Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202759.roa
File: AS202759.roa (raw, json)
Hash identifier: NhIV/So3/31tJpAl1MmZA1RdBi1wEic9NVAMJTtMPls=
Subject key identifier: EB:DF:EB:23:26:6A:D2:66:1C:DA:E8:DD:9C:A9:13:8D:20:A7:90:F3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1A7CCDE34A4F6D21591F7B4B39B6BA87006114D4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202759.roa
Signing time: Sun 02 Aug 2026 07:53:07 +0000
ROA not before: Sun 02 Aug 2026 07:48:07 +0000
ROA not after: Sun 01 Aug 2027 07:53:07 +0000
asID: 202759
IP address blocks: 185.158.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7c:cd:e3:4a:4f:6d:21:59:1f:7b:4b:39:b6:ba:87:00:61:14:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 2 07:48:07 2026 GMT
Not After : Aug 1 07:53:07 2027 GMT
Subject: CN=EBDFEB23266AD2661CDAE8DD9CA9138D20A790F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:2c:61:98:43:0a:21:48:26:67:3a:c1:de:
79:b7:45:dc:86:3b:a6:f8:88:af:03:fa:aa:8c:18:
18:b6:31:4f:b3:ab:bf:38:c2:84:d9:d2:c8:a6:b8:
cd:a8:48:ab:de:9b:5a:ef:aa:de:96:1c:ff:2a:39:
6f:98:54:f7:8e:8f:00:00:ce:3f:6a:6e:69:04:a0:
d2:2e:ef:23:f4:de:6c:c9:00:e0:f9:6d:ad:0e:59:
6f:8a:a7:96:29:f6:1a:81:f4:73:39:4c:19:2b:a7:
63:ef:54:11:67:15:62:5c:d2:15:ba:a7:99:a5:1c:
99:aa:a2:c8:8a:39:f9:3d:45:c5:67:67:a4:5a:10:
07:91:90:f4:aa:c1:55:40:5b:2c:c0:b4:d6:63:b1:
40:17:64:82:38:4a:f5:0a:42:0f:ed:4a:70:54:c4:
4d:52:bc:75:15:ab:c0:f4:42:0d:14:69:18:1c:d8:
7d:e5:43:96:78:9c:af:3b:10:da:b1:2b:2d:a3:cc:
a4:3c:cf:68:ec:6d:91:84:dc:34:43:45:32:20:59:
2b:9a:79:f9:72:76:e6:19:5d:37:2c:a3:42:21:8c:
53:7d:b8:22:b3:b6:5b:44:68:54:6d:09:ff:63:01:
41:2f:df:80:3f:5c:30:14:69:cc:cc:d4:a1:22:35:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DF:EB:23:26:6A:D2:66:1C:DA:E8:DD:9C:A9:13:8D:20:A7:90:F3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202759.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.135.0/24
Signature Algorithm: sha256WithRSAEncryption
41:83:f0:51:19:2d:93:4c:c4:a4:72:2c:b8:4a:a8:b7:69:bd:
43:86:72:0f:90:8a:ae:58:fe:42:5f:cb:e5:79:a2:d7:03:cf:
86:7d:3f:2d:73:26:81:90:09:e2:e7:a8:8a:0a:ee:49:25:e8:
f4:e2:a9:4a:1e:43:1b:c5:6e:cd:1a:d9:99:66:dc:1f:18:4b:
d9:c4:93:1a:f8:21:bd:fb:8d:ac:ad:b0:0f:dd:7e:ef:68:68:
19:5e:39:c0:cf:7e:96:29:d5:7f:e2:7b:c1:66:ef:44:f4:12:
b0:86:ff:ad:81:86:41:04:ca:10:07:17:01:0a:21:4a:ca:7e:
78:ce:94:6e:f3:9f:b1:c8:f6:4d:32:83:20:48:25:43:db:85:
a6:7f:8c:42:c2:d7:6b:6c:bd:78:94:52:f2:eb:9e:40:eb:67:
08:94:7a:2e:9c:e3:1f:70:48:97:4b:ff:c8:e8:a1:bf:30:09:
98:28:32:22:51:45:01:16:24:00:12:66:c8:eb:0e:3c:0a:80:
9d:ee:d9:7e:ba:d6:a7:f8:3e:bb:1a:fb:28:50:5c:44:be:cf:
ec:74:0f:69:2e:53:9b:23:6f:5a:40:d4:08:33:6e:38:e5:44:
b5:18:2f:c0:55:fd:cd:da:e1:5b:bc:58:29:b7:f4:71:f4:cc:
d7:a0:d9:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGnzN40pPbSFZH3tLOba6hwBhFNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA4MDIwNzQ4MDdaFw0yNzA4MDEwNzUzMDdaMDMxMTAvBgNV
BAMTKEVCREZFQjIzMjY2QUQyNjYxQ0RBRThERDlDQTkxMzhEMjBBNzkwRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVgCxhmEMKIUgmZzrB3nm3RdyG
O6b4iK8D+qqMGBi2MU+zq784woTZ0simuM2oSKvem1rvqt6WHP8qOW+YVPeOjwAA
zj9qbmkEoNIu7yP03mzJAOD5ba0OWW+Kp5Yp9hqB9HM5TBkrp2PvVBFnFWJc0hW6
p5mlHJmqosiKOfk9RcVnZ6RaEAeRkPSqwVVAWyzAtNZjsUAXZII4SvUKQg/tSnBU
xE1SvHUVq8D0Qg0UaRgc2H3lQ5Z4nK87ENqxKy2jzKQ8z2jsbZGE3DRDRTIgWSua
eflyduYZXTcso0IhjFN9uCKztltEaFRtCf9jAUEv34A/XDAUaczM1KEiNTRbAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU69/rIyZq0mYc2ujdnKkTjSCnkPMwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAyNzU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ6H
MA0GCSqGSIb3DQEBCwUAA4IBAQBBg/BRGS2TTMSkciy4Sqi3ab1DhnIPkIquWP5C
X8vleaLXA8+GfT8tcyaBkAni56iKCu5JJej04qlKHkMbxW7NGtmZZtwfGEvZxJMa
+CG9+42srbAP3X7vaGgZXjnAz36WKdV/4nvBZu9E9BKwhv+tgYZBBMoQBxcBCiFK
yn54zpRu85+xyPZNMoMgSCVD24Wmf4xCwtdrbL14lFLy655A62cIlHounOMfcEiX
S//I6KG/MAmYKDIiUUUBFiQAEmbI6w48CoCd7tl+utan+D67GvsoUFxEvs/sdA9p
LlObI29aQNQIM2445US1GC/AVf3N2uFbvFgpt/Rx9MzXoNnm
-----END CERTIFICATE-----
Generated at Wed Aug 26 21:04:28 2026 by rpki-client