Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: EpbBCVjtyCM7w2aWrzQOy1IakDWkSZ/3V0W/rc4sNVk=
Subject key identifier: C8:33:A0:94:85:A3:64:93:07:8C:C4:38:AB:E9:78:CB:64:79:FB:93
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 27C8C40DB5F50BA7698E4BD928A50C87A47F182E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
Signing time: Wed 11 Nov 2026 23:46:55 +0000
ROA not before: Wed 11 Nov 2026 23:41:55 +0000
ROA not after: Wed 10 Nov 2027 23:46:55 +0000
asID: 396356
IP address blocks: 2.58.29.0/24 maxlen: 24
2.58.30.0/24 maxlen: 24
2.58.31.0/24 maxlen: 24
2.58.174.0/24 maxlen: 24
5.181.133.0/24 maxlen: 24
5.252.76.0/24 maxlen: 24
5.253.200.0/24 maxlen: 24
5.253.201.0/24 maxlen: 24
5.253.203.0/24 maxlen: 24
45.81.2.0/24 maxlen: 24
45.89.251.0/24 maxlen: 24
45.89.252.0/24 maxlen: 24
45.137.31.0/24 maxlen: 24
45.137.156.0/24 maxlen: 24
45.139.181.0/24 maxlen: 24
109.106.2.0/24 maxlen: 24
130.185.125.0/24 maxlen: 24
179.61.167.0/24 maxlen: 24
179.61.175.0/24 maxlen: 24
179.61.178.0/24 maxlen: 24
179.61.179.0/24 maxlen: 24
179.61.218.0/24 maxlen: 24
179.61.233.0/24 maxlen: 24
181.41.204.0/24 maxlen: 24
181.41.208.0/24 maxlen: 24
181.41.218.0/24 maxlen: 24
181.214.56.0/24 maxlen: 24
181.214.59.0/24 maxlen: 24
181.214.61.0/24 maxlen: 24
181.214.64.0/24 maxlen: 24
181.214.66.0/24 maxlen: 24
181.214.70.0/24 maxlen: 24
181.214.86.0/24 maxlen: 24
181.214.102.0/24 maxlen: 24
181.214.196.0/24 maxlen: 24
181.214.225.0/24 maxlen: 24
181.214.226.0/24 maxlen: 24
181.215.92.0/24 maxlen: 24
181.215.117.0/24 maxlen: 24
181.215.118.0/24 maxlen: 24
181.215.120.0/24 maxlen: 24
181.215.125.0/24 maxlen: 24
181.215.126.0/24 maxlen: 24
181.215.129.0/24 maxlen: 24
181.215.131.0/24 maxlen: 24
181.215.146.0/24 maxlen: 24
181.215.153.0/24 maxlen: 24
181.215.155.0/24 maxlen: 24
181.215.156.0/24 maxlen: 24
181.215.158.0/24 maxlen: 24
181.215.169.0/24 maxlen: 24
181.215.172.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
185.34.43.0/24 maxlen: 24
185.142.24.0/24 maxlen: 24
185.143.229.0/24 maxlen: 24
185.151.59.0/24 maxlen: 24
185.158.100.0/24 maxlen: 24
185.158.101.0/24 maxlen: 24
185.158.102.0/24 maxlen: 24
185.158.103.0/24 maxlen: 24
185.158.134.0/24 maxlen: 24
191.96.4.0/24 maxlen: 24
191.96.44.0/24 maxlen: 24
191.96.45.0/24 maxlen: 24
191.96.46.0/24 maxlen: 24
191.96.47.0/24 maxlen: 24
191.96.107.0/24 maxlen: 24
191.96.122.0/24 maxlen: 24
191.96.160.0/24 maxlen: 24
191.96.161.0/24 maxlen: 24
191.96.162.0/24 maxlen: 24
191.96.163.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
191.96.239.0/24 maxlen: 24
191.101.4.0/24 maxlen: 24
191.101.5.0/24 maxlen: 24
191.101.43.0/24 maxlen: 24
191.101.90.0/24 maxlen: 24
191.101.99.0/24 maxlen: 24
191.101.119.0/24 maxlen: 24
191.101.154.0/24 maxlen: 24
191.101.160.0/24 maxlen: 24
191.101.216.0/24 maxlen: 24
191.101.255.0/24 maxlen: 24
213.109.171.0/24 maxlen: 24
2a00:d1a0:a::/48 maxlen: 48
2a0a:a700::/30 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c8:c4:0d:b5:f5:0b:a7:69:8e:4b:d9:28:a5:0c:87:a4:7f:18:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 11 23:41:55 2026 GMT
Not After : Nov 10 23:46:55 2027 GMT
