Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199301.roa
File: AS199301.roa (raw, json)
Hash identifier: ui9mw0rd4JtPsmpVuKtfNBpc6f2PUJ1yp9Z9pRuk8pE=
Subject key identifier: 39:7E:D1:39:4B:D7:A9:50:EF:32:87:5E:F4:BF:E6:18:5B:02:91:2B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 452D82B92445A58948679261C88354FA356FACC1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199301.roa
Signing time: Tue 21 Apr 2026 16:27:48 +0000
ROA not before: Tue 21 Apr 2026 16:22:48 +0000
ROA not after: Tue 20 Apr 2027 16:27:48 +0000
asID: 199301
IP address blocks: 181.41.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:2d:82:b9:24:45:a5:89:48:67:92:61:c8:83:54:fa:35:6f:ac:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 21 16:22:48 2026 GMT
Not After : Apr 20 16:27:48 2027 GMT
Subject: CN=397ED1394BD7A950EF32875EF4BFE6185B02912B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:0f:fe:24:07:1e:e4:94:40:b2:34:56:da:
e7:6c:6d:12:71:4a:00:49:15:41:2e:a4:48:91:fb:
70:43:1d:32:aa:aa:d5:86:bf:c8:4e:f1:98:e3:6a:
4c:5a:51:2d:02:82:de:44:96:f7:6d:2b:c7:2d:c6:
7a:e3:c8:47:40:9a:32:69:95:1e:04:73:02:09:28:
c9:51:7f:cb:db:ed:82:5d:52:60:77:f9:5c:cd:64:
f7:40:d5:0f:2a:1a:53:ea:13:09:2a:14:5f:03:fe:
0f:11:4a:3d:22:14:4d:92:6d:04:a5:88:77:1a:a0:
24:47:9c:0a:92:04:16:05:79:ba:14:09:82:c2:92:
75:a0:ff:1c:cb:8c:89:a1:72:49:22:47:92:b5:a6:
3d:f1:80:35:34:63:dd:f8:7a:92:24:32:b4:75:36:
3b:41:18:17:4e:05:ae:4c:5a:7a:56:55:84:63:70:
f1:6d:55:8c:83:4b:84:54:aa:46:fa:5e:36:62:68:
1e:b0:dc:2c:14:b8:1b:9c:5b:76:98:cf:84:a6:f1:
ee:3d:d9:39:14:18:e2:52:e7:ad:7b:e5:65:c6:c9:
6c:33:8a:59:ea:a2:65:90:92:09:b3:fc:09:7f:97:
ce:15:7b:a2:e6:d7:13:e9:1d:8c:ba:c4:e3:b1:94:
6d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7E:D1:39:4B:D7:A9:50:EF:32:87:5E:F4:BF:E6:18:5B:02:91:2B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:56:66:4b:a9:9a:3c:0f:13:e1:8e:6f:40:84:15:d0:b7:b2:
85:d0:66:1f:bd:59:88:06:75:48:63:c3:1b:84:d0:68:ee:27:
76:9d:c7:83:11:18:8f:08:0c:22:9c:eb:72:a8:a6:09:80:35:
a7:70:c1:8f:c1:79:73:49:59:4a:e2:f4:c0:d2:41:b7:a3:a4:
3f:84:00:91:72:07:9d:7a:ff:31:54:2f:e2:14:90:a1:32:02:
f2:ec:2f:cc:01:03:06:6c:69:4a:ca:7b:c0:1f:88:15:02:c4:
a6:d8:37:dd:83:41:5d:e1:3c:04:ad:ed:0b:a0:96:ea:e9:db:
0b:70:14:65:18:3a:3f:1f:19:20:b2:3a:62:93:c8:7d:50:c0:
4c:6f:e8:31:d4:37:e3:0b:da:77:3b:7a:e7:a9:df:03:71:64:
47:df:39:97:e5:c5:e4:91:7a:c3:54:7e:67:c8:1f:8d:ea:dc:
6e:83:e1:bf:29:ec:9f:36:b0:61:9a:d8:aa:c8:93:fb:3d:ee:
49:27:6f:c5:ff:86:43:22:f9:7c:74:a7:86:57:f1:41:a9:3f:
07:2c:8d:ef:e1:5b:3b:97:23:86:01:ad:10:e2:29:75:d2:0b:
f6:cb:2c:3d:73:35:99:bb:b6:47:ee:d0:c2:c5:ca:b9:6b:b9:
aa:7d:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:23:13 2026 by rpki-client