Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400951.roa
File: AS400951.roa (raw, json)
Hash identifier: 3tbS2JN5XmlQgdnbbOHqHjEnnt5ojNHjnDchdzvFOZE=
Subject key identifier: 5D:63:59:72:0F:73:C5:BA:81:2D:56:42:2F:05:D6:0A:07:70:BD:52
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1CA6336D99B90A85DAFCEEEA8C928ECFCB707298
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400951.roa
Signing time: Fri 22 May 2026 17:55:40 +0000
ROA not before: Fri 22 May 2026 17:50:40 +0000
ROA not after: Fri 21 May 2027 17:55:40 +0000
asID: 400951
IP address blocks: 181.215.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 14:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a6:33:6d:99:b9:0a:85:da:fc:ee:ea:8c:92:8e:cf:cb:70:72:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 22 17:50:40 2026 GMT
Not After : May 21 17:55:40 2027 GMT
Subject: CN=5D6359720F73C5BA812D56422F05D60A0770BD52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:a2:42:f2:5e:40:c5:0e:f4:15:40:b8:73:
33:3a:c2:c8:f0:81:ab:bf:bc:39:74:86:45:16:23:
72:3e:88:94:81:95:20:05:ee:13:e5:6a:d9:95:ec:
ee:74:6f:61:a2:f1:be:b2:37:c0:bf:7f:e7:2d:eb:
e1:eb:17:8f:0e:5a:86:a0:5b:77:6e:45:bc:73:74:
8f:14:f8:c4:05:4a:ac:bc:04:d9:ef:25:61:3d:dd:
8f:18:39:62:d4:9d:dd:4d:67:18:04:a5:d1:68:7a:
04:9b:fd:1a:44:e4:d7:05:10:62:89:76:5c:94:d7:
82:8d:ea:4c:ad:c9:63:6b:32:a7:df:20:b2:b4:4f:
2b:83:27:d4:8b:b2:4e:70:f9:07:5f:7d:57:1b:10:
c6:e1:a2:86:91:4c:70:1b:c5:12:15:c4:24:58:ca:
aa:fb:d1:c4:4b:58:e2:0b:79:66:af:53:07:77:89:
5d:d9:b4:74:a6:9e:25:47:ef:f4:55:75:8e:76:25:
cf:78:70:a1:1b:9b:b1:a6:49:79:1f:65:28:26:b4:
10:11:b2:de:74:64:34:9c:9f:b7:3f:d8:aa:59:f5:
55:bd:18:55:9c:b2:82:1a:8c:5e:e1:b5:17:8c:87:
ca:b3:86:6f:f8:2e:28:df:1d:bb:bb:50:8b:17:1f:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:59:72:0F:73:C5:BA:81:2D:56:42:2F:05:D6:0A:07:70:BD:52
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400951.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.184.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:d3:40:a0:3c:50:3d:ff:54:69:d9:2e:e4:9a:93:5c:91:b6:
9e:13:97:6c:01:36:f0:a8:1e:4b:d9:56:92:6b:36:07:d1:42:
5e:5e:39:75:ff:30:60:0a:e1:2e:eb:ef:6e:4c:e8:7b:e1:bf:
dd:34:d4:1e:d5:7f:b4:2e:26:95:c4:76:45:68:05:c3:36:f9:
2f:9b:79:9a:94:5e:02:8f:6e:b2:ad:1b:ca:98:80:8a:f5:cd:
f0:56:db:ef:e3:ab:74:f4:ea:30:cf:02:31:b2:a3:6f:f8:be:
18:33:48:fd:c0:17:f7:a6:4c:f3:e8:05:6c:fd:ee:1e:d5:48:
1d:e6:fb:02:d8:fb:f6:12:3a:7c:1e:93:86:0d:77:c3:31:e0:
b6:4e:d9:07:d2:41:79:80:38:5f:61:78:57:89:0d:73:b7:0f:
85:4b:81:e3:45:95:bc:1c:93:a8:3b:50:d9:42:eb:a9:34:80:
15:33:83:58:22:3e:34:96:cd:b7:78:0a:82:76:25:ed:1b:e3:
b9:d0:cd:2f:06:bb:98:fc:b1:14:6d:f9:47:14:5d:16:fc:3f:
07:2a:d8:4e:d4:fe:ea:6d:15:46:6d:20:83:f3:08:bb:d4:9a:
58:7a:24:9b:04:f8:0a:1f:21:ad:e7:f8:53:fc:48:1c:fa:48:
4b:a0:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:19 2026 by rpki-client