Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS154361.roa
File: AS154361.roa (raw, json)
Hash identifier: sXGhQIvyYF8tN6tEX+MjufUsC0KqM9DlQfP9Avy4QT4=
Subject key identifier: BE:5B:2A:8F:4E:B5:19:C4:26:63:26:B3:94:4F:4D:67:2B:4B:2A:75
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5F0167B408F9E9ED5C2466417FDD16D3D02490C4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS154361.roa
Signing time: Mon 13 Apr 2026 08:08:07 +0000
ROA not before: Mon 13 Apr 2026 08:03:07 +0000
ROA not after: Mon 12 Apr 2027 08:08:07 +0000
asID: 154361
IP address blocks: 181.41.200.0/24 maxlen: 24
213.109.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:01:67:b4:08:f9:e9:ed:5c:24:66:41:7f:dd:16:d3:d0:24:90:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 13 08:03:07 2026 GMT
Not After : Apr 12 08:08:07 2027 GMT
Subject: CN=BE5B2A8F4EB519C4266326B3944F4D672B4B2A75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:57:73:a7:81:06:fe:61:3a:c5:36:3c:47:
bd:a9:e2:d2:86:e2:30:07:ca:e3:b2:4b:61:9e:d4:
60:6c:eb:0d:28:e3:40:db:1f:08:40:f9:8d:b2:17:
09:af:f4:88:6a:dc:1d:ee:6f:4c:6d:42:1c:87:2b:
bf:a7:5e:b9:37:80:2c:d9:22:87:3d:18:40:18:77:
6d:72:97:aa:6a:03:6b:51:40:30:bf:e1:53:90:7c:
7a:50:96:8c:1e:0b:ce:1f:27:42:11:d6:43:58:2e:
d7:4f:77:65:e8:61:fb:99:f0:58:50:43:11:67:ea:
f8:dc:44:4d:3d:be:fa:f6:45:79:6e:72:9a:fd:5d:
0d:e1:ec:04:8a:f9:8d:2e:83:24:e4:8a:b8:6c:f1:
9d:fd:1a:d9:d2:e5:57:00:4f:39:1f:7c:3d:bd:03:
19:58:c5:cb:80:f7:52:0f:31:4e:f2:dd:e3:da:1b:
48:c5:9d:5c:bd:44:33:86:b6:21:ba:96:0c:44:1b:
3c:c0:96:2b:99:1a:8a:a6:ec:c5:5c:28:7f:86:e7:
d0:02:ae:72:d9:90:ed:48:1b:78:24:44:9c:e5:c9:
ba:14:48:c2:07:75:d4:6e:e2:64:69:d0:ed:fd:2a:
97:3f:d5:ce:36:af:83:c6:b3:45:a5:b7:e5:3f:cc:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:2A:8F:4E:B5:19:C4:26:63:26:B3:94:4F:4D:67:2B:4B:2A:75
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS154361.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.200.0/24
213.109.168.0/24
Signature Algorithm: sha256WithRSAEncryption
31:eb:00:f4:1d:17:a4:ed:4b:c5:78:a7:5e:ab:ea:73:60:34:
41:31:d2:62:17:2a:79:3d:a3:29:6b:69:87:b1:d7:d4:91:21:
f9:4b:36:38:93:97:e3:d2:5b:98:d4:7f:3c:21:f1:61:8c:d0:
95:e7:27:d7:4d:b7:ec:41:e4:6e:7a:db:5b:04:e7:c8:5d:db:
a3:db:19:ac:87:25:21:b7:17:a4:e5:14:80:3c:ef:89:0e:e5:
af:25:c4:ea:ed:9e:48:16:99:b7:83:2a:0b:f8:5e:59:54:d1:
26:19:2d:f5:a9:4e:b0:b8:3a:f4:da:26:ee:03:95:14:bd:4b:
32:14:f6:73:42:a9:5e:db:3b:d7:bb:af:76:57:a6:3a:eb:aa:
0c:36:71:2c:33:56:15:57:23:8a:be:35:c6:28:52:98:ac:46:
ba:59:60:38:1e:be:43:af:b6:a8:ec:ca:8a:33:8e:6d:a7:e7:
e4:ac:1b:01:6b:ee:ff:e8:6d:d7:7b:a9:d4:a9:fb:45:3f:cf:
83:b7:cb:f0:5c:96:dc:12:3e:81:0f:12:64:cb:a1:21:ae:b4:
4a:5c:a8:92:29:84:d4:f4:ea:04:7c:67:51:62:dc:61:db:28:
94:6b:f4:93:ff:08:5f:c1:01:42:b9:fb:31:7d:ae:d6:ca:cb:
aa:58:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:39 2026 by rpki-client