Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS15440.roa
File: AS15440.roa (raw, json)
Hash identifier: XYkU5cJf1M5RfGXKldXrC1A5cmCsFoLiP3w7AJJCnsQ=
Subject key identifier: 65:89:98:F1:14:7C:18:D1:0C:C0:D8:8E:E1:A4:5A:6B:62:D4:B5:16
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0EA3C6DB7618B2EA27E03C6FE1051700752395DE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS15440.roa
Signing time: Wed 07 Oct 2026 08:36:34 +0000
ROA not before: Wed 07 Oct 2026 08:31:34 +0000
ROA not after: Wed 06 Oct 2027 08:36:34 +0000
asID: 15440
IP address blocks: 181.214.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 09:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a3:c6:db:76:18:b2:ea:27:e0:3c:6f:e1:05:17:00:75:23:95:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 7 08:31:34 2026 GMT
Not After : Oct 6 08:36:34 2027 GMT
Subject: CN=658998F1147C18D10CC0D88EE1A45A6B62D4B516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:7b:11:22:e5:d8:10:2a:92:a2:e4:6d:68:
28:83:eb:16:aa:f7:10:99:4b:b9:2b:34:80:5f:15:
d6:96:ae:51:38:1a:df:80:4d:94:fe:87:36:d5:c1:
01:c8:b6:38:d5:f1:bc:3c:17:46:b2:28:9b:ab:1f:
e8:67:67:01:7b:7a:17:4e:02:d6:04:b2:58:e4:24:
85:51:4b:41:47:cb:92:5c:69:91:71:73:db:9f:6c:
7c:6f:af:c6:41:e0:40:48:e1:ca:0e:ac:04:89:1e:
5b:8c:93:39:04:b5:78:61:aa:56:13:fe:66:c5:46:
17:17:30:44:00:fa:ef:ff:c9:79:e7:9f:76:2b:59:
e0:23:df:7b:ce:89:5b:cd:03:39:1c:7d:fb:df:68:
b0:9d:e3:2e:9d:18:49:e2:4b:ff:fb:3e:dc:3f:3e:
be:86:bf:56:56:24:41:9c:ef:8d:c3:00:88:e1:0b:
6e:48:fb:e3:69:91:fc:4d:3f:4d:6a:25:1d:91:c2:
7c:d3:0c:83:66:60:d1:ad:fe:13:cd:07:67:be:a2:
46:b6:61:5d:97:36:d5:63:02:0c:ee:ba:cc:30:7d:
ec:8b:5b:1c:b0:85:09:23:2c:95:e0:e5:55:46:e4:
54:81:bf:7c:99:90:de:7c:9e:8d:cd:9e:58:2b:26:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:89:98:F1:14:7C:18:D1:0C:C0:D8:8E:E1:A4:5A:6B:62:D4:B5:16
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS15440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.147.0/24
Signature Algorithm: sha256WithRSAEncryption
47:27:b4:b6:db:93:f4:fc:34:a4:b4:8e:48:e3:36:eb:cf:eb:
e8:6a:e6:97:bc:b0:03:3d:f9:59:47:42:5b:7c:cb:37:94:32:
c2:fa:cb:1a:35:ee:83:57:49:a1:45:5c:82:79:a2:42:5e:46:
59:66:f0:d2:f5:bd:c5:fa:67:1f:1a:ab:8b:8b:59:8c:26:d1:
6d:00:07:67:41:3f:4e:07:6c:d2:46:16:08:c6:62:a8:b1:14:
44:df:96:06:e6:da:4c:d2:20:28:8f:64:c5:67:2d:8a:c8:e9:
bc:7a:32:9c:9e:88:fc:9c:5d:0d:32:81:15:98:e1:fc:52:7a:
e5:4b:c9:40:e6:55:7c:e4:bd:5e:75:98:c2:bd:ae:0c:6c:fe:
42:5c:2c:e6:e6:58:4b:07:71:85:14:d9:75:72:13:96:b9:bc:
0b:d5:89:d1:4a:54:1f:f0:50:97:b5:e4:69:eb:2c:f6:57:53:
4e:27:1c:16:19:7d:fe:2f:ca:9f:c9:e1:c1:2f:9c:81:a6:ed:
26:eb:36:72:0f:b5:69:b9:96:c7:25:03:1e:3b:fd:63:d7:3d:
b3:55:5f:b5:87:b5:6b:cd:47:bc:ab:ef:4f:db:b1:e0:8e:41:
8e:f4:cb:c3:92:e7:77:93:75:1e:bc:a2:cf:2a:10:6e:2d:d8:
d1:8e:43:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:10:33 2026 by rpki-client