Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: 9wfaB5bXBynzt43DwKy2a43XRhMEnLuUqoMQrnjgzBI=
Subject key identifier: 0D:92:F4:F0:E5:EB:32:0A:DD:F9:12:7B:15:33:F1:42:C4:28:D7:A0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 52F1F20FFC8CD0B4884C2974A2DF67C5592D3459
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
Signing time: Thu 14 May 2026 08:32:27 +0000
ROA not before: Thu 14 May 2026 08:27:27 +0000
ROA not after: Thu 13 May 2027 08:32:27 +0000
asID: 396356
IP address blocks: 2.58.29.0/24 maxlen: 24
2.58.30.0/24 maxlen: 24
2.58.31.0/24 maxlen: 24
2.58.174.0/24 maxlen: 24
5.181.133.0/24 maxlen: 24
5.252.76.0/24 maxlen: 24
5.253.200.0/24 maxlen: 24
5.253.201.0/24 maxlen: 24
5.253.203.0/24 maxlen: 24
45.81.2.0/24 maxlen: 24
45.89.251.0/24 maxlen: 24
45.89.252.0/24 maxlen: 24
45.137.31.0/24 maxlen: 24
45.137.156.0/24 maxlen: 24
45.139.181.0/24 maxlen: 24
109.106.2.0/24 maxlen: 24
130.185.125.0/24 maxlen: 24
179.61.167.0/24 maxlen: 24
179.61.175.0/24 maxlen: 24
179.61.178.0/24 maxlen: 24
179.61.179.0/24 maxlen: 24
179.61.218.0/24 maxlen: 24
179.61.233.0/24 maxlen: 24
181.41.204.0/24 maxlen: 24
181.41.208.0/24 maxlen: 24
181.41.218.0/24 maxlen: 24
181.214.56.0/24 maxlen: 24
181.214.59.0/24 maxlen: 24
181.214.61.0/24 maxlen: 24
181.214.64.0/24 maxlen: 24
181.214.66.0/24 maxlen: 24
181.214.70.0/24 maxlen: 24
181.214.86.0/24 maxlen: 24
181.214.102.0/24 maxlen: 24
181.214.196.0/24 maxlen: 24
181.214.225.0/24 maxlen: 24
181.214.226.0/24 maxlen: 24
181.215.92.0/24 maxlen: 24
181.215.117.0/24 maxlen: 24
181.215.118.0/24 maxlen: 24
181.215.120.0/24 maxlen: 24
181.215.125.0/24 maxlen: 24
181.215.126.0/24 maxlen: 24
181.215.129.0/24 maxlen: 24
181.215.131.0/24 maxlen: 24
181.215.146.0/24 maxlen: 24
181.215.153.0/24 maxlen: 24
181.215.155.0/24 maxlen: 24
181.215.156.0/24 maxlen: 24
181.215.158.0/24 maxlen: 24
181.215.169.0/24 maxlen: 24
181.215.172.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
185.34.43.0/24 maxlen: 24
185.142.24.0/24 maxlen: 24
185.143.229.0/24 maxlen: 24
185.151.59.0/24 maxlen: 24
185.158.100.0/24 maxlen: 24
185.158.101.0/24 maxlen: 24
185.158.102.0/24 maxlen: 24
185.158.103.0/24 maxlen: 24
185.158.134.0/24 maxlen: 24
191.96.44.0/24 maxlen: 24
191.96.45.0/24 maxlen: 24
191.96.46.0/24 maxlen: 24
191.96.47.0/24 maxlen: 24
191.96.107.0/24 maxlen: 24
191.96.122.0/24 maxlen: 24
191.96.160.0/24 maxlen: 24
191.96.161.0/24 maxlen: 24
191.96.162.0/24 maxlen: 24
191.96.163.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
191.96.239.0/24 maxlen: 24
191.101.4.0/24 maxlen: 24
191.101.5.0/24 maxlen: 24
191.101.43.0/24 maxlen: 24
191.101.99.0/24 maxlen: 24
191.101.119.0/24 maxlen: 24
191.101.154.0/24 maxlen: 24
191.101.160.0/24 maxlen: 24
191.101.216.0/24 maxlen: 24
191.101.255.0/24 maxlen: 24
213.109.171.0/24 maxlen: 24
2a0a:a700::/30 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f1:f2:0f:fc:8c:d0:b4:88:4c:29:74:a2:df:67:c5:59:2d:34:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 14 08:27:27 2026 GMT
Not After : May 13 08:32:27 2027 GMT
