Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397373.roa
File: AS397373.roa (raw, json)
Hash identifier: 6WvMjUJA+M7YC3pO0o5/er97jSE/mst2SLVewIBZq5g=
Subject key identifier: 27:D5:8D:4E:AC:4B:05:DD:F3:96:DA:A1:EA:78:7E:AA:03:FF:80:89
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 62FA8B2E9FF25028D3DF1B3ED589A1F389646A85
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397373.roa
Signing time: Thu 24 Sep 2026 06:27:23 +0000
ROA not before: Thu 24 Sep 2026 06:22:23 +0000
ROA not after: Thu 23 Sep 2027 06:27:23 +0000
asID: 397373
IP address blocks: 51.146.200.0/21 maxlen: 24
51.194.0.0/21 maxlen: 24
51.241.53.0/24 maxlen: 24
51.241.55.0/24 maxlen: 24
51.241.79.0/24 maxlen: 24
51.241.81.0/24 maxlen: 24
51.241.87.0/24 maxlen: 24
51.241.95.0/24 maxlen: 24
94.116.40.0/22 maxlen: 24
94.116.44.0/22 maxlen: 24
94.116.52.0/22 maxlen: 24
94.116.56.0/22 maxlen: 24
94.194.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:fa:8b:2e:9f:f2:50:28:d3:df:1b:3e:d5:89:a1:f3:89:64:6a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 24 06:22:23 2026 GMT
Not After : Sep 23 06:27:23 2027 GMT
Subject: CN=27D58D4EAC4B05DDF396DAA1EA787EAA03FF8089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:b0:de:43:7e:04:39:fc:65:29:18:99:46:
83:75:93:de:a4:6c:28:7b:ce:28:08:2b:94:f9:de:
46:1a:5b:3d:03:3d:66:05:d6:76:f8:f8:6a:96:eb:
e0:7a:0d:52:4d:48:29:e1:03:e4:de:58:87:14:03:
be:e1:b3:15:08:3a:ad:29:fa:82:d8:5a:ff:53:6e:
5e:57:24:9b:f1:b5:8a:81:7a:14:6b:47:3f:0b:a5:
bd:aa:37:b3:d8:a9:02:95:c8:e3:f5:5c:a8:5d:6e:
16:a7:7a:98:de:16:5f:77:ed:24:43:66:d2:5f:93:
1d:6f:d7:12:ae:39:ed:86:15:a6:8f:05:9c:ff:4a:
1a:4f:b1:be:68:f5:18:81:d9:16:f1:6e:a1:01:1c:
41:e2:47:a4:0e:59:7a:e9:de:46:ff:6a:31:ca:84:
94:59:4e:97:d3:0d:e0:aa:bf:91:7f:85:99:29:ae:
cd:5e:06:50:b4:b9:40:32:ea:b6:b9:28:97:d9:e8:
c2:db:89:f7:57:6e:50:00:36:69:01:7c:1b:68:4d:
e0:d7:f8:ba:3f:bd:d4:84:f1:49:6d:2f:11:d6:e0:
47:d1:e2:c1:08:11:0e:38:a6:cc:66:8f:19:d8:3f:
9d:f4:6d:fc:ed:34:40:02:96:ba:a8:43:51:9a:e2:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D5:8D:4E:AC:4B:05:DD:F3:96:DA:A1:EA:78:7E:AA:03:FF:80:89
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.200.0/21
51.194.0.0/21
51.241.53.0/24
51.241.55.0/24
51.241.79.0/24
51.241.81.0/24
51.241.87.0/24
51.241.95.0/24
94.116.40.0/21
94.116.52.0-94.116.59.255
94.194.12.0/22
Signature Algorithm: sha256WithRSAEncryption
59:87:ed:88:98:c5:55:24:34:2d:7b:17:fe:75:d3:f7:41:ae:
06:a4:6a:43:2b:42:e9:cd:b9:57:a0:2e:b9:38:09:f8:6e:3c:
d5:26:0a:fe:45:a0:d0:a0:3d:fd:fc:56:e4:a4:01:4e:8e:8f:
7e:53:9c:ee:c7:64:77:6f:b6:33:72:27:38:05:5e:d4:a8:c7:
cf:7d:4a:68:20:ba:96:85:a2:32:b1:ae:4d:e9:4c:41:f2:4b:
84:e8:0e:a9:45:af:f8:c9:58:6c:a4:93:ba:cd:26:ed:46:e2:
5e:84:5d:0b:30:42:53:6c:3a:a9:3d:0f:4f:bd:f8:55:81:09:
fc:49:3f:41:69:dd:7a:ca:8f:53:ce:69:33:1c:02:22:90:fa:
21:b2:56:90:5a:c7:80:4e:5d:93:81:25:94:0c:43:14:b9:97:
34:e8:32:8f:33:9a:46:7b:ce:97:95:5a:9a:96:ae:b2:52:92:
58:47:94:7e:1f:82:da:30:d0:1d:34:2a:f8:7f:3d:7f:0f:c1:
75:0d:7d:33:a7:33:55:47:5d:70:73:b1:ce:00:b2:1c:14:07:
ab:30:c7:42:58:f5:94:37:03:67:8d:76:ae:31:36:82:28:ef:
d6:28:3d:8c:ac:a0:aa:85:07:83:b8:04:e7:0e:f5:7e:94:ad:
1e:1d:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:42:18 2026 by rpki-client