Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: aRDbmiH3qM8QSQDSpAVN3infq+SKmitcsQx5W5OxtTA=
Subject key identifier: 74:D2:CE:9A:41:ED:2E:3F:51:6C:56:96:9E:52:2D:B2:A8:F8:C0:D6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5E81FD03374B6E6AF72218146EE7478939BBFD9F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
Signing time: Tue 27 Oct 2026 13:07:53 +0000
ROA not before: Tue 27 Oct 2026 13:02:53 +0000
ROA not after: Tue 26 Oct 2027 13:07:53 +0000
asID: 396356
IP address blocks: 51.146.94.0/24 maxlen: 24
51.146.219.0/24 maxlen: 24
51.194.70.0/24 maxlen: 24
51.194.114.0/24 maxlen: 24
51.194.157.0/24 maxlen: 24
51.194.210.0/24 maxlen: 24
51.241.19.0/24 maxlen: 24
51.241.63.0/24 maxlen: 24
51.241.66.0/24 maxlen: 24
51.241.67.0/24 maxlen: 24
51.241.72.0/24 maxlen: 24
51.241.74.0/24 maxlen: 24
51.241.75.0/24 maxlen: 24
51.241.77.0/24 maxlen: 24
51.241.78.0/24 maxlen: 24
51.241.82.0/24 maxlen: 24
51.241.83.0/24 maxlen: 24
51.241.85.0/24 maxlen: 24
51.241.93.0/24 maxlen: 24
51.241.94.0/24 maxlen: 24
51.241.97.0/24 maxlen: 24
51.241.98.0/24 maxlen: 24
51.241.112.0/24 maxlen: 24
51.241.113.0/24 maxlen: 24
51.241.121.0/24 maxlen: 24
51.241.123.0/24 maxlen: 24
51.241.145.0/24 maxlen: 24
78.105.112.0/24 maxlen: 24
78.105.121.0/24 maxlen: 24
78.105.123.0/24 maxlen: 24
78.105.125.0/24 maxlen: 24
78.105.144.0/24 maxlen: 24
78.105.244.0/24 maxlen: 24
94.118.1.0/24 maxlen: 24
94.118.16.0/24 maxlen: 24
188.220.17.0/24 maxlen: 24
188.221.34.0/24 maxlen: 24
188.221.227.0/24 maxlen: 24
188.221.240.0/24 maxlen: 24
188.221.247.0/24 maxlen: 24
188.221.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:81:fd:03:37:4b:6e:6a:f7:22:18:14:6e:e7:47:89:39:bb:fd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 27 13:02:53 2026 GMT
Not After : Oct 26 13:07:53 2027 GMT
Subject: CN=74D2CE9A41ED2E3F516C56969E522DB2A8F8C0D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:5e:80:e2:c9:3c:e5:30:bb:b7:e4:12:ca:
8f:1e:0e:70:b1:80:3b:a6:3b:72:9f:b0:46:d9:6c:
3c:2b:15:f9:42:01:9d:0e:d4:b5:00:ff:d2:58:ac:
e6:00:46:da:b9:43:cd:01:e7:31:30:83:c0:c7:e0:
0a:6a:76:a5:16:7f:54:d0:d3:6a:7b:79:1d:9a:a9:
79:e8:91:f8:06:d2:10:dd:a0:ab:15:41:34:9f:c2:
58:d2:f0:f7:a3:a9:48:44:ea:2b:1f:e8:48:dd:e9:
de:b8:18:c1:39:09:c9:f1:2d:e4:37:a0:26:b1:10:
ff:04:20:47:a0:70:39:7b:ad:fa:16:53:3d:39:73:
3f:98:49:38:8f:ea:f3:6b:19:2e:3b:f2:fb:f8:2c:
1e:71:09:e1:a8:04:b7:8f:3d:4c:20:b6:7f:d3:76:
84:2e:fe:67:35:e0:ec:45:de:4a:87:16:85:7c:87:
84:a3:a3:a0:2d:f2:8b:98:a1:a5:0d:9f:95:88:ef:
96:d8:c5:32:8d:ce:c0:fa:f2:59:e2:27:cd:e4:b3:
47:1a:67:cc:90:d9:12:5b:32:9b:a1:3d:5e:08:ee:
a5:04:6b:f3:6a:76:fb:dc:90:15:d9:a6:97:a5:83:
25:ca:29:f6:a6:a7:8b:74:e7:99:48:51:44:d2:cc:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:CE:9A:41:ED:2E:3F:51:6C:56:96:9E:52:2D:B2:A8:F8:C0:D6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.94.0/24
51.146.219.0/24
51.194.70.0/24
51.194.114.0/24
51.194.157.0/24
51.194.210.0/24
51.241.19.0/24
51.241.63.0/24
51.241.66.0/23
51.241.72.0/24
51.241.74.0/23
51.241.77.0-51.241.78.255
51.241.82.0/23
51.241.85.0/24
51.241.93.0-51.241.94.255
51.241.97.0-51.241.98.255
51.241.112.0/23
51.241.121.0/24
51.241.123.0/24
51.241.145.0/24
78.105.112.0/24
78.105.121.0/24
78.105.123.0/24
78.105.125.0/24
78.105.144.0/24
78.105.244.0/24
94.118.1.0/24
94.118.16.0/24
188.220.17.0/24
188.221.34.0/24
188.221.227.0/24
188.221.240.0/24
188.221.247.0/24
188.221.254.0/24
Signature Algorithm: sha256WithRSAEncryption
49:88:23:24:9a:77:5c:77:7e:9a:0d:cc:48:2a:1f:78:cd:b7:
07:40:fe:42:4d:41:60:2e:e0:28:19:8a:95:24:7d:80:c0:9f:
c4:02:51:8d:84:55:d1:8a:5f:a8:8a:51:ec:70:ef:e6:b3:d6:
46:81:55:d2:88:6c:85:62:f3:25:c9:9c:4d:20:a4:54:9e:be:
0a:19:56:8a:6f:3c:5c:a5:17:8a:45:27:7f:50:9e:62:73:9f:
8c:8a:c3:69:0b:01:07:1e:8e:e5:2b:f1:cd:c5:d1:3d:db:ee:
fd:e3:3b:37:55:54:75:57:d4:55:b5:50:54:67:56:4c:a3:39:
ac:06:db:7e:c7:17:f1:a7:cf:36:62:ed:75:3e:bc:24:7f:0b:
1e:08:16:22:85:46:c0:c0:47:2e:5d:67:24:bf:ac:ef:c0:00:
33:b1:42:92:af:c0:0b:d2:11:ff:09:b1:1f:52:3c:e2:15:8f:
d3:7a:a8:49:a3:f6:7e:3d:25:6a:83:bd:c6:33:d3:44:76:28:
26:49:bb:44:f5:d1:87:53:f4:ab:a8:52:3d:ef:b1:a1:ca:f0:
4b:7d:b1:57:f3:ff:84:29:60:b0:dd:ac:45:d1:c9:d3:6f:f4:
6e:8e:03:5e:ea:0b:a0:3b:5b:79:52:ca:13:77:a0:84:3f:fd:
e2:17:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:00:33 2026 by rpki-client