Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: m81r/37A0/yYFGC9Af9cOxd4yRnGPdnTgjELU5P5Cug=
Subject key identifier: 98:43:B9:36:68:46:9F:C6:4F:F7:06:69:2B:1E:34:0A:56:A6:7A:5A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 335E53FBC58FD3E407947FC8958918084AB162E2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
Signing time: Mon 20 Apr 2026 06:55:48 +0000
ROA not before: Mon 20 Apr 2026 06:50:48 +0000
ROA not after: Mon 19 Apr 2027 06:55:48 +0000
asID: 396356
IP address blocks: 51.146.249.0/24 maxlen: 24
51.194.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5e:53:fb:c5:8f:d3:e4:07:94:7f:c8:95:89:18:08:4a:b1:62:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 20 06:50:48 2026 GMT
Not After : Apr 19 06:55:48 2027 GMT
Subject: CN=9843B93668469FC64FF706692B1E340A56A67A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:8b:39:50:f5:a3:0f:73:82:3b:55:5a:b8:
0e:7c:ea:c6:d7:bb:aa:0a:e0:5a:30:61:b5:27:39:
b1:62:d0:11:76:57:00:5a:c4:16:e7:25:39:c6:bd:
0c:f9:c7:67:20:7f:51:82:4e:53:e9:9d:c6:79:25:
4b:8a:58:aa:b9:ed:12:0b:55:a3:a6:d1:f3:46:f6:
87:65:1d:d4:79:1d:aa:7d:0e:4d:40:67:73:60:8a:
c2:5d:93:f0:ae:40:7a:f0:0f:77:29:14:be:74:c1:
59:b1:cd:6d:6f:13:87:1f:49:98:53:a1:f6:d0:b5:
b7:46:d3:f3:66:e8:dc:b6:93:39:24:9b:ab:e4:8a:
2b:0d:d7:18:49:87:f2:85:53:9a:3e:d4:06:98:3c:
b8:9f:47:98:0d:47:7c:46:af:7f:4c:60:de:79:8a:
f9:0d:31:58:6c:24:c8:2a:c9:c0:6e:fd:fd:49:ba:
bf:53:99:d4:40:ad:3a:7a:18:66:4a:31:8c:c7:27:
0e:c4:ea:5a:71:a8:fa:8a:aa:0f:4f:17:7b:a7:79:
1c:e0:e3:49:4d:fe:12:82:b3:64:77:e1:59:73:5c:
5d:c6:28:79:9e:bd:3c:74:b9:62:7f:d6:2d:4f:b9:
9e:02:17:86:1b:ec:f6:e0:a7:3e:00:27:47:63:86:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:43:B9:36:68:46:9F:C6:4F:F7:06:69:2B:1E:34:0A:56:A6:7A:5A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.249.0/24
51.194.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d8:96:d2:67:47:74:4b:d8:ad:7d:39:3f:63:86:36:5f:e6:
e2:a2:b6:7a:8c:61:22:9b:88:74:06:f3:3f:69:85:44:ec:5e:
91:bf:8f:31:1b:46:bc:a6:0a:78:62:da:62:6a:b3:d8:00:11:
34:91:07:01:82:6b:18:f4:ac:8a:83:28:3c:87:85:87:02:89:
4a:1d:e5:cb:48:ae:fe:f4:ae:01:0e:f8:e2:ad:da:22:1b:e2:
81:fc:c9:49:36:72:08:0c:91:8d:19:88:5e:74:05:ce:e0:d8:
db:9a:f6:27:f9:5c:55:06:6f:84:26:f3:dc:ee:f3:d1:5e:58:
ae:47:5d:e8:7e:02:da:9b:48:0f:ea:e9:ad:d8:60:8f:8e:55:
10:3b:eb:53:13:32:8b:ea:9f:1f:0b:a8:29:f1:80:42:96:84:
5d:76:07:71:46:5e:b9:9e:2d:9e:65:a6:e5:ad:f2:d3:3f:6c:
ac:26:70:a5:db:66:37:25:ed:71:ca:2c:4d:ab:47:68:e8:ae:
ae:26:4b:92:09:24:3b:a4:6c:34:5f:16:70:0f:1d:7e:8d:89:
65:f6:1b:bb:78:6d:28:16:b0:1d:cd:d3:f3:69:54:29:4f:ac:
88:34:31:77:cd:68:36:3f:76:69:ef:97:1c:fc:5e:e5:ef:ee:
57:3c:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:18 2026 by rpki-client