Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: C8BmTTMmQz0LFSpIwBz9YELL6jZPHx86sy09mID5DLg=
Subject key identifier: 56:88:10:CA:2C:9A:44:5A:54:99:E9:87:93:84:9D:67:1D:D1:04:DF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3D7DB105856A76B37AA37A471C2CF46EF1B711DD
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399359.roa
Signing time: Sat 12 Sep 2026 00:52:22 +0000
ROA not before: Sat 12 Sep 2026 00:47:22 +0000
ROA not after: Sat 11 Sep 2027 00:52:22 +0000
asID: 399359
IP address blocks: 51.194.244.0/24 maxlen: 24
51.241.148.0/24 maxlen: 24
51.241.202.0/24 maxlen: 24
188.220.196.0/24 maxlen: 24
188.221.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7d:b1:05:85:6a:76:b3:7a:a3:7a:47:1c:2c:f4:6e:f1:b7:11:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 12 00:47:22 2026 GMT
Not After : Sep 11 00:52:22 2027 GMT
Subject: CN=568810CA2C9A445A5499E98793849D671DD104DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:f5:f3:3f:14:ca:bc:e5:8e:9e:01:9b:3b:
e4:ab:74:61:90:52:59:55:e3:e0:b5:f6:81:1c:8a:
fd:3e:5b:84:95:58:08:eb:ea:e6:bf:0c:89:89:18:
e5:c7:e6:a8:3b:28:18:e8:f6:11:6a:70:23:44:3d:
9c:09:66:0d:70:84:d5:12:a5:79:6f:4a:6d:75:cf:
70:83:d6:27:1f:32:2f:ad:a6:63:f9:75:a8:01:54:
9e:d8:26:69:6e:b3:d2:4f:dc:b4:9b:42:53:56:c1:
09:2d:05:b7:be:85:dd:54:67:62:5f:d7:de:f5:12:
b7:e9:ce:70:a0:6f:9c:7d:35:ba:20:97:1b:2f:e5:
03:67:f8:f4:2b:e2:c0:a7:30:0e:6d:9e:24:ea:d7:
fd:b1:bf:a2:eb:15:d1:5f:65:0c:73:a9:f2:e6:e2:
a7:5f:ba:fe:5b:a4:4b:ae:70:62:64:e8:82:8c:a9:
70:47:ed:dd:ca:8f:76:27:8a:bf:65:15:97:59:f6:
1f:3f:5b:00:ed:b1:8a:f0:c0:46:26:77:72:ad:c2:
fb:3a:1c:21:c7:d4:f4:de:8f:38:a4:e2:52:36:4c:
39:7c:64:d2:ed:28:cc:8c:c8:68:16:a7:ff:15:45:
37:be:29:be:06:fc:2f:8c:06:ce:8e:c7:85:8b:c1:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:88:10:CA:2C:9A:44:5A:54:99:E9:87:93:84:9D:67:1D:D1:04:DF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.244.0/24
51.241.148.0/24
51.241.202.0/24
188.220.196.0/24
188.221.28.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ca:c7:30:02:33:d6:de:1a:f2:6d:54:4a:bf:bc:29:11:b4:
5e:0b:aa:ed:71:e4:64:f6:76:1d:fc:b2:c4:3c:0b:87:e9:14:
85:a2:55:fb:d5:dd:70:52:41:7e:f5:78:6a:20:b4:e7:d3:4e:
29:bb:ac:73:c9:3e:7b:db:de:f9:80:64:56:1f:d0:29:ce:46:
3b:bf:d7:c6:b6:2d:29:28:69:94:d3:51:b6:bb:e1:ce:d3:6e:
13:68:8e:f0:98:be:81:1c:2c:8a:3d:69:1f:a3:86:06:79:7a:
8e:60:ae:03:3e:9f:27:ca:1b:ef:c1:e1:db:99:f7:b2:f2:4d:
3b:0a:e4:7c:e2:0f:64:7a:27:58:aa:98:e4:90:2f:de:4c:66:
5c:d8:60:3c:39:bf:eb:af:a0:65:ee:f6:81:a5:00:c8:4e:c3:
30:9d:cf:11:9e:9c:b2:6a:66:5a:be:13:a2:d6:0c:db:03:9c:
34:12:3a:9e:f0:9f:63:0b:f2:0d:3f:4f:c7:06:21:7a:14:17:
88:51:0d:ae:7e:0a:84:09:90:ed:13:cf:e7:d6:5b:17:19:3f:
85:2c:20:fd:ab:a0:8d:ca:75:38:56:18:e8:19:90:75:99:b5:
5d:41:bf:ab:ce:69:d7:96:59:1e:d0:f4:2c:30:cf:00:3a:73:
3f:28:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:05:17 2026 by rpki-client