Subject: CN=0D92F4F0E5EB320ADDF9127B1533F142C428D7A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:ad:49:e9:aa:d4:60:94:97:b9:c5:cf:76:
0f:31:f2:84:d5:4e:05:80:6b:78:bb:d8:a9:c3:05:
3b:37:d8:ae:f3:e9:bf:68:31:86:cc:ce:f1:37:01:
8f:21:7f:90:63:ed:a4:e1:87:05:f1:85:f1:db:bb:
94:4d:d7:60:ce:f9:b4:e3:d0:25:bc:b2:a8:f9:12:
93:f8:9d:bf:b4:32:5d:84:27:02:26:a6:a5:16:ca:
74:c2:64:81:1a:6d:45:96:fa:f5:ce:d1:83:e0:b8:
a7:96:16:be:df:d4:c5:b9:9a:d7:59:5b:80:69:62:
da:d8:e8:b7:e7:fc:fb:88:3e:57:4f:98:a3:e9:88:
ca:1c:a6:ab:92:13:c8:86:e4:2d:0d:98:15:62:a2:
d6:9a:91:54:ad:f8:9f:2c:dd:fc:99:be:5c:fc:e6:
53:12:e6:fc:42:86:12:39:dc:1c:86:2a:73:1f:99:
dd:f9:c3:e4:43:2a:f4:aa:01:7e:f6:dc:dd:0b:49:
3b:5f:49:03:cf:a7:78:49:01:3b:5e:7b:8d:14:bb:
26:32:43:ca:c8:3a:df:f7:74:d1:8b:40:f6:7b:85:
f4:8c:75:61:0e:17:d2:ff:f0:ee:97:34:92:0d:6d:
dc:6d:1b:c8:4e:30:7b:f7:2e:77:1b:09:6a:ea:db:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:92:F4:F0:E5:EB:32:0A:DD:F9:12:7B:15:33:F1:42:C4:28:D7:A0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.29.0-2.58.31.255
2.58.174.0/24
5.181.133.0/24
5.252.76.0/24
5.253.200.0/23
5.253.203.0/24
45.81.2.0/24
45.89.251.0-45.89.252.255
45.137.31.0/24
45.137.156.0/24
45.139.181.0/24
109.106.2.0/24
130.185.125.0/24
179.61.167.0/24
179.61.175.0/24
179.61.178.0/23
179.61.218.0/24
179.61.233.0/24
181.41.204.0/24
181.41.208.0/24
181.41.218.0/24
181.214.56.0/24
181.214.59.0/24
181.214.61.0/24
181.214.64.0/24
181.214.66.0/24
181.214.70.0/24
181.214.86.0/24
181.214.102.0/24
181.214.196.0/24
181.214.225.0-181.214.226.255
181.215.92.0/24
181.215.117.0-181.215.118.255
181.215.120.0/24
181.215.125.0-181.215.126.255
181.215.129.0/24
181.215.131.0/24
181.215.146.0/24
181.215.153.0/24
181.215.155.0-181.215.156.255
181.215.158.0/24
181.215.169.0/24
181.215.172.0/24
181.215.195.0/24
185.34.43.0/24
185.142.24.0/24
185.143.229.0/24
185.151.59.0/24
185.158.100.0/22
185.158.134.0/24
191.96.44.0/22
191.96.107.0/24
191.96.122.0/24
191.96.160.0/22
191.96.174.0/24
191.96.239.0/24
191.101.4.0/23
191.101.43.0/24
191.101.99.0/24
191.101.119.0/24
191.101.154.0/24
191.101.160.0/24
191.101.216.0/24
191.101.255.0/24
213.109.171.0/24
IPv6:
2a0a:a700::/30
Signature Algorithm: sha256WithRSAEncryption
b5:fb:b2:7a:01:77:6d:80:88:b8:75:87:fb:b1:b8:d2:4a:bc:
07:77:60:4d:d0:91:98:ce:b0:d9:4f:0d:6d:60:08:02:b5:97:
c4:6d:34:37:40:f5:ff:75:0b:a6:fe:a7:3b:c9:1f:c5:e7:3f:
9c:03:0d:6b:85:bc:ca:3b:fe:d9:ac:47:b4:be:3f:2d:63:bf:
2c:49:1d:1a:0f:a8:0c:52:81:16:dd:4c:7a:61:4a:5b:07:a0:
d6:09:b4:55:f8:6e:82:1c:0e:88:5d:bd:c4:ed:6c:28:d6:16:
75:c1:19:e9:42:4f:4b:4a:0f:3b:5d:40:9b:64:b4:e9:86:ef:
67:b6:0c:64:84:92:48:1c:8f:b1:c3:0d:fe:91:9f:87:90:98:
c1:a8:89:6e:27:2f:cb:c4:f3:08:ec:02:67:5d:58:26:d5:97:
f6:5b:04:cb:e8:49:65:08:04:ab:59:b9:39:a0:07:31:d0:88:
fb:fe:ab:66:74:aa:4d:c0:74:f2:ad:f2:fe:70:23:4d:c4:0e:
cb:7c:46:f6:2b:67:c0:e0:b9:9b:97:b7:89:de:5e:58:5c:2e:
20:2f:8c:1b:90:4f:d0:93:8c:15:17:33:6c:68:f4:ea:55:78:
53:10:78:97:a8:21:0a:1c:96:be:b3:b3:30:90:f8:a2:c5:f0:
34:6f:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:14:37 2026 by rpki-client