Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS397086.roa
File: AS397086.roa (raw, json)
Hash identifier: UlVvNI+KuUBXGm2rTR9wFpVvm6Lry+R5GYq2d3w+Pt4=
Subject key identifier: 42:3F:C1:CB:88:92:00:31:51:9F:2E:20:8B:00:03:21:BC:DC:87:78
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2B03AA41A78D04921C425E7807FC736EAA9C23AE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS397086.roa
Signing time: Thu 24 Sep 2026 16:49:35 +0000
ROA not before: Thu 24 Sep 2026 16:44:35 +0000
ROA not after: Thu 23 Sep 2027 16:49:35 +0000
asID: 397086
IP address blocks: 181.41.218.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:03:aa:41:a7:8d:04:92:1c:42:5e:78:07:fc:73:6e:aa:9c:23:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 24 16:44:35 2026 GMT
Not After : Sep 23 16:49:35 2027 GMT
Subject: CN=423FC1CB88920031519F2E208B000321BCDC8778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:bb:ef:74:3d:1e:d2:be:c4:6a:4f:05:54:
4e:6a:2b:4e:11:29:54:13:fd:d4:8e:a0:9a:fc:46:
1d:79:81:d9:05:be:d8:b0:11:1d:4d:44:32:d0:a2:
59:7b:8b:4f:81:71:47:aa:4f:67:68:ba:72:f3:67:
2c:df:d5:60:ba:60:f3:65:b6:4e:5a:1b:f3:21:d4:
d3:ef:ea:13:41:91:e0:0c:7e:ac:e0:c3:99:c5:73:
1a:46:55:98:dc:df:93:21:e8:ae:7d:48:9c:66:b2:
5d:7a:07:ea:36:ae:28:ee:c6:bf:2b:68:83:21:37:
a4:15:ba:b4:26:82:40:bf:73:e2:fd:da:1b:d2:3f:
c7:90:e0:f9:b2:58:3b:3e:f9:79:90:c2:1f:af:65:
6b:93:8a:e4:ad:1e:dc:01:22:f5:b1:4d:86:28:82:
be:a6:19:db:b0:64:37:a0:3c:06:ee:a2:be:10:37:
57:67:cf:3e:94:40:9f:a3:4e:c5:5c:d6:6c:ab:d0:
c6:f9:cf:8f:8f:c0:a5:19:d8:a1:ce:8f:2b:fc:07:
46:ff:b1:8c:62:1c:9b:b4:d3:e4:6a:eb:3c:fa:63:
c8:c8:15:17:bc:23:ba:6b:5f:ce:3f:ed:1d:26:4e:
b4:55:00:52:65:d1:34:87:ad:0c:88:7c:b2:c7:de:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3F:C1:CB:88:92:00:31:51:9F:2E:20:8B:00:03:21:BC:DC:87:78
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS397086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.218.0/24
191.96.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3d:eb:ed:30:d6:bc:2d:54:14:ad:25:32:d5:11:1a:e9:b6:
ff:3c:26:d5:dd:8b:23:2f:1a:81:16:d9:1a:03:70:78:10:4e:
52:d0:84:2c:47:23:77:51:56:e3:b5:df:e5:5a:53:28:01:f6:
ce:2e:39:16:f9:84:cd:bf:fe:4a:38:49:81:ef:63:91:dc:82:
6e:37:64:7c:a2:2e:d6:83:cd:79:55:9d:c4:2f:0d:ce:fc:58:
c5:67:cc:03:18:fa:6d:08:dd:40:95:bb:64:09:e4:54:44:79:
9b:25:56:2a:2f:11:ab:bf:77:51:4e:bc:c3:45:f5:c6:ed:d1:
86:82:0b:d6:34:fc:64:13:29:c7:8b:de:84:72:0e:6f:a6:40:
33:1d:f6:6c:ac:04:69:4c:c0:42:ec:2e:94:f8:e3:a9:ec:e8:
bb:23:da:81:59:f4:9f:0f:17:ae:40:a5:f8:56:1f:e4:b6:41:
1c:0a:50:d7:1c:80:a7:56:dd:14:64:a6:00:eb:9f:ef:86:f9:
6d:79:94:0c:4c:4e:e8:a7:51:e6:be:90:d8:29:5f:ca:6f:26:
74:7f:74:8a:94:d5:85:48:4e:43:08:74:d0:c4:17:83:17:ae:
a7:b1:57:4e:51:9d:8e:e9:fb:08:cf:4c:7a:d4:9b:e4:04:97:
91:aa:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:52:17 2026 by rpki-client