Subject: CN=C833A09485A36493078CC438ABE978CB6479FB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:44:3c:34:8b:f1:ad:f0:b0:37:d1:50:96:
44:7c:df:26:e8:bd:b8:6c:bd:92:e7:b1:c2:05:3f:
8a:fb:d0:d5:c2:0f:6b:cd:bb:bd:1b:af:5a:1a:cf:
b3:57:3c:e9:e5:91:ce:54:b6:b8:83:69:ab:3f:5d:
2f:c2:e7:6a:b0:e6:ca:69:bc:1a:5c:94:80:bd:83:
12:32:ce:c7:81:64:7f:83:45:16:19:38:a7:25:03:
61:c2:aa:d1:5a:a4:e0:d0:c9:56:6b:f2:7f:ba:d0:
30:99:92:4d:84:6a:22:de:f5:c7:74:8c:39:4b:7a:
71:c8:ec:f1:05:e0:0b:d5:89:36:de:65:57:1f:24:
bf:0a:02:65:8e:3c:4c:6a:45:a9:f5:d0:0b:1a:fb:
3c:6f:d4:11:36:7e:2e:ad:81:2e:36:98:78:df:bf:
5e:1a:e4:1d:a2:3a:3c:df:71:c2:0d:86:dc:03:92:
60:c1:05:4b:a5:a9:6d:5b:9d:2e:fa:56:d4:9b:b2:
73:be:ea:b4:77:74:2f:d1:40:bf:a6:14:08:98:2b:
47:2a:f3:b0:bb:cc:5d:9e:a9:9b:19:c7:a9:cb:5e:
78:1a:c6:ad:1f:ea:0f:97:92:71:cf:27:9c:65:c4:
dd:19:8a:ed:6b:8a:59:52:87:5b:61:82:6b:a8:5e:
0a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:33:A0:94:85:A3:64:93:07:8C:C4:38:AB:E9:78:CB:64:79:FB:93
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.29.0-2.58.31.255
2.58.174.0/24
5.181.133.0/24
5.252.76.0/24
5.253.200.0/23
5.253.203.0/24
45.81.2.0/24
45.89.251.0-45.89.252.255
45.137.31.0/24
45.137.156.0/24
45.139.181.0/24
109.106.2.0/24
130.185.125.0/24
179.61.167.0/24
179.61.175.0/24
179.61.178.0/23
179.61.218.0/24
179.61.233.0/24
181.41.204.0/24
181.41.208.0/24
181.41.218.0/24
181.214.56.0/24
181.214.59.0/24
181.214.61.0/24
181.214.64.0/24
181.214.66.0/24
181.214.70.0/24
181.214.86.0/24
181.214.102.0/24
181.214.196.0/24
181.214.225.0-181.214.226.255
181.215.92.0/24
181.215.117.0-181.215.118.255
181.215.120.0/24
181.215.125.0-181.215.126.255
181.215.129.0/24
181.215.131.0/24
181.215.146.0/24
181.215.153.0/24
181.215.155.0-181.215.156.255
181.215.158.0/24
181.215.169.0/24
181.215.172.0/24
181.215.195.0/24
185.34.43.0/24
185.142.24.0/24
185.143.229.0/24
185.151.59.0/24
185.158.100.0/22
185.158.134.0/24
191.96.4.0/24
191.96.44.0/22
191.96.107.0/24
191.96.122.0/24
191.96.160.0/22
191.96.174.0/24
191.96.239.0/24
191.101.4.0/23
191.101.43.0/24
191.101.90.0/24
191.101.99.0/24
191.101.119.0/24
191.101.154.0/24
191.101.160.0/24
191.101.216.0/24
191.101.255.0/24
213.109.171.0/24
IPv6:
2a00:d1a0:a::/48
2a0a:a700::/30
Signature Algorithm: sha256WithRSAEncryption
94:9f:10:7c:48:59:86:06:01:df:58:c0:f7:6d:25:19:d5:5d:
2c:5b:87:fb:00:8c:14:af:84:0a:fd:17:3b:fd:5e:38:9b:db:
bc:05:47:ab:a7:41:b3:a1:95:fe:cb:fd:82:51:a7:72:20:2c:
af:54:89:c1:cc:9b:ba:39:23:b1:a3:08:a9:ec:ec:2c:05:6f:
44:c1:ca:71:9e:f7:4a:dd:cb:76:ad:ec:89:c9:89:ea:aa:81:
52:7a:49:6c:51:1b:90:f7:89:ce:fb:ea:b3:d5:66:40:4f:4f:
03:3c:e9:f7:94:a0:53:9a:af:31:76:0f:f8:88:fd:25:35:2c:
2a:36:94:f1:b2:57:56:c6:7a:b0:1a:e2:6a:d9:58:a8:c6:01:
ad:a2:47:d5:17:49:e0:e0:5d:a9:9c:47:cb:8c:64:de:56:03:
ec:dd:6c:f0:f0:77:dd:6b:b7:ee:79:92:db:6f:3d:2b:ec:d6:
65:c4:f6:6d:08:fb:99:2b:57:b8:3c:18:45:63:10:38:13:dd:
9c:6f:d5:b2:eb:34:71:1e:a1:09:0a:7d:74:09:15:a3:d7:23:
3f:9a:6f:31:65:22:e5:ca:ac:be:b5:7f:a3:69:a4:7d:65:5b:
3b:49:77:28:c8:3a:e0:08:e7:c6:a8:21:71:4b:33:2a:9b:e9:
d6:02:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 22:35:27 2026 by rpki-client