Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: qdyugB+QZe7aRw0qJ2DcYSIAA8Ygwgk3iXULOB3m86U=
Subject key identifier: 09:4C:73:F4:D8:15:D8:C0:9D:AC:D4:1E:22:77:7C:2E:26:AC:43:E7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 40B57BB67686C78FBB3FE7292A65F40D7EB891D1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
Signing time: Mon 10 Aug 2026 15:29:53 +0000
ROA not before: Mon 10 Aug 2026 15:24:53 +0000
ROA not after: Mon 09 Aug 2027 15:29:53 +0000
asID: 396356
IP address blocks: 2.58.29.0/24 maxlen: 24
2.58.30.0/24 maxlen: 24
2.58.31.0/24 maxlen: 24
2.58.174.0/24 maxlen: 24
5.181.133.0/24 maxlen: 24
5.252.76.0/24 maxlen: 24
5.253.200.0/24 maxlen: 24
5.253.201.0/24 maxlen: 24
5.253.203.0/24 maxlen: 24
45.81.2.0/24 maxlen: 24
45.89.251.0/24 maxlen: 24
45.89.252.0/24 maxlen: 24
45.137.31.0/24 maxlen: 24
45.137.156.0/24 maxlen: 24
45.139.181.0/24 maxlen: 24
109.106.2.0/24 maxlen: 24
130.185.125.0/24 maxlen: 24
179.61.167.0/24 maxlen: 24
179.61.175.0/24 maxlen: 24
179.61.178.0/24 maxlen: 24
179.61.179.0/24 maxlen: 24
179.61.218.0/24 maxlen: 24
179.61.233.0/24 maxlen: 24
181.41.204.0/24 maxlen: 24
181.41.208.0/24 maxlen: 24
181.41.218.0/24 maxlen: 24
181.214.56.0/24 maxlen: 24
181.214.59.0/24 maxlen: 24
181.214.61.0/24 maxlen: 24
181.214.64.0/24 maxlen: 24
181.214.66.0/24 maxlen: 24
181.214.70.0/24 maxlen: 24
181.214.86.0/24 maxlen: 24
181.214.102.0/24 maxlen: 24
181.214.196.0/24 maxlen: 24
181.214.225.0/24 maxlen: 24
181.214.226.0/24 maxlen: 24
181.215.92.0/24 maxlen: 24
181.215.117.0/24 maxlen: 24
181.215.118.0/24 maxlen: 24
181.215.120.0/24 maxlen: 24
181.215.125.0/24 maxlen: 24
181.215.126.0/24 maxlen: 24
181.215.129.0/24 maxlen: 24
181.215.131.0/24 maxlen: 24
181.215.146.0/24 maxlen: 24
181.215.153.0/24 maxlen: 24
181.215.155.0/24 maxlen: 24
181.215.156.0/24 maxlen: 24
181.215.158.0/24 maxlen: 24
181.215.169.0/24 maxlen: 24
181.215.172.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
185.34.43.0/24 maxlen: 24
185.142.24.0/24 maxlen: 24
185.143.229.0/24 maxlen: 24
185.151.59.0/24 maxlen: 24
185.158.100.0/24 maxlen: 24
185.158.101.0/24 maxlen: 24
185.158.102.0/24 maxlen: 24
185.158.103.0/24 maxlen: 24
185.158.134.0/24 maxlen: 24
191.96.44.0/24 maxlen: 24
191.96.45.0/24 maxlen: 24
191.96.46.0/24 maxlen: 24
191.96.47.0/24 maxlen: 24
191.96.107.0/24 maxlen: 24
191.96.122.0/24 maxlen: 24
191.96.160.0/24 maxlen: 24
191.96.161.0/24 maxlen: 24
191.96.162.0/24 maxlen: 24
191.96.163.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
191.96.239.0/24 maxlen: 24
191.101.4.0/24 maxlen: 24
191.101.5.0/24 maxlen: 24
191.101.43.0/24 maxlen: 24
191.101.99.0/24 maxlen: 24
191.101.119.0/24 maxlen: 24
191.101.154.0/24 maxlen: 24
191.101.160.0/24 maxlen: 24
191.101.216.0/24 maxlen: 24
191.101.255.0/24 maxlen: 24
213.109.171.0/24 maxlen: 24
2a00:d1a0:a::/48 maxlen: 48
2a0a:a700::/30 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 16:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b5:7b:b6:76:86:c7:8f:bb:3f:e7:29:2a:65:f4:0d:7e:b8:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 10 15:24:53 2026 GMT
Not After : Aug 9 15:29:53 2027 GMT
