Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS393406.roa
File: AS393406.roa (raw, json)
Hash identifier: Wd5VnLgVIdD2csomvqSKL+t1xcRNOOxmXDWVxBO/BUs=
Subject key identifier: 87:4B:C5:C0:E0:C1:BA:6F:0A:A1:D0:FD:6B:7D:0A:EC:5D:FA:0C:D0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 694E6CB937D961A6803D5D70C0B596383677A9CE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS393406.roa
Signing time: Thu 16 Jul 2026 10:08:17 +0000
ROA not before: Thu 16 Jul 2026 10:03:17 +0000
ROA not after: Thu 15 Jul 2027 10:08:17 +0000
asID: 393406
IP address blocks: 181.214.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4e:6c:b9:37:d9:61:a6:80:3d:5d:70:c0:b5:96:38:36:77:a9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 16 10:03:17 2026 GMT
Not After : Jul 15 10:08:17 2027 GMT
Subject: CN=874BC5C0E0C1BA6F0AA1D0FD6B7D0AEC5DFA0CD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:dc:ff:03:7d:9d:e4:db:22:df:31:03:03:
06:7a:df:eb:c2:27:66:aa:a9:63:25:66:65:e4:80:
87:13:87:13:92:02:e0:82:c2:4d:4c:40:7e:d6:97:
0b:78:13:33:bf:3c:74:00:67:47:dd:3c:09:d8:10:
a0:b8:2b:7f:03:af:33:62:ec:46:28:4b:22:12:ed:
8a:f8:18:c5:13:4a:01:4f:aa:f8:a4:23:4d:b8:9f:
29:02:13:7b:38:75:f3:4d:26:ef:f3:fa:14:44:80:
f0:cb:53:9c:f5:e4:bf:dd:b2:2d:36:bb:f0:72:b7:
79:e5:64:91:c1:2d:28:fa:f1:74:9c:2c:6a:3d:6a:
d4:3e:a1:99:92:93:b9:38:fa:a8:40:25:39:bb:60:
c1:4d:9b:49:86:99:6d:f4:cf:6f:b0:52:e0:0f:4f:
e0:d2:40:5d:68:ad:b9:ed:94:99:6b:1e:b5:d3:32:
ab:8d:54:60:e4:eb:af:3b:0e:2a:a6:df:93:0f:b0:
d1:94:dd:41:2e:79:3b:f1:e1:24:24:e6:ce:1e:bb:
3e:ba:49:f3:2d:3c:e2:e2:b0:46:17:cf:fb:88:b1:
94:89:ad:d7:24:ae:06:da:62:36:09:12:e2:c2:8b:
2d:31:61:de:1b:f5:45:52:8c:c9:85:e8:2d:40:3a:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:C5:C0:E0:C1:BA:6F:0A:A1:D0:FD:6B:7D:0A:EC:5D:FA:0C:D0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS393406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a8:37:f0:d9:59:d8:73:a6:4c:7b:19:ec:ea:ed:1e:05:44:
f7:6a:da:41:02:67:99:ba:0f:77:c0:e9:7d:21:1e:1c:06:f7:
e3:85:a0:35:aa:42:8d:f8:02:83:99:dd:fd:16:f6:d3:79:8e:
84:52:71:0f:5c:66:17:c2:43:ea:34:04:58:f7:93:af:aa:0a:
a8:48:34:4e:75:6f:25:f2:9c:8b:c5:14:38:5f:a4:0f:44:a9:
4e:d8:4a:b5:9f:f1:e1:f2:44:24:85:14:0b:0c:c6:b9:88:11:
63:41:e1:11:d0:bd:d4:a8:c6:fa:da:ac:2d:a9:47:11:77:83:
0e:c3:e4:00:5f:e0:26:13:54:42:8a:d4:27:ec:64:99:c1:44:
e6:65:2a:c5:a4:af:f4:a7:bc:73:b1:d5:a8:7c:1b:71:5f:2f:
b2:87:5c:ef:99:1e:36:a7:a7:18:d4:c8:7e:4b:db:70:84:55:
f2:ea:d1:4c:68:aa:f8:38:80:11:2d:00:da:e2:43:78:52:b6:
05:3e:14:d5:48:8f:10:3f:89:9d:a8:bd:a6:74:27:fb:77:c0:
66:85:21:d4:98:01:e4:69:f9:66:2d:ec:ce:36:5e:5b:9b:6a:
fb:7a:4b:7a:49:ba:3c:f7:ea:db:0a:53:e7:be:ba:f1:16:b4:
4a:f9:b8:26
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUaU5suTfZYaaAPV1wwLWWODZ3qc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA3MTYxMDAzMTdaFw0yNzA3MTUxMDA4MTdaMDMxMTAvBgNV
BAMTKDg3NEJDNUMwRTBDMUJBNkYwQUExRDBGRDZCN0QwQUVDNURGQTBDRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvdz/A32d5Nsi3zEDAwZ63+vC
J2aqqWMlZmXkgIcThxOSAuCCwk1MQH7Wlwt4EzO/PHQAZ0fdPAnYEKC4K38DrzNi
7EYoSyIS7Yr4GMUTSgFPqvikI024nykCE3s4dfNNJu/z+hREgPDLU5z15L/dsi02
u/Byt3nlZJHBLSj68XScLGo9atQ+oZmSk7k4+qhAJTm7YMFNm0mGmW30z2+wUuAP
T+DSQF1orbntlJlrHrXTMquNVGDk6687Diqm35MPsNGU3UEueTvx4SQk5s4euz66
SfMtPOLisEYXz/uIsZSJrdckrgbaYjYJEuLCiy0xYd4b9UVSjMmF6C1AOnudAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUh0vFwODBum8KodD9a30K7F36DNAwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMzkzNDA2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdZ4
MA0GCSqGSIb3DQEBCwUAA4IBAQCOqDfw2VnYc6ZMexns6u0eBUT3atpBAmeZug93
wOl9IR4cBvfjhaA1qkKN+AKDmd39FvbTeY6EUnEPXGYXwkPqNARY95OvqgqoSDRO
dW8l8pyLxRQ4X6QPRKlO2Eq1n/Hh8kQkhRQLDMa5iBFjQeER0L3UqMb62qwtqUcR
d4MOw+QAX+AmE1RCitQn7GSZwUTmZSrFpK/0p7xzsdWofBtxXy+yh1zvmR42p6cY
1Mh+S9twhFXy6tFMaKr4OIARLQDa4kN4UrYFPhTVSI8QP4mdqL2mdCf7d8BmhSHU
mAHkaflmLezONl5bm2r7ekt6Sbo89+rbClPnvrrxFrRK+bgm
-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:57 2026 by rpki-client