Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397373.roa
File: AS397373.roa (raw, json)
Hash identifier: sxnQh/1WWA4+cXIyh2meWBcdIaHxjF4NTwBTeeuls1w=
Subject key identifier: EE:94:57:A2:6B:56:5D:CD:5A:16:C2:8A:9E:F0:17:52:F8:77:F3:B0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 27AB41F8B5BE5978E0DF64FE2B565D59255594
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397373.roa
Signing time: Fri 14 Aug 2026 10:51:25 +0000
ROA not before: Fri 14 Aug 2026 10:46:25 +0000
ROA not after: Fri 13 Aug 2027 10:51:25 +0000
asID: 397373
IP address blocks: 51.146.200.0/21 maxlen: 24
51.194.0.0/21 maxlen: 24
51.241.53.0/24 maxlen: 24
51.241.55.0/24 maxlen: 24
51.241.79.0/24 maxlen: 24
51.241.81.0/24 maxlen: 24
51.241.87.0/24 maxlen: 24
51.241.95.0/24 maxlen: 24
94.194.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ab:41:f8:b5:be:59:78:e0:df:64:fe:2b:56:5d:59:25:55:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 14 10:46:25 2026 GMT
Not After : Aug 13 10:51:25 2027 GMT
Subject: CN=EE9457A26B565DCD5A16C28A9EF01752F877F3B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:80:9d:0f:2f:52:01:49:78:34:dd:77:69:
90:39:50:30:c7:9b:62:fb:c5:b3:3a:ea:bb:3b:f6:
95:c9:cd:5f:d0:77:48:9c:1b:0e:57:d8:4b:68:c6:
bd:31:28:eb:a4:8f:41:73:c1:83:5c:d7:b3:87:a0:
f3:f8:49:a3:11:d6:cf:95:6f:72:fd:dc:64:d7:55:
60:e4:ca:77:75:0e:1c:17:4e:ea:c1:74:86:d6:53:
19:3c:61:40:f3:f5:84:9a:ca:de:36:e2:d3:d8:b1:
e0:b3:15:0c:7b:47:3b:1d:07:ef:c6:f4:1d:e2:99:
65:e9:9d:79:5e:2a:cf:91:1a:6e:f3:e5:41:86:4c:
ea:ec:0d:85:28:c5:ce:08:db:01:18:1e:97:9c:cd:
da:2c:57:e4:e3:ba:ad:5f:20:f2:ee:f1:79:d2:c2:
fb:c8:af:d0:52:02:1d:b9:97:43:f0:05:cc:8e:93:
15:07:ae:a6:b0:3f:c3:ac:fd:14:f1:b7:2c:57:cc:
3c:39:03:45:f0:31:7a:dc:46:02:d7:68:97:1c:92:
a4:27:60:d9:aa:0f:30:b7:ee:38:fb:7a:0a:d9:1e:
02:fa:9f:8e:09:3a:7e:16:cf:fe:56:d9:0a:15:20:
d2:ea:fe:dd:e1:39:1b:a3:18:e0:63:3b:af:8e:2e:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:57:A2:6B:56:5D:CD:5A:16:C2:8A:9E:F0:17:52:F8:77:F3:B0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.200.0/21
51.194.0.0/21
51.241.53.0/24
51.241.55.0/24
51.241.79.0/24
51.241.81.0/24
51.241.87.0/24
51.241.95.0/24
94.194.12.0/22
Signature Algorithm: sha256WithRSAEncryption
10:51:9b:a9:cf:b3:ee:ef:bc:4d:db:28:1c:78:3b:b4:60:3b:
dc:48:49:45:b7:91:28:3f:81:fd:c6:30:7e:74:e1:81:66:e0:
66:ee:80:f9:99:72:86:5e:5a:d5:5d:be:ac:3f:7c:89:35:31:
80:a4:d4:96:7b:72:ef:67:ae:90:9a:eb:ce:31:36:80:bb:cf:
3a:14:ac:20:d7:75:aa:10:75:be:88:89:f5:4e:af:d1:60:fa:
79:fb:ff:40:d2:fc:59:ae:9a:eb:87:65:40:85:00:10:5d:18:
34:ac:33:ac:44:b3:0a:1a:9b:2e:87:b2:0c:66:03:d6:de:48:
86:7c:3c:bb:dc:e3:f6:6d:ca:ba:33:82:36:6c:4d:83:9b:46:
69:95:8f:8f:6f:74:82:63:b1:b3:95:07:3d:f8:5e:bc:a7:87:
45:a6:ac:10:f9:57:0e:6f:0d:c7:44:39:c3:25:a5:a1:de:d5:
ff:ac:2a:53:df:b4:ad:69:a3:bf:94:c5:5d:cd:2b:d8:77:aa:
ba:e3:5b:7d:82:85:15:68:51:55:b9:fe:cd:fa:97:75:cb:ad:
48:8b:e3:07:7b:d8:d7:b5:9a:c0:5c:38:9c:b8:08:9e:62:12:
64:3a:1d:b8:1d:40:47:75:bc:20:fb:4f:87:76:4b:e3:2f:df:
7b:d6:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:13:08 2026 by rpki-client