Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399955.roa
File: AS399955.roa (raw, json)
Hash identifier: geGt+g/nO2cMEE22Wj/PgJuQDJXh3Z3iNCSwF185C6g=
Subject key identifier: B0:9F:63:C9:D1:20:A8:48:43:D4:39:A7:7C:A9:B9:19:DA:3C:56:7A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 77096B79BA36409A037CA0B61980DAED238684E5
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399955.roa
Signing time: Thu 30 Apr 2026 12:15:02 +0000
ROA not before: Thu 30 Apr 2026 12:10:02 +0000
ROA not after: Thu 29 Apr 2027 12:15:02 +0000
asID: 399955
IP address blocks: 51.146.36.0/22 maxlen: 24
51.146.40.0/22 maxlen: 24
51.146.44.0/22 maxlen: 24
51.146.52.0/22 maxlen: 24
51.146.56.0/22 maxlen: 24
51.146.60.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.132.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.140.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
51.146.150.0/23 maxlen: 24
51.194.8.0/21 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.40.0/21 maxlen: 24
51.194.88.0/21 maxlen: 24
51.194.104.0/21 maxlen: 24
51.194.120.0/21 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:09:6b:79:ba:36:40:9a:03:7c:a0:b6:19:80:da:ed:23:86:84:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 30 12:10:02 2026 GMT
Not After : Apr 29 12:15:02 2027 GMT
Subject: CN=B09F63C9D120A84843D439A77CA9B919DA3C567A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:d8:cc:1e:d5:ef:e5:22:b2:0e:40:dd:67:
7f:5f:c2:9b:0c:7c:58:1f:25:ee:a4:2a:eb:37:40:
f0:24:78:01:a8:9e:15:0b:b7:09:26:60:6c:16:ce:
2e:9c:55:fe:89:94:d4:43:c2:4d:ae:5b:fd:af:fd:
ca:7d:78:17:2e:a6:3a:92:8b:ee:94:4d:73:58:cf:
ef:8b:76:84:f5:88:b8:b6:0c:85:d9:32:3b:dc:fb:
ec:32:90:32:ad:bf:89:66:1f:27:22:6d:1f:9c:13:
3f:bc:7e:6b:d0:0d:24:41:32:14:18:4f:34:f0:67:
55:e8:30:64:78:d3:9d:02:1f:2b:cf:50:25:b8:a2:
0b:16:d6:2b:46:21:77:b1:8a:7a:27:71:d2:f6:a2:
99:47:57:a3:7c:8e:f0:96:c4:3e:ab:30:be:03:1b:
64:38:44:d0:3a:af:81:19:0c:48:e7:fc:2b:e3:5e:
e9:14:91:d4:d5:6e:fd:b6:90:d5:c4:70:50:2e:e4:
be:83:a6:4a:79:c3:0c:28:47:b2:d3:c1:1f:4a:07:
c6:f2:10:d4:cc:3f:55:57:9a:b9:5c:20:3f:de:ff:
39:54:ed:4a:b4:44:b0:88:fa:c7:74:88:41:91:6d:
0f:03:e1:61:10:34:70:d9:87:b8:6d:b2:32:e2:56:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:63:C9:D1:20:A8:48:43:D4:39:A7:7C:A9:B9:19:DA:3C:56:7A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.36.0-51.146.47.255
51.146.52.0-51.146.63.255
51.146.128.0-51.146.151.255
51.194.8.0-51.194.31.255
51.194.40.0/21
51.194.88.0/21
51.194.104.0/21
51.194.120.0/21
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
Signature Algorithm: sha256WithRSAEncryption
17:f5:77:16:df:61:74:e3:7b:db:73:38:2a:e7:0e:d4:72:d7:
70:10:4e:db:1f:c3:31:28:9d:f3:67:bb:4c:70:91:ce:81:35:
71:58:4f:01:95:98:72:c6:3a:9b:c4:c4:35:b4:ba:3b:47:95:
d7:ba:b0:82:ed:42:f7:cd:d4:6b:c9:6a:38:a2:3b:e6:45:fd:
92:70:bd:82:c5:58:93:e3:d0:28:a4:d8:8c:70:c6:90:c7:31:
60:ed:bc:be:4b:a0:1c:b1:b6:b3:d4:fe:c9:7f:41:51:4b:a9:
70:97:53:2a:ac:27:0e:f0:76:a8:e0:2f:99:eb:85:ed:e8:ce:
50:1e:8d:16:17:c4:78:56:3c:cd:7a:5f:54:ed:4e:8d:68:b1:
68:4d:ed:16:3a:b5:ad:30:c5:ec:28:78:2c:c8:48:81:0e:84:
cc:0c:c8:4d:70:7b:1a:30:ab:90:de:8f:00:1a:6a:f7:13:f4:
75:a5:23:72:64:95:e1:27:e7:ab:78:bf:35:ef:08:1b:dd:88:
fb:96:93:76:41:5e:fc:12:fb:1f:05:56:17:ae:85:ad:a5:a0:
1d:ec:61:c2:5f:65:38:11:46:2d:f1:5c:fd:de:78:b1:d0:92:
11:fc:6e:77:e3:61:14:d5:97:5c:51:97:83:c2:35:24:dc:aa:
20:46:47:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:24:24 2026 by rpki-client