Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS51355.roa
File: AS51355.roa (raw, json)
Hash identifier: ofbqMUh7HNjJDuAn4+jaY5MZXUmiFgrP6LMtUecKEsM=
Subject key identifier: E2:FF:CE:A4:BD:63:0D:18:B7:E2:8D:F0:A5:12:9C:48:E6:8D:E5:1B
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 415236C81F8C5B4EEC87AEEC11EBCAFF420FBFD7
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS51355.roa
Signing time: Sat 14 Nov 2026 01:51:27 +0000
ROA not before: Sat 14 Nov 2026 01:46:27 +0000
ROA not after: Sat 13 Nov 2027 01:51:27 +0000
asID: 51355
IP address blocks: 177.111.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:52:36:c8:1f:8c:5b:4e:ec:87:ae:ec:11:eb:ca:ff:42:0f:bf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 01:46:27 2026 GMT
Not After : Nov 13 01:51:27 2027 GMT
Subject: CN=E2FFCEA4BD630D18B7E28DF0A5129C48E68DE51B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:ca:c4:a3:eb:7d:46:fa:b1:62:65:99:c3:
37:5b:89:12:02:fe:ae:cd:cb:88:f9:77:f3:b1:5b:
27:54:82:68:c7:d8:0c:0d:6e:ae:0e:82:32:7b:54:
b2:51:33:32:60:06:2d:68:aa:e2:57:85:06:4e:76:
6b:ac:62:97:0f:68:25:22:aa:d5:c7:ad:b9:96:fc:
3d:fe:1d:f4:df:3b:dd:2a:50:e1:92:b9:ff:d1:00:
0e:b4:af:b9:9a:25:05:e2:cb:98:91:d5:22:99:56:
d0:4e:21:17:aa:9b:d5:c2:a3:56:e4:7c:30:61:dd:
78:39:d7:dc:e1:ca:a8:e1:28:ed:c5:f0:f9:5a:b4:
0c:80:a1:af:e8:94:ae:39:fc:bc:d3:5e:b5:14:78:
6b:b6:9f:2e:3c:f7:2c:f8:5a:4c:45:ae:86:6f:ca:
0f:32:c1:d8:54:f4:84:4b:37:7d:6e:81:62:f3:1d:
dd:74:dc:29:0a:09:1b:92:1e:52:e0:a7:45:ca:82:
ac:51:f5:2e:67:1c:01:81:dd:5b:c5:e4:27:d0:a5:
3a:2b:d2:a5:3c:0e:3c:c4:4d:6f:53:85:2b:da:80:
8c:a6:d3:05:d3:2b:5f:b5:62:9d:cf:ea:6f:f6:cc:
36:a4:04:75:f6:06:7e:72:22:9d:38:99:bd:0b:69:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FF:CE:A4:BD:63:0D:18:B7:E2:8D:F0:A5:12:9C:48:E6:8D:E5:1B
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS51355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.111.237.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c9:90:34:9f:9c:b5:db:19:e6:45:c5:1c:65:f8:18:a2:04:
e0:b5:f4:8d:fc:9c:08:4b:c8:2f:cb:9d:cb:a4:4b:37:5a:79:
33:4b:c0:28:51:2c:8c:5b:84:8f:25:6c:28:38:3c:54:3c:8f:
cc:43:90:cd:27:26:04:3c:31:69:fd:73:90:f5:7c:14:b9:0a:
2a:b6:60:c9:bb:19:5b:78:60:ba:d9:03:4f:27:10:9b:4b:6d:
a3:64:39:65:d0:b0:91:f8:f1:9a:ce:a2:89:4d:d0:44:0e:fa:
12:5d:0d:9d:43:0d:4b:d9:47:62:21:76:a0:17:34:e0:40:57:
d9:60:ad:ce:c3:1a:c6:d9:3a:4a:c2:6f:b8:52:38:26:b1:fd:
98:5b:ee:6b:51:aa:f7:73:75:ec:43:31:6e:a9:c9:83:ed:fc:
73:c5:89:f9:6e:d1:b4:2c:62:9a:8d:01:ed:a7:57:cc:08:9c:
84:2a:79:25:15:d1:1a:84:45:9c:4c:b9:ce:74:b9:4a:d2:fb:
ed:3c:da:e4:7b:d9:15:b8:f7:91:3d:92:de:6f:81:8b:33:8c:
5a:cc:ed:cf:f2:c2:81:c5:ad:94:a9:fa:44:5f:21:44:2b:a8:
01:5f:38:bc:1f:c1:ae:ad:f1:ae:ef:03:61:8c:2a:9f:af:4d:
2c:7f:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:51 2026 by rpki-client