Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: WQ7n7mbT2/t4nJFx42DR/7H/TBEpCcTDo+DTO5h/IeE=
Subject key identifier: 73:AE:1A:D0:75:5D:2F:DA:30:CC:6B:E5:B5:FE:5B:51:0D:12:C2:28
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 56889A213C1CC9E7BC544B69380BCF665EABD03C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399359.roa
Signing time: Wed 12 Aug 2026 00:52:29 +0000
ROA not before: Wed 12 Aug 2026 00:47:29 +0000
ROA not after: Wed 11 Aug 2027 00:52:29 +0000
asID: 399359
IP address blocks: 51.194.42.0/24 maxlen: 24
51.194.89.0/24 maxlen: 24
51.194.95.0/24 maxlen: 24
51.194.120.0/24 maxlen: 24
51.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:88:9a:21:3c:1c:c9:e7:bc:54:4b:69:38:0b:cf:66:5e:ab:d0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 12 00:47:29 2026 GMT
Not After : Aug 11 00:52:29 2027 GMT
Subject: CN=73AE1AD0755D2FDA30CC6BE5B5FE5B510D12C228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:da:a0:30:d9:8e:f7:96:07:52:22:3e:cb:
fa:c3:a2:54:c4:23:b2:41:91:4b:b9:78:2a:c0:2f:
d2:d0:7d:42:8e:8e:d6:4e:5c:26:8d:0c:4a:3e:dc:
04:7a:ef:b9:00:16:7f:b1:da:3a:6c:b7:d1:dc:b4:
32:20:eb:14:c7:e7:ae:10:9a:60:43:ec:45:4d:dd:
4c:2b:a2:e9:86:9e:8f:a0:b1:6f:d0:95:01:94:90:
d7:e0:35:a9:0a:65:29:67:54:88:4b:ef:75:29:a5:
75:f1:a3:cb:ea:db:0b:08:48:3c:4d:31:ff:46:8f:
62:6d:02:96:27:59:46:19:5a:d1:22:33:0b:d4:b3:
f2:05:9e:5b:af:27:3f:a5:22:6e:fd:bd:7f:a3:37:
3e:9a:5f:15:0d:6e:e6:15:02:f8:f3:a2:73:5e:ca:
8a:fb:86:b4:f0:7d:a5:02:83:35:94:33:76:a4:06:
45:bb:29:49:94:07:7b:a3:0a:33:c4:52:3c:42:2a:
3b:bc:1d:63:90:54:0b:c3:e7:5c:25:9b:53:cf:ab:
b3:f6:12:16:98:d6:01:cf:f0:ae:ac:37:4d:ec:a3:
b4:02:ea:78:b8:8c:20:dc:d8:b8:29:da:d9:3f:9e:
e5:8d:db:10:42:a2:ce:1b:16:ac:55:1f:4b:d4:0b:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:1A:D0:75:5D:2F:DA:30:CC:6B:E5:B5:FE:5B:51:0D:12:C2:28
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.42.0/24
51.194.89.0/24
51.194.95.0/24
51.194.120.0/24
51.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e9:29:55:04:22:ef:8f:77:9b:8d:52:5d:0f:6f:55:ee:8e:
ef:de:8d:d2:fb:6b:da:c9:be:14:d7:e8:fe:7c:80:4c:d5:6b:
38:1d:51:3b:be:98:85:4c:50:9c:b5:0f:bf:27:96:4d:8b:5a:
13:24:fa:ad:8a:1a:b8:10:70:22:88:53:92:56:05:e2:49:30:
11:ce:de:a2:ac:09:80:c8:b4:01:61:26:09:00:5d:82:a6:cd:
0d:46:d1:85:be:7f:df:a3:c5:d8:6b:30:88:70:d1:46:b1:77:
76:61:c5:e4:89:56:3e:bf:38:17:67:a1:0d:d4:b3:e0:d4:f3:
89:52:e9:63:f6:b9:af:7b:41:7f:4d:3d:5c:61:68:8f:b4:d5:
8a:eb:51:7f:25:30:c1:c6:06:7d:ba:5d:64:fe:d7:f6:5b:46:
ea:2d:22:19:9f:a5:a7:19:1e:92:45:eb:f8:ec:44:b0:d0:64:
1b:bc:56:d3:81:75:69:f9:39:94:7e:31:46:e3:fc:48:97:18:
f9:26:3f:d9:16:02:bd:8f:fd:46:96:ed:68:db:64:1d:c2:9d:
4a:aa:1b:09:c7:36:d0:96:65:11:88:01:77:dc:cc:56:d7:4e:
93:5e:db:cc:dc:8a:fb:b8:82:bb:08:44:22:a2:74:a5:f7:46:
c4:57:2b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:13:17 2026 by rpki-client