Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401103.roa
File: AS401103.roa (raw, json)
Hash identifier: GbBO6Fz2WTPAdZrAJwF/8nXDNtWJz+9Uce+4KQMYk64=
Subject key identifier: C4:A4:D3:0D:64:1B:EF:5B:FC:ED:07:C8:C2:F8:3F:20:06:01:42:34
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4CF2BE61CF0392A6D4097C0C974864A5F8C86555
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401103.roa
Signing time: Sat 18 Jul 2026 23:49:13 +0000
ROA not before: Sat 18 Jul 2026 23:44:13 +0000
ROA not after: Sat 17 Jul 2027 23:49:13 +0000
asID: 401103
IP address blocks: 179.61.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f2:be:61:cf:03:92:a6:d4:09:7c:0c:97:48:64:a5:f8:c8:65:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 18 23:44:13 2026 GMT
Not After : Jul 17 23:49:13 2027 GMT
Subject: CN=C4A4D30D641BEF5BFCED07C8C2F83F2006014234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:d1:05:4f:e0:77:94:8c:e5:6b:26:b4:18:
5d:f3:c3:8e:89:39:03:03:e0:66:85:a9:32:4d:10:
2f:18:65:02:22:da:44:70:04:b6:7b:3a:4d:1a:4a:
fc:2a:7c:ea:68:71:76:d7:5e:42:25:81:ea:d3:dd:
7e:ca:d7:f4:39:ff:4f:76:22:27:16:65:cd:1c:b5:
de:f3:7d:5d:ef:1d:ea:ad:fb:de:80:b7:c2:a3:f6:
a7:f7:fc:dd:74:08:fc:71:3b:e4:60:6e:cb:49:ed:
69:3f:1e:a9:ca:4f:ee:50:d5:d5:27:ad:ce:2d:db:
98:ac:59:f1:ae:bf:66:00:9d:dc:37:d5:14:0d:d6:
2d:f7:c2:44:e5:55:05:a5:9d:0a:7f:56:81:a4:23:
d4:9e:cf:b2:3d:7e:04:f0:b2:8c:ae:c5:a1:cb:e5:
fb:c9:f1:9c:f0:42:cc:46:07:38:fc:44:86:82:29:
96:ee:2b:35:fa:60:67:14:01:f5:da:41:92:c4:ab:
d4:81:9e:80:eb:59:82:2a:15:a0:c2:e0:58:51:6e:
a6:f5:97:2b:6b:04:e1:48:4d:64:e2:83:ad:d2:78:
52:a2:7a:1c:f8:f2:bf:3d:dc:bd:c8:f6:96:70:80:
be:a2:d4:f3:b1:e8:00:13:74:89:f0:b9:c5:50:bb:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:D3:0D:64:1B:EF:5B:FC:ED:07:C8:C2:F8:3F:20:06:01:42:34
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.187.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9c:0c:c1:6f:c5:9b:82:18:12:47:bc:0a:70:f0:3b:51:6a:
8d:e3:1c:ec:e4:e6:cc:06:44:15:73:2d:ef:ee:51:68:b7:ac:
de:c2:1a:3a:49:90:89:f9:95:3a:84:e7:51:20:1b:01:48:fd:
75:d5:0c:16:ef:ba:c9:83:99:52:ac:52:e4:19:5f:32:de:ac:
3c:55:bc:bf:fb:ec:3c:a1:7c:f3:b3:58:09:33:21:e4:f0:73:
77:96:2d:14:d7:15:72:d1:50:8b:90:93:de:e9:0b:5f:8a:34:
4c:63:49:3b:d6:5c:1f:61:c6:1c:a5:b5:c9:23:a8:b4:18:2e:
ba:e0:67:d6:da:01:d2:dd:2a:1d:22:38:02:3f:40:28:b0:1f:
ea:1f:ee:78:7e:f3:ea:d3:a6:a0:67:b3:97:af:9e:a4:63:d8:
9e:a6:2e:63:23:12:ff:71:b5:0f:2e:ea:28:9d:07:17:93:8f:
7c:03:57:72:a9:b8:c1:9b:be:8e:e7:9f:9f:b4:81:8e:11:f7:
e5:0e:55:d9:9e:fc:33:45:b8:1c:ff:48:7b:3b:7f:5b:5f:f0:
90:1a:22:77:9b:a9:bb:37:71:08:43:ec:8f:3e:97:2b:06:3b:
ae:ac:97:d3:1d:7e:0c:c0:c9:8c:79:b5:74:96:ad:be:fd:69:
0e:e6:1e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:40 2026 by rpki-client