Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395954.roa
File: AS395954.roa (raw, json)
Hash identifier: Fe0UI3ViZryZ2Qp/CCp2gLh1hIi1m2P/kunV+Bj9a7g=
Subject key identifier: 06:21:E4:80:70:E7:90:85:E4:08:01:22:08:1A:97:E3:9D:08:7B:37
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 74E6B4B37C81AD1FA7B30399B697A7724B6C3C1C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395954.roa
Signing time: Mon 08 Sep 2025 09:55:00 +0000
ROA not before: Mon 08 Sep 2025 09:50:00 +0000
ROA not after: Mon 07 Sep 2026 09:55:00 +0000
asID: 395954
IP address blocks: 191.96.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e6:b4:b3:7c:81:ad:1f:a7:b3:03:99:b6:97:a7:72:4b:6c:3c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 8 09:50:00 2025 GMT
Not After : Sep 7 09:55:00 2026 GMT
Subject: CN=0621E48070E79085E4080122081A97E39D087B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:1f:9c:73:61:61:ae:78:b3:d2:b8:b8:d1:
12:f2:54:3c:64:96:3f:b6:68:e0:53:0f:8f:9f:18:
61:87:22:fc:39:a9:a6:4c:66:34:20:90:c1:66:9f:
87:e8:b7:05:7f:70:a9:f0:50:84:02:01:69:d9:7d:
2a:98:65:5c:75:cd:23:3f:bf:29:95:65:99:00:19:
a9:d6:ba:67:2d:e4:2b:9a:70:86:c9:56:c3:ff:17:
ab:bf:94:64:57:d8:68:c1:e0:3a:6f:3f:74:b3:66:
fb:b5:68:00:97:f5:59:9a:47:03:54:63:96:fc:00:
99:48:e6:a9:ee:77:7c:eb:6e:a5:c4:91:cc:71:2a:
be:f8:81:cb:9b:88:2f:a0:c1:b9:2a:d7:22:35:40:
11:58:c2:ee:95:8b:a4:2d:54:7a:9b:d4:6e:ea:45:
51:4d:4e:d9:5a:fb:c9:6c:97:7a:33:51:e7:99:77:
5f:db:88:ca:39:d1:d2:d0:f6:45:d2:c3:42:dd:61:
41:a6:84:45:53:73:9a:54:7d:9d:07:e5:bd:9a:f4:
f6:46:93:c8:5a:37:d4:e9:46:b5:48:2d:e7:f9:9a:
7a:60:0a:30:bf:f0:4e:0f:9f:f8:26:f0:b8:45:90:
fd:e1:9a:0c:89:65:9e:3b:8c:05:84:2f:8b:ab:cb:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:E4:80:70:E7:90:85:E4:08:01:22:08:1A:97:E3:9D:08:7B:37
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS395954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e8:09:63:50:63:f5:39:8e:2c:b1:9c:81:d7:90:0a:cc:9f:
7a:b4:b1:75:aa:2a:4b:d9:f4:23:c1:4e:38:08:fb:36:71:b4:
25:51:99:2d:d4:a0:8e:17:0d:0b:da:eb:df:73:c5:6c:a8:d6:
40:05:16:c4:5f:df:5e:6f:33:ae:3c:c8:7b:c8:8c:b0:78:e0:
47:f7:11:a6:43:f2:3e:42:d6:4a:38:58:27:19:92:cb:e3:cc:
af:b8:fc:b7:e7:a8:ae:c7:da:4f:d5:05:40:ce:0f:ca:17:00:
82:92:d0:c8:7e:b9:cc:4f:cb:5a:7f:f3:04:2b:75:5c:94:a3:
e0:13:93:ed:ba:30:fb:00:fb:25:f7:d9:09:2d:fc:48:f5:0d:
8a:43:9e:ce:83:86:8b:70:e8:c2:6f:8b:c5:f4:89:42:23:80:
4c:f1:cf:7b:04:42:27:fd:95:e1:ae:d5:17:6c:50:8a:95:66:
c9:d5:95:5e:8c:05:ff:d9:54:02:62:33:22:0a:f2:ae:be:ba:
7f:60:27:3b:56:04:f7:b9:42:cd:2d:bc:4e:9d:e1:6d:65:28:
c3:66:9e:07:9f:64:fc:0a:3a:04:67:dd:67:91:22:17:a5:bf:
5a:28:4b:83:a4:76:99:b8:2c:5e:d3:f2:45:cf:20:84:2e:f3:
21:96:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:35 2025 by rpki-client