Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: tEYAYAKCsmwncUUSYW9gj5TL1dSJy495rmJnJIk+jzM=
Subject key identifier: D6:E8:4B:37:D2:9B:75:FD:39:11:28:65:B7:08:98:61:48:4D:44:3C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7F6E33E281DFD8B0372CDE77F797E11CB2FA2E9F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS399359.roa
Signing time: Tue 11 Aug 2026 00:09:56 +0000
ROA not before: Tue 11 Aug 2026 00:04:56 +0000
ROA not after: Tue 10 Aug 2027 00:09:56 +0000
asID: 399359
IP address blocks: 181.214.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 16:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6e:33:e2:81:df:d8:b0:37:2c:de:77:f7:97:e1:1c:b2:fa:2e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 11 00:04:56 2026 GMT
Not After : Aug 10 00:09:56 2027 GMT
Subject: CN=D6E84B37D29B75FD39112865B7089861484D443C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:1a:13:ef:c9:1a:3e:bb:33:ad:a1:02:5e:
9b:04:78:ba:0f:82:d5:31:07:4c:3f:5d:ba:f5:7e:
33:ad:45:f0:b2:03:cb:2f:09:30:d1:06:18:97:d5:
ba:ad:de:8c:1c:f9:3d:04:14:b8:55:e4:32:c0:0b:
c6:63:fd:94:65:cf:ef:9d:3b:4b:09:7d:24:93:21:
12:a1:58:cc:92:65:35:ad:b2:7a:8c:16:df:d4:c2:
e4:6a:b8:6a:ed:6c:f0:6c:3f:e9:f8:a7:77:d2:86:
ca:c6:fa:c5:2e:60:39:3b:3d:13:71:79:c8:45:34:
f0:2c:86:d2:a8:e9:f0:78:3c:32:13:02:08:4c:73:
ca:f2:bc:57:58:56:56:83:66:c0:3d:b7:2f:7b:c3:
b7:9a:10:ed:e3:6d:ae:af:c0:d0:77:c8:d1:46:fd:
8f:25:c0:69:62:31:30:b6:a8:3b:3e:f5:58:4a:30:
13:95:2c:cf:18:01:c1:42:ec:58:44:cd:0d:de:32:
3a:42:97:b8:79:36:40:de:2b:f6:00:8c:fb:31:a1:
ca:47:2d:a5:d9:ba:dd:37:5d:af:eb:83:67:5e:f1:
17:16:7e:92:f4:c4:82:be:2f:4b:c4:8d:df:80:0b:
b5:31:26:be:a8:77:f3:9d:8d:5d:ba:43:90:3e:d4:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E8:4B:37:D2:9B:75:FD:39:11:28:65:B7:08:98:61:48:4D:44:3C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.165.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8f:ea:2b:1d:c4:ef:93:73:43:e1:66:5a:db:13:88:6c:ec:
8f:82:91:7f:26:7d:36:ba:3f:88:50:62:4c:73:83:1d:de:46:
62:95:ca:70:4a:3e:6f:a7:d8:54:b6:fe:5d:3f:a5:13:7d:31:
b4:e7:53:9e:1e:fe:a2:fe:31:4c:5f:e1:09:a5:c4:65:2b:5d:
cd:6d:19:ee:29:ef:d8:16:67:d8:bb:28:57:1f:6f:59:f7:7f:
e0:a8:24:55:8d:2b:4e:1d:6e:12:05:79:7d:07:ea:92:f0:1f:
50:39:0b:a5:2d:8c:ad:34:f2:39:eb:5e:9a:a2:43:80:00:c7:
d4:b9:be:89:59:bc:98:ea:ac:d6:ce:99:51:7b:76:62:5e:0f:
03:37:e7:92:f3:c5:85:60:59:3a:a0:ce:28:08:41:24:fa:99:
51:92:69:a7:64:6e:a9:3e:95:b7:6b:7b:6f:48:d1:30:66:2f:
ba:dd:34:54:92:da:cc:e3:44:95:3d:31:e8:06:00:a7:97:b8:
d5:d4:a7:35:d0:8b:42:df:c9:be:4a:28:7e:b6:5f:08:be:45:
c8:bb:da:0c:64:4c:a1:81:db:e2:03:e7:a1:f5:65:a8:b5:59:
80:f2:1f:ed:6d:e0:a9:4b:aa:28:24:53:6c:ed:6a:9e:6d:c3:
f1:0d:e2:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUf24z4oHf2LA3LN5395fhHLL6Lp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA4MTEwMDA0NTZaFw0yNzA4MTAwMDA5NTZaMDMxMTAvBgNV
BAMTKEQ2RTg0QjM3RDI5Qjc1RkQzOTExMjg2NUI3MDg5ODYxNDg0RDQ0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbxoT78kaPrszraECXpsEeLoP
gtUxB0w/Xbr1fjOtRfCyA8svCTDRBhiX1bqt3owc+T0EFLhV5DLAC8Zj/ZRlz++d
O0sJfSSTIRKhWMySZTWtsnqMFt/UwuRquGrtbPBsP+n4p3fShsrG+sUuYDk7PRNx
echFNPAshtKo6fB4PDITAghMc8ryvFdYVlaDZsA9ty97w7eaEO3jba6vwNB3yNFG
/Y8lwGliMTC2qDs+9VhKMBOVLM8YAcFC7FhEzQ3eMjpCl7h5NkDeK/YAjPsxocpH
LaXZut03Xa/rg2de8RcWfpL0xIK+L0vEjd+AC7UxJr6od/OdjV26Q5A+1AiZAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU1uhLN9Kbdf05EShltwiYYUhNRDwwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMzk5MzU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdal
MA0GCSqGSIb3DQEBCwUAA4IBAQAbj+orHcTvk3ND4WZa2xOIbOyPgpF/Jn02uj+I
UGJMc4Md3kZilcpwSj5vp9hUtv5dP6UTfTG051OeHv6i/jFMX+EJpcRlK13NbRnu
Ke/YFmfYuyhXH29Z93/gqCRVjStOHW4SBXl9B+qS8B9QOQulLYytNPI5616aokOA
AMfUub6JWbyY6qzWzplRe3ZiXg8DN+eS88WFYFk6oM4oCEEk+plRkmmnZG6pPpW3
a3tvSNEwZi+63TRUktrM40SVPTHoBgCnl7jV1Kc10ItC38m+Sih+tl8IvkXIu9oM
ZEyhgdviA+eh9WWotVmA8h/tbeCpS6ooJFNs7WqebcPxDeLd
-----END CERTIFICATE-----
Generated at Wed Aug 12 08:34:30 2026 by rpki-client