Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: 3KSEll5zzA4fLqWTExiqxGP4Zy/cVAPLPojRqfQXINQ=
Subject key identifier: BE:3B:43:98:3F:C2:36:F8:91:F9:47:0D:66:A4:F3:3D:23:AE:E5:CA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5946B6947CC3260CFAA87E1EA2B2692380ED2608
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
Signing time: Sun 07 Jun 2026 19:47:25 +0000
ROA not before: Sun 07 Jun 2026 19:42:25 +0000
ROA not after: Sun 06 Jun 2027 19:47:25 +0000
asID: 396356
IP address blocks: 51.194.114.0/24 maxlen: 24
51.194.157.0/24 maxlen: 24
51.241.63.0/24 maxlen: 24
51.241.66.0/24 maxlen: 24
51.241.67.0/24 maxlen: 24
51.241.72.0/24 maxlen: 24
51.241.74.0/24 maxlen: 24
51.241.75.0/24 maxlen: 24
51.241.77.0/24 maxlen: 24
51.241.78.0/24 maxlen: 24
51.241.82.0/24 maxlen: 24
51.241.83.0/24 maxlen: 24
51.241.85.0/24 maxlen: 24
51.241.93.0/24 maxlen: 24
51.241.94.0/24 maxlen: 24
51.241.97.0/24 maxlen: 24
51.241.98.0/24 maxlen: 24
51.241.112.0/24 maxlen: 24
51.241.113.0/24 maxlen: 24
51.241.121.0/24 maxlen: 24
51.241.123.0/24 maxlen: 24
78.105.121.0/24 maxlen: 24
78.105.123.0/24 maxlen: 24
78.105.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:46:b6:94:7c:c3:26:0c:fa:a8:7e:1e:a2:b2:69:23:80:ed:26:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 7 19:42:25 2026 GMT
Not After : Jun 6 19:47:25 2027 GMT
Subject: CN=BE3B43983FC236F891F9470D66A4F33D23AEE5CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:0f:61:97:1c:98:46:b4:17:aa:9d:ed:cf:
1f:0a:7a:2b:0f:fa:bc:d7:fe:56:0c:ab:b9:8f:ae:
5e:22:dc:9f:3a:0b:65:6e:1e:61:eb:d3:38:61:cb:
31:21:5b:4c:59:2e:4f:fd:aa:e4:52:56:1b:9e:6a:
df:99:90:74:f6:49:a5:93:09:98:d9:0f:dc:f8:60:
87:54:41:f4:b4:0c:52:bb:8d:28:b9:b0:4b:32:04:
3f:8f:97:e2:32:5b:d0:43:f7:98:87:6e:0d:6b:db:
0b:1e:5a:b6:c5:f7:d0:ef:dd:d1:df:40:1e:09:8c:
fe:b2:48:4b:ea:54:7f:ed:20:32:52:f1:10:6c:ba:
2c:4c:a7:b7:3e:c9:c0:28:93:f8:40:21:ef:ce:b9:
fb:c8:7f:ee:58:a1:e0:1c:c7:a9:b7:bc:d8:cd:87:
b8:76:2e:ba:26:34:d4:2c:1a:7c:ee:56:35:5a:d9:
0e:5b:3d:1b:cf:48:41:c6:4e:51:c8:52:85:4f:66:
2e:d4:d5:88:c0:fa:24:ff:e2:c9:b0:fb:32:80:13:
9b:15:f5:e7:ab:e4:b6:ec:15:95:f2:86:34:69:66:
97:e3:d1:7a:99:e4:33:d3:86:2c:dc:c7:64:12:1b:
45:44:8b:a5:4e:32:22:03:ed:ff:7a:46:7d:df:83:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:43:98:3F:C2:36:F8:91:F9:47:0D:66:A4:F3:3D:23:AE:E5:CA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.114.0/24
51.194.157.0/24
51.241.63.0/24
51.241.66.0/23
51.241.72.0/24
51.241.74.0/23
51.241.77.0-51.241.78.255
51.241.82.0/23
51.241.85.0/24
51.241.93.0-51.241.94.255
51.241.97.0-51.241.98.255
51.241.112.0/23
51.241.121.0/24
51.241.123.0/24
78.105.121.0/24
78.105.123.0/24
78.105.244.0/24
Signature Algorithm: sha256WithRSAEncryption
46:04:11:8c:b5:5a:96:f3:1f:10:3f:4c:aa:57:58:2d:13:22:
c3:ac:fe:c9:ab:db:8a:f7:78:42:83:da:8d:a8:e5:f3:82:9f:
f7:28:c3:25:40:a4:4f:5b:01:50:06:13:fc:07:18:64:6f:8d:
a7:a8:fb:c9:5f:4d:a6:8e:c9:77:ee:09:af:51:13:56:bb:b5:
92:6c:49:c8:cb:09:9a:e8:76:48:a0:0d:45:99:0d:c9:79:db:
da:d8:fb:9f:62:91:fa:72:62:87:11:a5:0b:65:5d:35:31:b0:
03:ab:af:4f:10:0f:d1:65:f9:26:5f:50:d8:ed:12:67:f9:e9:
da:88:2d:f3:83:7a:34:ad:83:45:d7:fe:22:63:4b:64:5f:40:
88:1b:67:33:23:5b:a1:a4:6b:6d:61:3c:71:8e:b2:30:a4:12:
62:a2:da:48:68:ce:b8:44:ad:2e:e9:b8:ff:19:e1:d9:3d:75:
40:50:d6:2a:f3:40:df:6a:d2:76:0c:f5:93:01:bf:72:8b:2b:
d4:c1:34:df:a1:29:fb:c6:2d:97:22:a4:6a:1a:d4:64:74:f3:
0a:26:63:f2:01:da:4d:76:ac:b9:79:3d:c7:61:9c:c9:92:8c:
57:d9:49:be:2c:ea:54:4e:a6:de:78:c6:47:ef:3b:1f:bc:1b:
ec:c7:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:49 2026 by rpki-client