.96.174.0/24
191.96.239.0/24
191.101.4.0/23
191.101.43.0/24
191.101.99.0/24
191.101.119.0/24
191.101.154.0/24
191.101.160.0/24
191.101.216.0/24
191.101.255.0/24
213.109.171.0/24
IPv6:
2a00:d1a0:a::/48
2a0a:a700::/30
Signature Algorithm: sha256WithRSAEncryption
5c:00:24:93:a5:b5:eb:05:86:90:35:c2:dd:fb:29:44:97:75:
42:00:3d:61:e7:cb:16:6e:e0:8d:23:51:cc:ca:3d:ff:ae:1b:
40:a5:f0:6d:5c:18:4f:4d:61:15:e3:0b:1b:a7:31:c4:e4:ca:
ed:93:b5:e0:8b:c2:52:6f:89:79:0e:c9:85:fe:2e:8a:ca:8c:
f6:21:87:91:f3:74:2d:ea:75:15:31:17:90:b7:ed:55:0d:29:
ef:b6:cb:0a:cd:1a:10:bd:da:44:92:e2:be:22:78:3e:97:cc:
27:b4:64:68:41:ab:f5:3f:a6:d2:c1:9e:eb:7e:69:71:b1:05:
d7:4b:35:b5:98:b1:8d:0a:b4:b1:5e:5c:37:e5:dc:f4:63:5b:
9f:12:f9:80:ad:aa:7d:ce:e8:e5:1c:25:15:ab:4d:ac:55:42:
fa:9b:89:84:a6:8b:18:6e:a9:a1:c9:c8:09:bf:6a:82:af:93:
97:f6:4b:6e:0d:4e:b8:bd:71:08:89:13:3f:74:e2:d7:9e:2f:
3f:f7:5d:fa:f0:39:56:8e:d3:eb:9f:2a:f9:83:30:ce:9f:2f:
c7:c9:b7:5d:fc:79:ba:ba:f3:ad:78:bf:bc:68:4f:d1:f7:de:
d0:b8:d9:cb:79:4f:cb:b9:c6:1e:7a:88:99:8c:2d:0b:a0:5a:
28:71:df:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:13:11 2026 by rpki-client