Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395954.roa
File: AS395954.roa (raw, json)
Hash identifier: ESd9N5PbANtEsaGbp0BIG8abvIKEFstOkSACY/f46k8=
Subject key identifier: D9:55:69:11:45:D8:6B:18:78:BC:EE:F1:A9:7A:1E:C3:A5:F0:F4:1A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 9F2471D8D827AACA711C0B5CAAAFEDBC6CAC1F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395954.roa
Signing time: Mon 10 Aug 2026 10:49:21 +0000
ROA not before: Mon 10 Aug 2026 10:44:21 +0000
ROA not after: Mon 09 Aug 2027 10:49:21 +0000
asID: 395954
IP address blocks: 191.96.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9f:24:71:d8:d8:27:aa:ca:71:1c:0b:5c:aa:af:ed:bc:6c:ac:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 10 10:44:21 2026 GMT
Not After : Aug 9 10:49:21 2027 GMT
Subject: CN=D955691145D86B1878BCEEF1A97A1EC3A5F0F41A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:a3:e5:c8:04:63:e2:c9:1a:01:36:c0:c3:
73:8a:12:6d:13:a8:f7:96:4b:47:8d:4b:69:42:1c:
a7:cc:df:68:ca:65:9a:4f:2b:69:bc:6a:71:f0:f4:
e1:16:3d:58:26:64:c3:b1:2b:6c:bd:62:e0:d1:6f:
bc:e2:ad:0b:f6:92:bc:47:4b:43:d4:71:32:eb:7c:
18:b5:dc:6f:54:98:9f:10:81:e4:da:8e:e8:a8:e1:
b6:7b:c8:47:31:c0:41:e7:f1:fe:6c:81:3f:bf:03:
1a:6b:1a:2e:00:a9:28:8e:ba:ce:2c:fa:f3:f8:07:
38:fc:d0:b3:c9:c0:8d:70:cc:63:15:27:c4:b2:e6:
e8:a0:96:3d:25:5c:30:00:3d:0d:a4:59:12:cb:0d:
0c:66:4c:6f:a9:7c:1b:58:c9:99:3c:81:6b:3a:ad:
99:76:97:d2:04:fa:65:de:61:be:2f:78:45:b0:4e:
e2:71:4e:10:39:60:83:09:cd:53:08:25:58:ca:0f:
22:4b:e6:11:4c:0e:09:80:2a:9a:cc:ca:e6:01:82:
1d:0d:9e:c7:c6:9f:13:aa:8f:96:62:69:17:dd:0b:
4e:d8:f3:72:9e:3d:ca:24:06:df:7c:42:ed:10:f1:
94:09:c4:44:81:df:da:53:67:75:02:42:ff:33:89:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:55:69:11:45:D8:6B:18:78:BC:EE:F1:A9:7A:1E:C3:A5:F0:F4:1A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.117.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9f:7c:4b:a5:95:f6:2b:02:1f:b5:52:c9:61:83:06:27:8d:
ba:aa:1b:10:20:35:78:c2:f3:c5:c2:12:eb:5d:7b:27:df:27:
f0:2f:e9:ac:e7:72:f0:f9:42:48:7d:f5:f4:05:eb:4d:da:cd:
82:b6:98:e0:9b:75:53:b9:0c:c0:e7:ad:00:77:7c:30:78:37:
73:cc:b9:2a:5a:af:9d:8e:5c:71:23:d7:dd:7f:03:07:06:4d:
01:0b:dc:a5:2c:af:0b:3b:9f:65:6d:6a:ba:92:13:1d:1c:06:
4f:b8:d4:39:94:d5:3b:71:4d:ad:a4:1b:3b:8d:e8:d6:c2:38:
da:55:0d:70:c0:f7:72:db:8f:5d:86:76:55:2e:c8:82:66:d8:
2d:2b:ee:5a:cb:d4:f2:3f:41:87:88:ec:21:35:d3:71:69:1f:
b9:35:34:eb:aa:39:3b:c2:42:42:e1:d2:13:09:80:99:ca:c0:
4a:eb:31:e8:42:00:90:20:f7:7f:2d:3d:e4:04:a9:7f:e4:d3:
b6:19:73:21:62:34:6d:32:dd:c7:c0:c6:94:68:ac:dc:e4:27:
e2:9c:c1:50:85:03:46:10:27:2b:b6:59:55:fc:37:a7:41:1f:
41:6a:76:4f:dc:b0:df:96:9c:3e:4e:32:4f:e2:31:83:0c:ef:
ee:8a:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:26:02 2026 by rpki-client