Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395470.roa
File: AS395470.roa (raw, json)
Hash identifier: qMzJjPLN6Od69ersQMDPyCkUN4ZLA4NrlS8LJ2oyDvM=
Subject key identifier: 17:09:A5:90:9A:AB:A0:01:4B:1B:A1:2B:A9:8B:04:42:C3:EA:89:00
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5D676D0A87FAC231E5291C081C0F1D53F345309A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395470.roa
Signing time: Wed 27 May 2026 16:53:41 +0000
ROA not before: Wed 27 May 2026 16:48:41 +0000
ROA not after: Wed 26 May 2027 16:53:41 +0000
asID: 395470
IP address blocks: 45.87.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:67:6d:0a:87:fa:c2:31:e5:29:1c:08:1c:0f:1d:53:f3:45:30:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 27 16:48:41 2026 GMT
Not After : May 26 16:53:41 2027 GMT
Subject: CN=1709A5909AABA0014B1BA12BA98B0442C3EA8900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:b5:2e:56:12:49:02:c4:57:c0:05:7e:a7:
0a:f2:4b:ee:39:34:23:21:eb:75:45:0f:08:52:d2:
c1:f4:a0:d8:4a:27:62:fd:b8:fa:06:d0:ee:cc:bc:
37:d7:60:c8:a8:c3:72:e7:e1:84:1a:86:c1:0f:d4:
96:4c:b7:c5:b4:2f:15:d7:4b:af:d2:12:da:1a:dd:
a0:ec:3e:e3:7d:af:e4:43:1a:42:66:42:94:d6:9c:
8b:14:80:e4:41:92:96:09:27:a3:2e:32:71:01:88:
6d:ee:3e:f8:18:6c:83:9f:91:31:e0:a7:73:49:4c:
53:1e:38:d6:9b:81:aa:0a:9a:6e:40:d5:d9:c1:a1:
1b:dd:4f:24:c9:14:ad:41:f1:b9:b1:33:69:20:fc:
5c:e2:a8:07:22:c7:20:2d:c0:d1:2c:b7:0c:12:a4:
fa:dc:6e:3f:45:84:9b:15:7c:cd:d9:2a:e0:e4:be:
e2:79:db:0e:58:b7:0d:eb:21:97:d8:78:e6:3a:44:
52:60:bc:b3:4c:36:65:65:34:55:e4:c5:12:37:14:
af:9f:e3:15:e5:7c:5f:c1:cd:20:60:e5:8b:16:80:
66:25:d1:5e:be:c1:72:1a:a1:fd:3a:b9:9d:4d:ae:
18:2c:41:48:d2:61:06:68:6e:41:fa:73:cb:59:ef:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:09:A5:90:9A:AB:A0:01:4B:1B:A1:2B:A9:8B:04:42:C3:EA:89:00
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8c:a5:49:a2:13:5d:85:fe:bd:74:39:c7:c9:0e:bd:f0:ca:
38:cf:d2:a1:3b:19:23:78:ce:4b:30:8b:31:b2:f6:e2:1a:22:
bb:bd:4d:1b:8f:08:9b:c6:e8:3c:d8:7e:e6:ef:36:4a:4b:53:
db:28:d1:a3:38:21:0e:c3:ba:71:97:5a:5f:32:ef:a5:73:d9:
06:bb:83:c1:5e:da:cc:1c:a8:e2:69:1d:a2:97:b4:5b:16:e7:
3c:b6:83:4d:a1:da:67:dc:40:28:c6:01:25:20:43:7b:46:57:
4f:c3:82:9d:ef:b0:06:eb:57:49:a2:d1:ec:0c:04:5c:fa:30:
10:03:0b:75:b9:62:a5:24:e7:5a:21:1e:56:b7:37:a8:36:48:
f3:ca:28:87:6d:5b:13:3e:60:17:48:28:2b:42:f1:0b:22:e4:
79:0e:7e:1c:7b:c0:ee:76:0c:c3:e0:52:42:79:79:fe:22:f2:
14:fb:10:26:8d:64:7c:c9:25:a0:07:03:d8:ce:62:b4:e6:95:
81:b2:31:97:29:2d:ed:7a:b1:ea:42:80:7a:7c:dd:c5:b2:af:
b1:9d:b3:c0:18:bf:96:62:f3:7f:33:89:88:25:ac:32:aa:8a:
1e:17:ca:f1:25:21:b6:78:bb:0a:5b:73:74:34:9f:87:00:51:
73:af:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 16:39:45 2026 by rpki-client