Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53991.roa
File: AS53991.roa (raw, json)
Hash identifier: ABU4qacdbeD0nxizI5XMqII4C5B4EjguvVK96Orh1O8=
Subject key identifier: B2:74:96:5E:AE:4D:6B:52:13:5B:C4:70:E0:42:A5:78:51:9B:79:FB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 539AEF91BE5C675891348D269BD0AB1E67D1B07C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53991.roa
Signing time: Fri 06 Nov 2026 20:49:41 +0000
ROA not before: Fri 06 Nov 2026 20:44:41 +0000
ROA not after: Fri 05 Nov 2027 20:49:41 +0000
asID: 53991
IP address blocks: 181.215.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 15:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9a:ef:91:be:5c:67:58:91:34:8d:26:9b:d0:ab:1e:67:d1:b0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 6 20:44:41 2026 GMT
Not After : Nov 5 20:49:41 2027 GMT
Subject: CN=B274965EAE4D6B52135BC470E042A578519B79FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:a7:04:c2:2d:21:14:cc:19:4e:c0:04:fb:
b2:e4:d3:33:3f:94:9a:5f:67:a5:c3:8c:1f:ad:a8:
1c:97:b3:65:38:81:5d:be:5b:6a:c7:12:4b:76:f5:
a5:71:c2:99:ce:78:6b:87:cb:48:2a:85:e2:0d:76:
0c:61:10:f4:75:66:f1:03:c4:80:fd:f1:c4:95:66:
1f:11:41:c1:8b:a9:bf:c3:5c:5a:3d:83:df:4f:a7:
e5:2c:41:b0:a7:fe:be:39:68:fc:50:54:84:39:72:
5e:f9:73:19:e1:53:2f:c2:94:8b:a0:85:03:b6:dc:
f1:ae:85:a0:3f:5a:24:3d:b1:ef:89:9d:f2:cb:f9:
81:9c:c2:a4:7c:81:67:90:72:9c:59:f7:fd:89:db:
bb:58:53:cf:9b:cf:0a:c1:82:10:66:79:4b:a8:62:
05:b6:f5:3e:48:58:dc:ca:35:30:58:9f:ab:84:06:
08:cf:09:5b:cb:66:7f:bb:62:44:ef:ef:f8:98:de:
50:99:dd:48:55:ae:0e:86:f4:f0:a2:20:08:df:f1:
d0:da:9d:c1:ba:80:78:f0:20:b5:00:86:ff:fb:92:
1f:e5:37:d3:6c:10:cc:e5:30:92:a2:1e:55:cc:88:
dd:f1:34:7a:7f:23:ee:39:0f:7f:40:90:b5:db:58:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:96:5E:AE:4D:6B:52:13:5B:C4:70:E0:42:A5:78:51:9B:79:FB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53991.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f1:61:c0:c8:d2:b8:9d:01:7a:43:e5:6b:a5:5d:1c:72:6d:
48:99:4b:75:6a:31:2a:2e:aa:40:aa:83:e8:b2:9d:8f:52:bc:
f8:28:dc:f7:af:e6:f5:ce:ef:16:71:c4:7c:a5:aa:cb:d2:6f:
8d:f2:55:ed:53:58:cd:7b:09:6c:0a:d9:05:31:90:78:18:e8:
20:81:1a:b1:75:8d:b2:f7:a5:c0:57:e1:9b:28:62:8f:89:b8:
7f:51:dc:6f:f5:3b:6f:7a:e1:7e:46:98:d3:26:67:be:3f:93:
fb:6c:20:27:75:47:72:71:e4:66:06:67:61:7c:6e:ee:d2:ac:
25:1b:75:af:3b:8d:34:4b:f5:76:6f:cf:17:1e:38:78:fc:c8:
90:d3:6d:5e:bf:5d:67:53:01:3c:c7:85:6e:cb:4c:47:2c:6d:
4b:03:e7:8e:58:2b:83:d3:3f:25:b3:a1:97:64:56:e6:bf:4a:
50:fb:17:49:b4:1f:0a:19:e1:50:a4:fd:0e:e6:fd:16:db:6a:
a5:00:a1:17:25:1c:a2:11:5d:18:91:35:67:e6:62:f1:7f:40:
14:d9:7d:99:b1:63:31:bf:72:38:f3:e5:f8:e4:83:78:bc:eb:
6f:62:e6:d4:28:e6:ce:96:58:8b:70:f2:99:f4:b0:8a:e1:83:
1a:f7:1b:72
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUU5rvkb5cZ1iRNI0mm9CrHmfRsHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjExMDYyMDQ0NDFaFw0yNzExMDUyMDQ5NDFaMDMxMTAvBgNV
BAMTKEIyNzQ5NjVFQUU0RDZCNTIxMzVCQzQ3MEUwNDJBNTc4NTE5Qjc5RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDKcEwi0hFMwZTsAE+7Lk0zM/
lJpfZ6XDjB+tqByXs2U4gV2+W2rHEkt29aVxwpnOeGuHy0gqheINdgxhEPR1ZvED
xID98cSVZh8RQcGLqb/DXFo9g99Pp+UsQbCn/r45aPxQVIQ5cl75cxnhUy/ClIug
hQO23PGuhaA/WiQ9se+JnfLL+YGcwqR8gWeQcpxZ9/2J27tYU8+bzwrBghBmeUuo
YgW29T5IWNzKNTBYn6uEBgjPCVvLZn+7YkTv7/iY3lCZ3UhVrg6G9PCiIAjf8dDa
ncG6gHjwILUAhv/7kh/lN9NsEMzlMJKiHlXMiN3xNHp/I+45D39AkLXbWOONAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUsnSWXq5Na1ITW8Rw4EKleFGbefswHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTM5OTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11x4w
DQYJKoZIhvcNAQELBQADggEBAGzxYcDI0ridAXpD5WulXRxybUiZS3VqMSouqkCq
g+iynY9SvPgo3Pev5vXO7xZxxHylqsvSb43yVe1TWM17CWwK2QUxkHgY6CCBGrF1
jbL3pcBX4ZsoYo+JuH9R3G/1O2964X5GmNMmZ74/k/tsICd1R3Jx5GYGZ2F8bu7S
rCUbda87jTRL9XZvzxceOHj8yJDTbV6/XWdTATzHhW7LTEcsbUsD545YK4PTPyWz
oZdkVua/SlD7F0m0HwoZ4VCk/Q7m/RbbaqUAoRclHKIRXRiRNWfmYvF/QBTZfZmx
YzG/cjjz5fjkg3i8629i5tQo5s6WWItw8pn0sIrhgxr3G3I=
-----END CERTIFICATE-----
Generated at Tue Nov 10 23:39:16 2026 by rpki-client