Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400039.roa
File: AS400039.roa (raw, json)
Hash identifier: Rf53GmX22alWfh+ndVCbjT3CbbOoqd/ryW4wMRxNcZo=
Subject key identifier: C8:5F:8F:4D:67:8F:6F:89:03:5E:9E:E4:CF:D2:EE:1C:E5:60:BE:CD
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 06749615558710265B54673837253A18A2E96775
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400039.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 400039
IP address blocks: 5.181.129.0/24 maxlen: 24
181.215.245.0/24 maxlen: 24
191.96.197.0/24 maxlen: 24
191.101.57.0/24 maxlen: 24
193.31.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:74:96:15:55:87:10:26:5b:54:67:38:37:25:3a:18:a2:e9:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=C85F8F4D678F6F89035E9EE4CFD2EE1CE560BECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:53:27:ed:be:7b:29:49:ce:9c:15:76:f7:
f8:80:bf:de:8b:68:b2:6b:ea:15:d0:99:a5:59:92:
26:b5:34:f2:d2:a4:2f:9a:64:87:6b:24:74:01:a6:
3d:9e:2f:96:35:9f:62:78:14:a8:27:4f:3e:da:61:
a6:e2:e6:4e:e0:08:43:7e:ad:a7:54:f9:90:40:71:
39:7c:a8:58:16:1e:b0:58:bb:59:3e:c2:db:e5:10:
d1:87:e2:9b:9e:65:89:f4:fd:42:80:48:0f:cb:48:
c9:99:37:34:25:16:a7:3c:5b:08:22:5f:b1:bc:40:
7d:ec:3b:67:b8:84:03:66:3a:1f:b1:1d:76:e9:3a:
b9:2b:73:99:e9:3b:51:c6:7a:70:00:8e:6c:b3:3f:
e3:7a:1b:6e:64:12:84:90:0e:a7:03:15:c3:28:bc:
d1:32:76:b3:72:ed:6c:27:ee:2c:92:72:6c:e6:37:
b0:ef:1b:3d:41:cc:98:3d:62:48:89:62:b8:bb:40:
e3:f8:ab:f9:98:d8:a5:ff:66:e0:76:2b:46:86:b6:
95:03:e3:cb:0d:31:74:e5:84:3d:10:aa:ee:a0:44:
f7:02:8c:f0:dc:a4:e8:d0:28:35:26:ab:15:22:5a:
39:71:ca:80:b7:16:fa:62:a9:b9:d0:6a:ec:d5:70:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5F:8F:4D:67:8F:6F:89:03:5E:9E:E4:CF:D2:EE:1C:E5:60:BE:CD
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.129.0/24
181.215.245.0/24
191.96.197.0/24
191.101.57.0/24
193.31.42.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7f:76:fe:c1:76:42:7f:2c:8b:b7:c1:80:bb:29:dd:84:82:
f3:91:71:dc:96:26:ff:b2:b2:f2:a2:5d:97:7b:17:09:73:b9:
98:14:10:c3:ff:db:53:44:80:4d:8c:af:61:e5:39:56:a9:ca:
22:d5:56:3a:4e:cd:16:39:bf:4b:1a:8b:14:72:19:81:ac:9e:
f6:44:b4:01:a8:fa:f3:d7:89:4e:8c:a3:64:13:fd:57:dc:3a:
a4:64:7f:1c:bb:a3:97:27:f8:9e:81:77:5d:95:ed:80:75:69:
0c:41:9f:5b:2b:95:a9:bc:81:0d:f4:14:77:68:cb:5b:b0:10:
cc:a5:1b:52:ab:49:d2:03:b4:44:c7:67:c3:56:ca:f1:d7:f1:
a2:0d:2b:d5:b0:e6:0f:b9:ca:0c:0e:42:8c:7c:30:5f:12:8f:
2a:a7:aa:c6:44:a8:ac:14:51:73:d1:da:8a:6d:9d:a0:c5:aa:
47:d9:d3:ee:b4:2f:99:bd:48:8c:9c:44:20:7a:3f:25:3d:46:
b4:c8:67:a4:3d:4f:18:e8:54:0a:8e:fe:4c:39:25:fc:55:57:
8e:65:cd:b2:f0:1b:dd:9f:dd:90:a9:d8:1e:1f:47:0a:8f:42:
e0:f1:51:50:a0:cb:37:25:05:73:66:37:61:af:eb:34:e3:b8:
ae:55:c2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:21:42 2026 by rpki-client