Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: sMrzRkfVjldnQbkgolJiLo+DtaYS9l6br5cv4a5moH8=
Subject key identifier: 6A:0F:6E:03:B8:D8:C4:9E:DE:DB:87:96:0F:D7:DC:3E:F5:26:DF:4C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4C6944B6BC6C820BFF6BEE4ECC00AFE120DCF301
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
Signing time: Fri 28 Aug 2026 07:44:54 +0000
ROA not before: Fri 28 Aug 2026 07:39:54 +0000
ROA not after: Fri 27 Aug 2027 07:44:54 +0000
asID: 396356
IP address blocks: 51.194.114.0/24 maxlen: 24
51.194.157.0/24 maxlen: 24
51.241.63.0/24 maxlen: 24
51.241.66.0/24 maxlen: 24
51.241.67.0/24 maxlen: 24
51.241.72.0/24 maxlen: 24
51.241.74.0/24 maxlen: 24
51.241.75.0/24 maxlen: 24
51.241.77.0/24 maxlen: 24
51.241.78.0/24 maxlen: 24
51.241.82.0/24 maxlen: 24
51.241.83.0/24 maxlen: 24
51.241.85.0/24 maxlen: 24
51.241.93.0/24 maxlen: 24
51.241.94.0/24 maxlen: 24
51.241.97.0/24 maxlen: 24
51.241.98.0/24 maxlen: 24
51.241.112.0/24 maxlen: 24
51.241.113.0/24 maxlen: 24
51.241.121.0/24 maxlen: 24
51.241.123.0/24 maxlen: 24
78.105.121.0/24 maxlen: 24
78.105.123.0/24 maxlen: 24
78.105.125.0/24 maxlen: 24
78.105.244.0/24 maxlen: 24
188.221.227.0/24 maxlen: 24
188.221.240.0/24 maxlen: 24
188.221.247.0/24 maxlen: 24
188.221.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:69:44:b6:bc:6c:82:0b:ff:6b:ee:4e:cc:00:af:e1:20:dc:f3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 28 07:39:54 2026 GMT
Not After : Aug 27 07:44:54 2027 GMT
Subject: CN=6A0F6E03B8D8C49EDEDB87960FD7DC3EF526DF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:55:61:09:2f:f8:df:b9:b5:44:c8:e2:1e:
36:f7:d6:17:40:64:53:7b:65:10:2b:88:5c:0e:bf:
6a:4d:4b:1a:7e:5f:6c:49:98:ee:01:c9:6f:22:f0:
80:d4:1f:25:f6:58:5d:2b:5b:8c:c8:ed:4c:0e:90:
4c:ed:2c:c7:b3:aa:31:8f:4d:16:8a:88:c3:37:3c:
13:bd:7a:78:11:81:6f:16:30:97:09:a1:e9:85:89:
98:3f:2a:e7:74:74:b8:02:a4:42:65:89:5b:20:bd:
4e:d2:90:96:3f:ea:50:cc:e9:34:ed:47:52:3e:cc:
4d:7d:34:7c:93:12:49:c4:7b:ce:d7:21:93:46:27:
9e:43:e8:96:a6:ea:3b:03:5b:44:72:0d:e2:fc:49:
cc:c4:de:b0:51:88:9b:f3:8d:e9:56:0c:d9:99:08:
cd:b0:c1:1e:3c:97:06:3d:75:ce:b4:cb:69:0c:af:
ff:03:a4:b5:72:e5:a4:c5:49:35:f9:df:c3:db:6f:
2f:14:1f:d4:12:7d:52:78:4c:36:f5:76:89:2f:40:
6f:83:bb:f1:30:76:a0:f0:b1:11:13:f9:b5:90:61:
42:82:e9:5c:65:bf:7e:ad:64:b5:a3:87:1f:4f:25:
18:cd:21:4e:b2:d5:e6:cc:24:07:b8:2e:44:68:78:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:6E:03:B8:D8:C4:9E:DE:DB:87:96:0F:D7:DC:3E:F5:26:DF:4C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.114.0/24
51.194.157.0/24
51.241.63.0/24
51.241.66.0/23
51.241.72.0/24
51.241.74.0/23
51.241.77.0-51.241.78.255
51.241.82.0/23
51.241.85.0/24
51.241.93.0-51.241.94.255
51.241.97.0-51.241.98.255
51.241.112.0/23
51.241.121.0/24
51.241.123.0/24
78.105.121.0/24
78.105.123.0/24
78.105.125.0/24
78.105.244.0/24
188.221.227.0/24
188.221.240.0/24
188.221.247.0/24
188.221.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0d:9d:99:ce:1a:21:e9:93:30:10:63:85:bf:6a:77:d7:0c:
36:be:d3:da:cc:17:2c:07:50:86:10:dc:8e:84:f6:42:36:1b:
dd:15:50:a0:51:7c:a3:c6:16:01:e8:5f:5b:c4:7c:9a:4f:2a:
7a:52:97:ad:2a:d4:22:fd:13:76:0a:6b:f0:00:5e:86:15:d8:
c0:f9:49:23:c0:e8:5f:78:2f:fc:d8:d2:c3:55:c3:53:f3:e1:
0b:53:be:33:d5:af:b4:aa:32:85:22:97:30:a1:3c:15:8b:9b:
ef:63:56:bc:29:b1:cc:4c:cf:ff:9e:7e:af:c5:22:1f:94:6e:
33:95:a6:e8:d0:75:c6:39:e8:f2:3a:7e:8d:15:21:ad:e4:5c:
28:e5:db:ed:21:d2:30:c1:9c:da:88:e4:80:e3:35:c8:41:1d:
c6:bd:f0:e8:30:fb:78:d8:8e:8f:22:78:48:ae:f7:fe:ee:0f:
42:eb:fb:f6:e8:24:3e:de:89:8b:9b:22:14:81:6f:4b:88:73:
ef:44:c7:a2:ea:85:84:23:56:57:a5:1c:98:d6:6d:dd:03:fc:
b1:90:f3:1b:65:a4:d5:44:30:b7:b4:51:4d:63:f1:4b:4a:7a:
46:37:4e:ed:31:ee:96:8e:dc:3e:ce:cc:7c:97:1a:3c:7d:02:
5c:0a:80:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 04:49:14 2026 by rpki-client