Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397373.roa
File: AS397373.roa (raw, json)
Hash identifier: r+qw0cVYugjHnw1tgvUhWJcPsIoXy8bAD7TEtQYDIsQ=
Subject key identifier: 68:42:5A:B5:BF:41:0F:91:48:AD:5D:87:AE:73:89:53:43:5E:7F:77
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 158B69097FEC440506F8ECCD65471D972422A461
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397373.roa
Signing time: Thu 02 Apr 2026 07:03:32 +0000
ROA not before: Thu 02 Apr 2026 06:58:32 +0000
ROA not after: Thu 01 Apr 2027 07:03:32 +0000
asID: 397373
IP address blocks: 51.146.200.0/21 maxlen: 24
51.194.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:8b:69:09:7f:ec:44:05:06:f8:ec:cd:65:47:1d:97:24:22:a4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 2 06:58:32 2026 GMT
Not After : Apr 1 07:03:32 2027 GMT
Subject: CN=68425AB5BF410F9148AD5D87AE738953435E7F77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:42:ba:5b:08:49:b3:30:77:43:a5:5c:9f:
43:79:48:39:bd:8b:b1:f9:38:75:77:54:68:69:42:
90:42:49:28:e7:8c:f3:78:92:25:00:6b:1b:b3:c5:
d4:b2:da:e2:1b:c6:e1:e8:c7:56:31:c2:cd:7c:72:
96:fc:ec:24:0b:f3:6a:fd:08:98:6f:04:d0:80:c0:
f1:f2:8c:1c:6d:45:f7:26:df:c9:2a:2f:c0:09:2e:
f2:a0:69:1d:7b:c9:aa:37:da:5f:2b:6a:52:44:a6:
80:6c:b5:73:62:92:e1:1c:e0:77:a8:34:cd:85:0f:
47:2a:5f:20:a4:5f:df:e0:1a:98:c1:09:46:70:9e:
80:05:88:1c:2a:6d:2c:43:77:15:8b:94:ac:04:2b:
25:13:9d:a0:a2:b3:50:db:2f:03:54:22:bd:96:46:
25:14:e1:51:65:7a:6e:48:74:4b:1b:f4:f0:15:fa:
06:03:39:76:e5:2f:e2:f5:4e:d1:e4:fd:71:45:8a:
86:7f:ec:de:19:16:a4:a9:2a:3e:85:3f:01:57:19:
2c:29:f4:58:9e:9a:65:b0:66:72:7b:9f:f2:cc:a9:
1a:22:17:30:39:c6:85:23:27:72:94:3a:45:a7:56:
7c:53:01:f9:92:e1:07:c1:54:99:4f:c1:ec:66:f2:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:42:5A:B5:BF:41:0F:91:48:AD:5D:87:AE:73:89:53:43:5E:7F:77
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.200.0/21
51.194.0.0/21
Signature Algorithm: sha256WithRSAEncryption
62:85:85:73:4d:26:6c:23:95:03:b6:bd:61:4e:ea:fb:da:83:
e3:7d:46:02:4c:c8:c2:61:a6:6a:3c:86:6c:8b:e1:87:c6:6b:
3d:33:33:25:06:6a:11:46:a2:88:42:3a:45:8c:7f:8d:67:32:
ba:cb:c9:e6:a0:86:4f:02:ff:6c:55:73:88:cb:c6:a2:9a:aa:
0c:f7:cc:2b:4a:cf:f7:59:1e:6b:be:66:90:0c:e6:15:02:23:
b0:1b:e2:1a:35:42:d7:4c:ff:56:ae:ad:2a:13:9a:2a:9d:7d:
2c:39:e6:41:0e:6d:2f:c5:40:1c:b6:f2:82:8e:7c:80:a4:cb:
bf:d7:62:b8:09:cf:8b:06:3d:76:c7:96:3f:52:65:64:80:77:
3a:e3:b5:bf:9b:2b:36:16:4a:cb:2e:d4:28:b8:f8:b4:f8:b5:
96:a2:80:14:b2:9c:74:bd:4b:86:13:ce:e1:23:da:79:39:a1:
44:a4:b9:90:0f:4e:75:51:93:e1:26:24:be:65:04:ad:70:90:
28:66:4c:83:c9:42:65:1b:52:8e:85:97:83:45:19:dc:36:14:
67:dd:0f:3e:56:02:e4:b6:03:11:ee:a9:23:17:44:21:0c:8a:
10:15:2b:5d:43:62:c1:b5:38:6f:68:f3:ae:d1:f6:7d:3d:45:
e6:90:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:32 2026 by rpki-client