Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS399682.roa
File: AS399682.roa (raw, json)
Hash identifier: gu5yzaL1npDYkbvyJzKMeUFJ8l5ennyCUmoowmwgH1U=
Subject key identifier: 9F:3E:A6:7C:72:ED:B9:64:33:DD:CF:4E:85:0C:A2:F8:15:2B:C8:03
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4AC21E0857C467BC54EBED99AB3475F3445898D1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS399682.roa
Signing time: Mon 12 Oct 2026 03:17:22 +0000
ROA not before: Mon 12 Oct 2026 03:12:22 +0000
ROA not after: Mon 11 Oct 2027 03:17:22 +0000
asID: 399682
IP address blocks: 92.119.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c2:1e:08:57:c4:67:bc:54:eb:ed:99:ab:34:75:f3:44:58:98:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 12 03:12:22 2026 GMT
Not After : Oct 11 03:17:22 2027 GMT
Subject: CN=9F3EA67C72EDB96433DDCF4E850CA2F8152BC803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:fd:3b:bd:12:da:49:7f:95:ef:59:ab:46:
31:73:97:f2:de:fb:58:ea:22:93:f4:3f:f2:b0:ef:
ca:fd:b9:48:97:2b:6c:d5:80:46:a7:4f:1b:d6:cf:
93:86:43:44:35:bb:9e:e3:17:95:40:e1:68:d4:86:
28:70:43:70:f0:0f:f3:a9:af:04:82:18:ab:14:ee:
f4:12:0a:47:52:41:24:36:b6:15:39:15:51:db:22:
dc:ed:ee:a2:3a:f4:01:bf:b0:28:e4:a3:fe:8b:58:
5d:8e:2f:df:ea:b6:47:26:4e:b1:9f:5a:23:f0:a0:
c1:10:ec:47:bb:95:e3:aa:cc:ed:d7:de:c2:d2:68:
09:0a:6b:c5:b2:2b:02:91:a8:ba:42:bd:0c:ef:af:
0b:84:07:54:dc:64:14:e2:6f:08:dc:6f:c0:ab:06:
75:bd:e4:37:2f:42:24:5f:e9:8c:02:a4:82:34:53:
fd:16:a2:a1:dd:5e:7e:f6:a2:bb:94:24:e2:0c:64:
bd:73:66:b3:93:2a:4f:20:a8:2d:6a:0b:20:af:70:
12:77:b8:c8:37:cb:b6:ba:70:6f:10:a0:c6:48:90:
aa:1e:c8:3e:90:77:6f:5d:ea:ef:8d:d8:84:5c:0d:
df:2d:45:f1:d3:a6:e8:c3:64:7f:35:99:cd:bc:06:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3E:A6:7C:72:ED:B9:64:33:DD:CF:4E:85:0C:A2:F8:15:2B:C8:03
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS399682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.33.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9d:5b:f6:33:ef:ed:6c:c1:9a:b1:54:8f:6c:f7:76:7e:1b:
ca:63:7c:d3:5b:46:21:3c:86:0b:27:87:ed:4c:07:e2:a7:8f:
6f:c0:45:81:27:fa:c7:13:b9:0e:15:3b:73:dd:45:5a:85:6e:
b3:bc:fb:e2:80:c3:24:d3:a5:7a:ce:08:a4:9b:bb:5a:64:e0:
39:7b:c6:a3:21:3e:21:d4:7c:4c:d7:2a:fe:07:1d:b4:5f:66:
6b:00:60:df:6b:c9:c8:f1:8e:2d:dd:83:57:d2:03:75:a5:b2:
e1:7c:6c:5e:dc:d8:ff:e5:db:56:d5:c0:e3:a7:90:c8:c0:d0:
05:87:55:d4:74:db:67:34:2d:40:f8:62:08:a0:c6:cb:b9:64:
fa:01:a6:2f:4d:4f:f6:ea:92:3f:8c:2c:1c:0e:f2:dd:6d:0e:
f8:c1:b0:d1:75:35:af:e9:5e:cf:5d:02:78:b3:68:85:2f:7f:
28:eb:ff:14:71:7e:cb:c7:34:4c:81:dd:44:ba:d2:9a:f4:a9:
b6:1d:5c:ba:e9:06:81:9b:c2:72:80:a0:e8:d4:bc:3c:24:fc:
96:39:ee:08:bd:5a:72:ae:02:61:3a:91:0e:01:37:66:40:c4:
00:07:4e:ec:8a:da:d5:d8:80:fb:1d:19:36:4d:61:dd:5a:0a:
33:43:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:30:54 2026 by rpki-client