Subject: CN=094C73F4D815D8C09DACD41E22777C2E26AC43E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:51:b6:d0:51:55:b4:84:2a:ca:2a:62:45:
6a:9f:e5:d2:9d:19:4c:cc:2c:ed:a2:c8:60:26:cb:
bd:f1:aa:c9:b0:15:73:d3:b6:f6:1c:63:1f:50:9d:
ce:3b:df:98:4c:5b:c4:ef:bf:60:20:f9:13:31:74:
ad:08:ca:52:71:e8:3a:fa:c7:31:0d:2b:82:ce:1f:
41:0e:8d:a4:a0:ac:85:e1:c1:79:ac:13:8d:04:64:
18:f3:ad:2a:70:16:b2:96:11:35:a3:9b:a2:73:8b:
a6:74:52:06:fb:20:05:7d:51:fa:3f:d3:03:99:e7:
dd:57:35:f2:3c:5b:31:84:0b:53:27:09:b0:61:b1:
81:e1:13:f5:6f:d0:1e:6d:6a:c6:82:0f:c6:c4:a0:
e0:fb:5b:13:14:24:35:d9:15:59:a6:d9:a5:8d:3f:
a9:b6:23:ad:ba:4a:d8:2f:37:52:31:91:c1:f3:90:
99:5a:65:7f:0d:fe:34:6b:c9:ff:56:e4:7d:9c:af:
8b:4d:36:3d:9a:ba:38:d7:b9:80:d6:02:a7:cb:b1:
a4:9e:a4:9b:27:ea:b1:80:5e:98:cb:1b:5c:2c:c3:
aa:cc:58:93:29:cb:73:85:47:53:52:43:05:5d:90:
b4:ad:2c:5a:19:e8:2a:78:25:2c:de:54:c9:bc:bc:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4C:73:F4:D8:15:D8:C0:9D:AC:D4:1E:22:77:7C:2E:26:AC:43:E7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.29.0-2.58.31.255
2.58.174.0/24
5.181.133.0/24
5.252.76.0/24
5.253.200.0/23
5.253.203.0/24
45.81.2.0/24
45.89.251.0-45.89.252.255
45.137.31.0/24
45.137.156.0/24
45.139.181.0/24
109.106.2.0/24
130.185.125.0/24
179.61.167.0/24
179.61.175.0/24
179.61.178.0/23
179.61.218.0/24
179.61.233.0/24
181.41.204.0/24
181.41.208.0/24
181.41.218.0/24
181.214.56.0/24
181.214.59.0/24
181.214.61.0/24
181.214.64.0/24
181.214.66.0/24
181.214.70.0/24
181.214.86.0/24
181.214.102.0/24
181.214.196.0/24
181.214.225.0-181.214.226.255
181.215.92.0/24
181.215.117.0-181.215.118.255
181.215.120.0/24
181.215.125.0-181.215.126.255
181.215.129.0/24
181.215.131.0/24
181.215.146.0/24
181.215.153.0/24
181.215.155.0-181.215.156.255
181.215.158.0/24
181.215.169.0/24
181.215.172.0/24
181.215.195.0/24
185.34.43.0/24
185.142.24.0/24
185.143.229.0/24
185.151.59.0/24
185.158.100.0/22
185.158.134.0/24
191.96.44.0/22
191.96.107.0/24
191.96.122.0/24
191.96.160.0/22
191.96.174.0/24
191.96.239.0/24
191.101.4.0/23
191.101.43.0/24
191.101.99.0/24
191.101.119.0/24
191.101.154.0/24
191.101.160.0/24
191.101.216.0/24
191.101.255.0/24
213.109.171.0/24
IPv6:
2a00:d1a0:a::/48
2a0a:a700::/30
Signature Algorithm: sha256WithRSAEncryption
76:aa:ea:e9:1a:ad:74:ad:9f:ac:ec:f0:5a:fa:e8:8a:60:06:
9b:4f:77:02:df:ba:b8:4b:72:e0:c7:67:1a:4a:b7:b6:fe:c7:
00:be:ab:61:27:9d:2e:b9:f4:2d:44:a0:7f:f3:cb:e2:01:37:
bf:22:d4:e9:c0:86:17:9a:0f:6b:28:99:d7:a8:85:f1:cc:f8:
17:50:4e:e0:ad:11:1f:e2:55:4f:14:47:77:f0:74:88:c6:ba:
7c:5a:7f:34:fe:4b:c3:75:79:f2:fb:44:0d:b4:85:c2:d2:9d:
75:fd:60:56:15:ef:21:ba:43:98:bb:ed:de:da:33:f9:5e:9e:
8b:3f:22:b7:db:6d:b1:86:29:bf:d7:b4:18:3d:06:ec:f9:ba:
05:65:b4:cd:44:06:e5:43:e3:a3:ba:57:0b:e7:32:a3:28:6e:
40:3a:d5:f8:45:04:fd:ff:e9:34:2f:04:70:17:49:67:d5:40:
e3:f7:82:07:56:3f:61:00:0d:74:37:29:24:4a:b0:16:18:83:
94:9d:dd:28:29:b3:df:94:9a:7c:19:be:3d:2b:ce:7d:db:38:
70:2f:7a:5e:4d:72:1d:b8:ea:34:0c:a8:5b:ba:ac:48:dc:c4:
a3:5f:cc:3b:3d:3f:de:0d:2a:04:14:91:ce:c8:03:53:85:ee:
a7:d2:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 04:02:35 2026 by rpki-client