Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396190.roa
File: AS396190.roa (raw, json)
Hash identifier: THX+VY4T8ubl4oLeaJiWIEMchRX3hhAvzSf1SSNGajY=
Subject key identifier: 72:B5:51:C4:09:42:A5:EB:92:39:C9:9C:28:28:3A:2A:16:36:1A:B2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3F12B61EAD3F28DF3ED82CEADAAAA8B88A2A284C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396190.roa
Signing time: Mon 10 Aug 2026 10:49:21 +0000
ROA not before: Mon 10 Aug 2026 10:44:21 +0000
ROA not after: Mon 09 Aug 2027 10:49:21 +0000
asID: 396190
IP address blocks: 191.96.104.0/24 maxlen: 24
191.96.202.0/24 maxlen: 24
191.96.254.0/24 maxlen: 24
191.101.11.0/24 maxlen: 24
191.101.25.0/24 maxlen: 24
191.101.181.0/24 maxlen: 24
191.101.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:12:b6:1e:ad:3f:28:df:3e:d8:2c:ea:da:aa:a8:b8:8a:2a:28:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 10 10:44:21 2026 GMT
Not After : Aug 9 10:49:21 2027 GMT
Subject: CN=72B551C40942A5EB9239C99C28283A2A16361AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:05:ce:be:cc:be:04:ec:60:59:9f:c3:32:
0d:84:78:2b:73:64:0a:95:ab:6e:8b:03:f8:d7:cd:
ec:db:c4:8f:6b:3d:6e:86:9e:00:a8:30:3b:fa:13:
2b:cb:21:09:d5:bb:6c:70:06:15:51:a9:f3:e6:84:
31:7a:12:78:a9:23:e0:44:e5:b6:8b:f6:d2:20:47:
7f:28:d9:c7:5e:1b:be:8f:97:93:de:ca:88:10:3f:
35:d9:47:60:43:3a:51:ab:85:6f:f9:57:6c:30:64:
b1:e3:82:1a:79:63:e3:11:3d:08:45:be:4e:b3:d5:
0d:32:56:fa:1b:e3:2b:7f:a9:96:50:f2:c5:26:c9:
15:e1:75:e6:4c:4a:b4:76:84:9c:fd:94:73:fb:f1:
8e:26:9b:63:62:f5:aa:c8:1a:46:3b:b0:ee:be:0d:
09:69:d3:52:31:fe:47:aa:f8:7e:b9:29:50:b6:e1:
86:bd:03:80:f3:22:d8:e8:3b:4f:2e:b6:85:0f:68:
30:24:67:fa:94:75:dd:89:7d:02:85:f5:19:0b:36:
88:e0:b4:02:a9:4e:04:3b:8f:8b:43:9b:8b:65:aa:
c0:99:3a:7e:a6:5b:6f:3b:9e:bb:f4:3e:7b:9c:0f:
58:a0:cf:e0:be:6e:d9:58:7e:71:13:8a:a1:d4:54:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B5:51:C4:09:42:A5:EB:92:39:C9:9C:28:28:3A:2A:16:36:1A:B2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.104.0/24
191.96.202.0/24
191.96.254.0/24
191.101.11.0/24
191.101.25.0/24
191.101.181.0/24
191.101.188.0/24
Signature Algorithm: sha256WithRSAEncryption
06:56:be:6d:d4:1b:ea:e4:24:e5:4f:d9:4f:33:4b:ea:86:89:
89:04:c9:52:d2:68:ca:4e:56:2e:f5:cf:02:a2:5b:bc:0e:eb:
98:79:c2:89:c2:bf:aa:fe:0f:44:07:6c:0a:27:10:3e:ca:61:
08:f5:3c:70:97:37:32:1a:7d:fe:f7:bf:0a:2a:5e:ab:35:03:
0d:3f:fc:c9:0b:79:1f:5b:ec:a9:a6:0f:22:ae:6e:ce:91:3f:
ab:de:95:39:6f:55:a5:3f:cf:d1:79:6b:ab:2b:0b:64:66:95:
3c:9b:76:b4:06:66:e8:f0:cb:f4:9f:55:76:2c:3f:55:86:11:
8b:5b:7e:94:e4:28:38:63:e6:3f:1d:bb:57:c0:8c:38:30:41:
30:35:9d:a1:c4:c2:9e:54:5e:89:b2:85:04:1f:38:5c:48:08:
aa:63:10:fd:bd:01:7b:27:28:7c:fe:0a:74:a7:d3:cd:cb:2e:
b4:f5:14:c0:72:9f:06:88:76:84:b8:22:1d:49:8e:71:2c:e6:
77:11:d9:ff:a5:d1:3b:4d:d6:6d:45:99:74:ac:f5:02:82:05:
7c:11:bb:fc:a4:4d:ea:60:cc:b2:10:05:c6:4b:8e:4c:60:75:
66:a9:d3:05:bb:6b:25:a3:d8:ca:74:ae:38:b4:c7:57:57:2f:
57:18:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:36:10 2026 by rpki-client