Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS269070.roa
File: AS269070.roa (raw, json)
Hash identifier: FIYVMamS7qkkV3GMIXsmNR+QVYT1hfBd4NJvQ76T4c4=
Subject key identifier: 5F:15:F5:82:D5:68:D5:D6:E5:6F:E2:B2:63:D0:92:01:88:A4:C5:31
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 32F91441C58F109D2C92EAE9EC70B09F64263A1B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS269070.roa
Signing time: Sun 27 Sep 2026 00:03:43 +0000
ROA not before: Sat 26 Sep 2026 23:58:43 +0000
ROA not after: Sun 26 Sep 2027 00:03:43 +0000
asID: 269070
IP address blocks: 179.61.154.0/24 maxlen: 24
181.215.0.0/24 maxlen: 24
181.215.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f9:14:41:c5:8f:10:9d:2c:92:ea:e9:ec:70:b0:9f:64:26:3a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 26 23:58:43 2026 GMT
Not After : Sep 26 00:03:43 2027 GMT
Subject: CN=5F15F582D568D5D6E56FE2B263D0920188A4C531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:19:77:11:b1:9e:53:8b:49:4b:d6:df:2e:
68:e2:09:22:9e:4e:40:a1:64:8a:8e:5e:d3:ae:25:
83:bf:70:ea:86:30:46:3b:04:59:be:9c:a3:40:c4:
dd:3e:8a:35:82:ce:2c:e0:ed:57:f0:26:d9:03:b3:
2c:23:a7:0d:e0:8d:06:1c:5f:89:eb:fb:26:61:3b:
f2:89:60:ee:62:ee:d1:a0:d2:8e:b2:8c:d2:d0:b8:
34:33:8e:e1:1b:cf:c6:ce:b9:87:11:d2:5b:af:18:
17:03:f6:61:d9:61:18:76:26:d6:7f:7d:b8:35:4c:
38:44:b2:da:6a:34:e2:9b:7e:78:71:c7:6d:fa:c4:
3c:d9:73:87:c2:02:f1:c2:40:af:86:47:36:d6:30:
71:77:8c:9d:1b:35:09:89:58:fb:a3:78:42:d3:53:
39:6b:11:34:39:07:5d:55:99:1d:ff:04:e0:29:0e:
f2:67:21:a9:2e:27:ea:6a:61:f2:e7:d2:8f:90:a0:
b7:d6:98:ff:18:86:cc:e8:6f:49:4f:36:ce:c7:23:
73:d0:08:02:57:af:28:b7:3f:e9:95:98:d2:46:29:
6b:85:8c:7d:11:ea:c8:79:64:67:50:48:fa:1d:f5:
3d:a0:01:3a:b5:cf:3a:c8:30:b9:85:08:f2:7b:8d:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:15:F5:82:D5:68:D5:D6:E5:6F:E2:B2:63:D0:92:01:88:A4:C5:31
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS269070.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.154.0/24
181.215.0.0/24
181.215.48.0/24
Signature Algorithm: sha256WithRSAEncryption
47:24:70:fa:e0:85:b7:78:b9:10:72:64:8c:47:1c:85:62:73:
46:e4:74:70:36:1d:fb:b4:32:33:c8:76:d2:c4:13:45:53:de:
18:89:fa:e0:f0:26:d5:95:ed:36:af:4d:99:91:d9:98:9b:36:
3a:81:27:d0:ae:73:7f:ed:99:68:3e:1d:26:ba:c5:cc:8d:2c:
91:5e:3b:ee:1e:72:0b:42:2a:93:99:13:35:17:0c:97:d2:e4:
14:f1:4f:2d:6c:a0:e0:83:1a:3c:98:95:a9:70:cf:48:5f:8a:
70:a2:3a:d1:94:36:62:a2:46:d0:ec:c9:65:b8:a4:71:49:2c:
63:63:08:1b:b5:99:15:e3:a1:64:4b:47:9d:ed:b6:e7:46:c0:
30:7d:a5:3f:8a:c7:d3:34:9f:49:2b:7f:72:b8:f4:58:b6:f4:
b6:df:cb:31:24:21:ea:ae:31:a5:84:3a:5e:80:05:a7:c4:35:
ee:00:59:9e:ea:64:3e:f8:7a:b0:d9:be:19:4f:98:c4:42:d8:
b2:8e:ac:68:be:f0:8d:f0:87:c2:43:99:1d:18:50:a6:33:8f:
a1:8e:de:c5:81:e6:df:5b:41:26:ad:ce:a3:0c:f7:97:50:59:
b3:8b:bd:c4:db:a5:ec:21:43:bd:ef:56:5d:31:79:a6:56:a0:
fc:60:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:08:54 2026 by rpki-client