Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399955.roa
File: AS399955.roa (raw, json)
Hash identifier: rSdTplPlCQ2FxR10o9KjGvg4Mwaf2Do1wPoJUWa2/1g=
Subject key identifier: 53:86:47:AE:DA:2B:12:D9:B0:E0:5D:81:98:42:5B:16:EE:12:2E:89
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6DE4C8064EFFCF7775E3DFEDEF1D32C00B9EC8BC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399955.roa
Signing time: Sat 08 Aug 2026 00:05:57 +0000
ROA not before: Sat 08 Aug 2026 00:00:57 +0000
ROA not after: Sat 07 Aug 2027 00:05:57 +0000
asID: 399955
IP address blocks: 51.146.44.0/22 maxlen: 24
51.146.52.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
51.194.8.0/21 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e4:c8:06:4e:ff:cf:77:75:e3:df:ed:ef:1d:32:c0:0b:9e:c8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 8 00:00:57 2026 GMT
Not After : Aug 7 00:05:57 2027 GMT
Subject: CN=538647AEDA2B12D9B0E05D8198425B16EE122E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:6a:c0:21:68:40:b6:dd:aa:ea:69:36:9d:
72:f7:1c:97:46:4c:32:44:1d:99:3d:37:78:39:12:
3a:b9:9d:9f:0d:31:b5:36:f5:20:69:13:27:2e:85:
2a:2b:56:67:3a:45:25:49:74:65:c5:cf:e4:31:8a:
48:9c:49:ca:ed:21:63:30:3c:ed:d1:94:c2:3f:28:
2d:16:b3:47:0d:ae:19:06:07:39:e3:dd:a9:f9:e2:
e4:78:44:08:0b:ac:02:2b:63:13:f1:ea:a4:10:d8:
44:fe:0d:9e:0b:d4:89:0c:ac:cb:2e:f8:0b:b1:c9:
7a:ba:e6:66:2f:17:0b:8a:0e:a2:ac:e5:75:95:fb:
b0:7b:5b:ec:35:f6:cd:a9:b5:67:78:0d:fd:fe:b6:
ac:e8:e2:27:73:4d:bb:d3:2b:12:f0:c5:f3:cc:61:
9f:11:76:2a:df:b9:33:b8:be:af:7a:09:d2:73:15:
a6:12:fe:a9:cd:46:ce:93:d1:bd:bf:9a:8a:4d:0b:
b3:c0:50:48:5d:03:2b:63:82:f7:34:5a:d0:fc:29:
cf:cd:8b:81:0d:6e:2b:58:ed:c7:92:59:90:74:ff:
86:f9:b3:fe:fd:56:2b:30:6b:a3:ec:7d:59:8e:50:
20:a5:bb:ee:cc:37:01:e4:1f:58:69:cd:0a:da:3a:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:47:AE:DA:2B:12:D9:B0:E0:5D:81:98:42:5B:16:EE:12:2E:89
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.44.0/22
51.146.52.0/22
51.146.128.0/22
51.146.136.0/22
51.146.144.0-51.146.149.255
51.194.8.0-51.194.31.255
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
Signature Algorithm: sha256WithRSAEncryption
53:0a:7f:6f:94:51:9a:bf:ee:ec:34:12:f1:8b:b1:63:65:df:
92:6a:1a:d9:72:0d:14:ee:9a:7a:b4:ac:f3:95:2e:10:df:03:
a0:42:ad:9b:cd:ac:f1:4b:25:3d:82:58:b5:5f:18:2b:53:58:
da:58:2b:e1:96:00:57:7d:51:18:d2:7a:6a:7e:bc:3d:0e:95:
f7:56:cf:18:fe:c8:7a:a8:c0:c9:14:9e:62:4d:0a:e8:ea:d3:
95:43:fb:05:aa:9f:da:98:c9:2a:27:2f:0d:46:b4:6a:88:30:
e8:fe:e9:d0:50:20:ee:17:9c:d2:0c:35:ed:7a:4c:68:bd:a4:
77:19:12:81:66:2f:01:a6:13:36:00:de:4f:20:81:4e:52:7f:
18:57:bc:0f:b1:7c:b8:38:df:f6:b7:93:b8:e2:8e:94:8c:31:
8a:9f:41:7b:c1:98:dc:f5:5b:e5:50:76:e3:9a:8d:eb:80:6f:
29:8c:b6:80:c4:96:4f:c3:2b:30:e0:5a:cd:c3:52:be:43:fa:
ff:37:18:b3:6b:93:62:50:1a:44:e7:71:dd:fc:63:b0:9d:ab:
44:d7:0f:1c:61:47:af:04:ff:86:0b:4f:c3:04:ea:8b:37:be:
bc:de:d9:61:52:ab:a9:4f:93:d9:f9:79:97:73:52:61:ec:8d:
f1:9f:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:30:46 2026 by rpki-client