Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: Mqhd3Ts6ZoLxOZYr4kRmudbEP6gnfLg71M+5NynuGZQ=
Subject key identifier: 51:46:D2:EA:9B:A1:1C:E9:D8:18:52:7F:95:95:4C:02:D1:05:0B:33
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3323832AAAD0CF999B971EBA800E08133C625597
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS399359.roa
Signing time: Thu 17 Sep 2026 14:33:04 +0000
ROA not before: Thu 17 Sep 2026 14:28:04 +0000
ROA not after: Thu 16 Sep 2027 14:33:04 +0000
asID: 399359
IP address blocks: 179.61.150.0/24 maxlen: 24
181.41.210.0/24 maxlen: 24
191.101.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:23:83:2a:aa:d0:cf:99:9b:97:1e:ba:80:0e:08:13:3c:62:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 17 14:28:04 2026 GMT
Not After : Sep 16 14:33:04 2027 GMT
Subject: CN=5146D2EA9BA11CE9D818527F95954C02D1050B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:c5:4b:8d:ea:e4:65:d2:b5:13:7e:3b:db:
e7:6f:05:db:a1:13:93:5c:e5:cd:58:e4:ae:40:fc:
fd:7a:17:ae:87:71:37:85:83:bd:bc:2c:66:8e:d1:
8c:bb:22:57:b7:9b:0a:96:73:5c:58:49:ff:a9:c4:
a7:7a:0f:37:1e:67:eb:8f:84:78:68:42:ff:dc:d6:
15:c7:1d:8d:b4:d7:66:f6:27:55:e3:5c:34:65:31:
cc:cb:10:5d:9b:db:62:2c:2f:61:d3:1b:28:9d:d2:
9c:1e:4f:6a:cd:a1:4f:9c:2b:9b:b6:af:26:08:56:
b5:52:25:98:f2:6a:bd:d1:16:cd:eb:27:44:8a:ad:
12:39:4b:3d:8e:d2:0b:d9:58:81:2a:fc:b1:eb:61:
5b:b4:4f:5b:21:2f:ba:cc:4e:af:c1:cf:dd:9f:09:
65:c6:02:3d:56:9b:03:b5:19:ec:8d:41:a2:96:55:
cd:5d:a7:89:b1:61:4a:64:12:e0:44:9c:1d:48:87:
bd:a7:ae:5e:fd:46:3c:e1:f1:ef:7b:b2:93:da:26:
0f:79:a1:66:12:02:9a:f7:90:c0:d9:a4:10:01:33:
9a:e8:4d:c6:99:91:c9:40:62:f4:5d:ed:18:f5:49:
f5:60:ad:30:e1:a9:c3:f9:07:af:b2:f5:e7:5b:5b:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:46:D2:EA:9B:A1:1C:E9:D8:18:52:7F:95:95:4C:02:D1:05:0B:33
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.150.0/24
181.41.210.0/24
191.101.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:6e:c6:e5:88:6f:54:a1:a4:0f:62:c1:f7:bc:53:c4:e8:53:
07:be:3c:15:de:9e:96:0a:b5:72:46:bc:ab:eb:f6:38:12:b6:
21:8b:7c:4e:0c:ea:52:32:28:3f:bd:a7:80:55:42:d7:6b:93:
b1:5e:4f:69:e0:f0:15:80:ce:d1:76:b7:be:0e:7b:50:f0:1d:
e4:00:56:52:64:dc:68:bf:54:99:b9:74:e0:10:9a:aa:a0:b5:
f2:8e:f5:4c:d8:87:08:5c:0e:80:17:47:c8:c4:5e:73:aa:96:
d9:eb:7c:02:0f:08:78:fb:74:f5:9c:87:ad:69:44:97:32:94:
75:4c:0f:43:3d:97:21:5b:b9:af:c4:ff:24:6c:bc:3c:1e:f6:
b8:0c:09:95:7c:e7:2d:ff:cb:5b:9e:b9:5d:03:f4:93:a8:8c:
c7:cb:80:d5:2a:e1:24:b2:3e:72:42:d4:2e:05:9c:1b:9a:28:
de:cc:be:75:2e:38:48:30:d3:3b:86:d6:d1:76:3e:69:03:a4:
76:86:2e:fb:f4:c6:71:44:dc:66:4b:1b:8d:ac:4d:68:e1:23:
11:78:27:1b:fb:a1:1c:9f:8d:20:ad:f3:8d:a9:24:8e:50:25:
fb:ea:ef:ae:23:8e:18:79:c9:13:51:ea:93:35:78:4f:a8:0d:
af:25:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:38 2026 by rpki-client