Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS398779.roa
File: AS398779.roa (raw, json)
Hash identifier: XuuZPLOsAIHv3cup7H7V2w5p/TXf6+XOcT7AhKpii0s=
Subject key identifier: 30:87:45:59:79:2F:87:4D:66:1E:8F:63:5E:CD:08:A0:E4:A0:5D:E0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6DE5EFB71C2581D0F9D6A72AA16F042F60761FCB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS398779.roa
Signing time: Tue 28 Jul 2026 08:49:16 +0000
ROA not before: Tue 28 Jul 2026 08:44:16 +0000
ROA not after: Tue 27 Jul 2027 08:49:16 +0000
asID: 398779
IP address blocks: 191.96.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e5:ef:b7:1c:25:81:d0:f9:d6:a7:2a:a1:6f:04:2f:60:76:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 28 08:44:16 2026 GMT
Not After : Jul 27 08:49:16 2027 GMT
Subject: CN=30874559792F874D661E8F635ECD08A0E4A05DE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:fa:ae:af:3d:05:f5:c1:4b:75:7d:3b:9a:
6a:da:ef:d5:92:80:2a:b6:2d:b4:23:9a:95:cd:96:
5c:10:1c:45:e8:9d:a8:66:ff:05:60:f0:64:e3:7a:
30:16:07:cb:8a:0c:11:53:a2:56:9d:3c:3e:95:5a:
cb:d0:7c:f0:7a:c5:62:90:14:74:e1:21:b8:5e:67:
66:09:91:45:17:d3:9f:99:91:9f:37:90:f1:5c:ae:
3f:7c:33:bf:fb:9d:a3:28:f8:85:13:88:aa:9b:86:
6c:9f:37:3a:8e:94:c3:88:25:a4:9c:ba:03:30:c2:
6b:60:4f:1f:15:38:dc:69:dd:01:c3:20:6b:22:65:
ab:ee:40:2d:28:e0:7f:02:c2:29:67:5b:c6:3a:f3:
c7:7c:6a:04:9e:71:01:ce:87:44:fe:6f:19:99:94:
ae:c2:0f:d5:78:66:0e:e7:85:5d:ca:e4:4d:a9:8e:
2c:21:94:79:5f:8e:cd:d5:49:62:31:cf:48:e0:0a:
64:77:71:69:93:31:2b:9c:2d:cc:e9:ff:95:35:b7:
05:78:9f:3b:4b:04:84:26:61:1c:20:29:d1:b6:46:
c1:f7:6a:66:69:2a:aa:39:da:b9:91:26:6f:c1:17:
8b:ea:01:b7:04:ce:41:1c:d4:af:59:b9:ce:15:a3:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:87:45:59:79:2F:87:4D:66:1E:8F:63:5E:CD:08:A0:E4:A0:5D:E0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS398779.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.49.0/24
Signature Algorithm: sha256WithRSAEncryption
62:90:6b:49:47:96:fa:69:7f:a6:ee:5d:4a:ed:7f:5f:e2:99:
7b:b6:03:c5:9e:20:ee:da:21:4b:15:4f:47:71:9e:3c:ca:c8:
61:13:1c:1b:08:a8:5f:8c:c2:6f:60:89:b5:67:33:d7:a0:40:
e2:4b:8a:4c:ed:9f:a3:ed:e6:6d:db:02:d8:0b:fd:27:d4:7c:
d9:ab:85:13:18:f6:1e:e6:92:f5:76:7f:e3:1b:ed:08:51:fe:
d2:42:e9:57:57:8b:05:51:b5:1b:d2:78:b3:5d:a0:db:fc:76:
f3:3f:57:97:2c:b1:ae:1b:ae:6d:f7:4d:54:a0:79:1e:de:98:
4f:50:0b:95:7f:dc:73:8b:98:3e:46:26:fc:c0:e7:1a:47:a2:
17:0d:2e:60:04:a7:d7:c5:26:f9:96:01:89:61:66:f6:6f:c9:
78:e5:68:ae:41:9e:9e:e9:5e:4c:69:ff:22:53:cf:4e:3f:21:
ca:b5:af:b0:33:86:7d:02:0a:9f:f1:7b:9b:3a:4e:1f:2c:37:
2b:92:68:d3:b6:87:6f:33:26:a1:eb:3a:74:41:68:bd:c7:81:
8c:54:35:87:55:f8:a3:68:0d:07:45:d7:65:54:1d:52:4e:c0:
19:6a:c9:ae:3e:cd:44:30:57:90:d2:a6:49:36:d0:9c:c7:49:
65:41:bc:f9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUbeXvtxwlgdD51qcqoW8EL2B2H8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA3MjgwODQ0MTZaFw0yNzA3MjcwODQ5MTZaMDMxMTAvBgNV
BAMTKDMwODc0NTU5NzkyRjg3NEQ2NjFFOEY2MzVFQ0QwOEEwRTRBMDVERTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeS/qurz0F9cFLdX07mmra79WS
gCq2LbQjmpXNllwQHEXonahm/wVg8GTjejAWB8uKDBFToladPD6VWsvQfPB6xWKQ
FHThIbheZ2YJkUUX05+ZkZ83kPFcrj98M7/7naMo+IUTiKqbhmyfNzqOlMOIJaSc
ugMwwmtgTx8VONxp3QHDIGsiZavuQC0o4H8CwilnW8Y688d8agSecQHOh0T+bxmZ
lK7CD9V4Zg7nhV3K5E2pjiwhlHlfjs3VSWIxz0jgCmR3cWmTMSucLczp/5U1twV4
nztLBIQmYRwgKdG2RsH3amZpKqo52rmRJm/BF4vqAbcEzkEc1K9Zuc4VowX3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUMIdFWXkvh01mHo9jXs0IoOSgXeAwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMzk4Nzc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2Ax
MA0GCSqGSIb3DQEBCwUAA4IBAQBikGtJR5b6aX+m7l1K7X9f4pl7tgPFniDu2iFL
FU9HcZ48yshhExwbCKhfjMJvYIm1ZzPXoEDiS4pM7Z+j7eZt2wLYC/0n1HzZq4UT
GPYe5pL1dn/jG+0IUf7SQulXV4sFUbUb0nizXaDb/HbzP1eXLLGuG65t901UoHke
3phPUAuVf9xzi5g+Rib8wOcaR6IXDS5gBKfXxSb5lgGJYWb2b8l45WiuQZ6e6V5M
af8iU89OPyHKta+wM4Z9Agqf8XubOk4fLDcrkmjTtodvMyah6zp0QWi9x4GMVDWH
VfijaA0HRddlVB1STsAZasmuPs1EMFeQ0qZJNtCcx0llQbz5
-----END CERTIFICATE-----
Generated at Tue Jul 28 10:51:10 2026 by rpki-client