Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53340.roa
File: AS53340.roa (raw, json)
Hash identifier: TUqzlU278PIvA+CNuJjnUb6HIEafkeL1EVad6PBeXI4=
Subject key identifier: 5A:37:B9:2B:27:03:75:5B:3E:28:59:BD:64:A6:B6:BC:E4:27:5A:E0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 194B3CC6EED1F533CFBD043D9BAA78E2B797CA00
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53340.roa
Signing time: Wed 17 Jun 2026 15:47:41 +0000
ROA not before: Wed 17 Jun 2026 15:42:41 +0000
ROA not after: Wed 16 Jun 2027 15:47:41 +0000
asID: 53340
IP address blocks: 45.89.254.0/24 maxlen: 24
181.214.47.0/24 maxlen: 24
181.214.81.0/24 maxlen: 24
181.214.87.0/24 maxlen: 24
181.215.249.0/24 maxlen: 24
191.96.178.0/24 maxlen: 24
191.96.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4b:3c:c6:ee:d1:f5:33:cf:bd:04:3d:9b:aa:78:e2:b7:97:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 17 15:42:41 2026 GMT
Not After : Jun 16 15:47:41 2027 GMT
Subject: CN=5A37B92B2703755B3E2859BD64A6B6BCE4275AE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:21:72:08:0b:fb:0d:52:45:87:1e:7b:fb:
35:22:e5:83:3e:ff:af:46:51:ec:53:cb:c7:34:e2:
86:e2:ba:6f:5f:31:eb:e4:e6:b0:2c:d4:d8:75:4e:
ab:31:66:97:35:52:34:0d:e8:9f:bf:2f:34:30:cc:
fc:6b:99:c6:63:cb:ae:f5:cf:58:c5:16:09:e1:09:
91:67:77:ea:65:5f:d1:33:18:49:38:65:9a:bd:b3:
d6:e6:5f:dd:05:42:58:04:d4:83:bd:6b:96:db:5c:
be:50:c0:03:32:76:d9:09:eb:7f:d5:d4:50:ce:da:
d1:42:0b:37:76:51:a9:7f:55:0d:f5:58:20:fd:ce:
5b:de:74:31:2b:12:89:1f:5e:85:34:21:43:ac:da:
d0:b7:b3:fa:e2:19:0e:42:c3:42:52:c4:83:d5:40:
8b:0f:26:9f:df:8c:1b:a7:12:c9:ac:7c:9a:17:b7:
a9:1a:08:95:b7:73:72:2b:13:24:3c:c9:d5:77:e1:
a1:c8:cf:14:35:97:6b:1d:c3:da:f9:16:cb:61:d5:
96:46:1f:bf:50:be:f1:7e:6f:1e:6c:85:dc:8f:33:
ad:0c:aa:5b:7b:f0:11:38:75:0b:32:bf:62:0d:15:
b7:d8:84:7b:9e:53:d5:8f:d2:71:9c:4b:c1:13:a4:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:B9:2B:27:03:75:5B:3E:28:59:BD:64:A6:B6:BC:E4:27:5A:E0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.254.0/24
181.214.47.0/24
181.214.81.0/24
181.214.87.0/24
181.215.249.0/24
191.96.178.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:b6:6f:32:ae:b0:88:d0:d3:a4:60:85:95:18:fa:a9:b9:ad:
e1:78:b4:b6:5b:ab:93:4b:9c:14:31:32:ca:ec:26:ce:f2:58:
fc:fb:22:cc:d8:4b:b1:22:6d:ce:f5:24:5e:5a:3f:d2:35:da:
4b:80:95:84:7e:1f:81:71:c2:e6:e8:21:af:86:3f:2c:c2:95:
29:09:e6:46:f8:e4:52:84:43:52:79:16:ad:78:97:a2:1a:95:
5c:d3:ad:f7:f5:ed:4f:68:5b:45:8e:1b:eb:e6:ea:0d:a5:46:
24:d1:08:08:66:8a:b7:dd:66:9f:c3:78:a8:9f:4e:33:08:a3:
30:86:06:3b:f4:67:c4:f9:44:b3:ef:fe:7e:a7:66:f1:12:f0:
c2:34:21:61:ba:dd:f6:cb:b8:08:7c:fe:e7:63:14:90:5b:8f:
92:31:4f:f8:c6:82:a7:35:6e:90:ec:1f:f3:5b:9b:08:5a:b6:
f1:84:0c:fd:ab:c9:5e:bb:f2:e3:7d:bb:05:69:64:40:14:da:
d2:69:45:86:d3:18:33:7f:aa:d9:87:bc:d7:d6:c4:52:05:9d:
f5:4a:7f:cb:46:76:ed:87:84:58:f2:05:8a:ed:64:91:ed:86:
aa:0a:0b:7b:10:04:25:10:b4:fd:36:8b:a8:1c:73:e3:b6:06:
7b:a6:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:30:38 2026 by rpki-client