Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53340.roa
File: AS53340.roa (raw, json)
Hash identifier: Og0f6fz7NUxxMDkFPVG+zy2pOaysHkJvdrBqQo+5aJM=
Subject key identifier: B1:14:7F:14:DE:FE:65:73:17:B4:89:3F:7F:03:13:28:76:00:65:11
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6B89268D03C01056FDA1A3E78BA65700E22A529F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53340.roa
Signing time: Mon 17 Aug 2026 00:24:08 +0000
ROA not before: Mon 17 Aug 2026 00:19:08 +0000
ROA not after: Mon 16 Aug 2027 00:24:08 +0000
asID: 53340
IP address blocks: 181.214.47.0/24 maxlen: 24
181.214.81.0/24 maxlen: 24
181.214.87.0/24 maxlen: 24
181.215.249.0/24 maxlen: 24
191.96.178.0/24 maxlen: 24
191.96.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:89:26:8d:03:c0:10:56:fd:a1:a3:e7:8b:a6:57:00:e2:2a:52:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 17 00:19:08 2026 GMT
Not After : Aug 16 00:24:08 2027 GMT
Subject: CN=B1147F14DEFE657317B4893F7F03132876006511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:85:8a:5f:41:28:ec:86:60:0f:80:b5:3b:
5b:00:c7:25:8b:fe:e5:7d:ae:1d:36:e2:39:1e:15:
5d:57:f7:a6:c8:0a:f8:c3:dc:f7:d6:09:5a:cc:cd:
dd:52:b5:49:dd:b4:01:22:7b:6d:65:3d:47:56:3a:
66:d4:70:44:24:65:46:76:fd:7f:af:cb:cd:9c:90:
58:81:71:02:64:52:5d:61:38:1a:37:cb:b0:d8:fb:
2b:f4:f0:6c:a9:c5:c0:5a:ab:12:1c:c9:88:a6:d9:
80:0d:97:7c:09:f9:1e:4c:30:d8:8b:18:f2:61:16:
39:96:7c:ba:c0:2e:53:c9:08:35:33:0e:56:e3:84:
75:4e:d0:cb:2c:69:f8:8c:ff:8b:f7:2e:77:e9:51:
24:6c:d5:53:36:8d:0b:ad:49:3e:09:42:4d:12:e2:
93:f9:88:a4:30:59:5b:27:7d:86:69:64:ac:6b:41:
c5:1c:34:0d:ec:30:b6:95:b8:dd:65:00:f8:ca:02:
d9:71:a9:be:e9:7c:70:0e:b1:5e:dc:70:1f:de:f1:
b7:a6:a4:30:3a:9b:49:74:df:66:e5:e9:91:64:6e:
64:9d:53:73:0a:f6:5d:23:74:e7:4b:e2:17:9b:d7:
f1:f6:b4:96:69:19:ea:d6:bc:ea:54:81:18:0c:1d:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:14:7F:14:DE:FE:65:73:17:B4:89:3F:7F:03:13:28:76:00:65:11
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.47.0/24
181.214.81.0/24
181.214.87.0/24
181.215.249.0/24
191.96.178.0/23
Signature Algorithm: sha256WithRSAEncryption
27:49:d7:02:8b:7a:91:d0:8c:82:bb:84:a6:14:01:fa:3c:f1:
36:3d:4a:1c:d4:43:09:c4:5f:30:a2:3b:5d:12:d3:92:63:62:
23:cb:ec:a9:70:27:c5:0b:64:ee:ca:2d:d0:81:f3:c8:a2:0d:
82:7a:68:81:1f:35:76:fa:11:c4:db:70:15:83:b1:1d:1a:35:
13:f4:21:3d:9a:de:5b:14:9f:e2:cf:0d:c3:56:ec:5a:6b:cb:
89:f7:ca:dd:a6:32:ef:74:e6:43:94:e5:8b:ba:6e:35:e4:df:
31:9c:0f:ce:59:fb:d9:ae:a5:91:93:b4:cb:31:a5:0a:1f:85:
d3:84:90:13:c8:ef:66:7b:f4:27:9d:d6:d7:97:ae:8f:54:d6:
53:30:07:30:db:c4:ef:4b:e4:d5:72:33:23:e5:d7:43:b6:f7:
ec:d1:2b:1b:00:27:25:66:5d:2e:1e:ec:10:9d:d3:83:f1:b6:
3e:51:e8:d1:a5:c3:f0:d2:ab:9a:14:aa:4f:70:96:90:64:2f:
39:a0:54:f7:64:c4:7c:71:f9:de:1f:0c:03:fe:35:9c:02:90:
50:50:47:19:fd:18:9f:6a:18:54:30:e0:69:3e:8f:bf:1b:ae:
af:fc:b2:54:60:73:b0:be:58:5e:9b:3d:47:58:86:3b:33:10:
ec:d4:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:50:34 2026 by rpki-client