Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401293.roa
File: AS401293.roa (raw, json)
Hash identifier: oyA/eq2lu6WxnkEvD4sVM2cymS6vUFomkFIrz3JLgJM=
Subject key identifier: 58:F6:65:1E:9F:28:BC:8D:99:92:12:B1:7B:FC:AD:9A:DA:E3:4B:82
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2D6219B562B6D28645E91A129DFA32DF61CEE469
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401293.roa
Signing time: Sat 12 Sep 2026 05:54:20 +0000
ROA not before: Sat 12 Sep 2026 05:49:20 +0000
ROA not after: Sat 11 Sep 2027 05:54:20 +0000
asID: 401293
IP address blocks: 181.215.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:62:19:b5:62:b6:d2:86:45:e9:1a:12:9d:fa:32:df:61:ce:e4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 12 05:49:20 2026 GMT
Not After : Sep 11 05:54:20 2027 GMT
Subject: CN=58F6651E9F28BC8D999212B17BFCAD9ADAE34B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:e8:06:c1:ae:77:bb:65:e0:4b:31:a2:e9:
3e:67:57:fc:4a:bc:ab:3d:0c:53:68:c5:02:d7:ae:
05:91:6d:8b:8b:28:a5:03:20:08:ef:a2:87:db:3c:
ff:5e:a4:d8:15:63:8e:e6:14:af:97:fb:fb:3b:f0:
ff:0c:5c:da:b5:5f:dd:0c:b0:af:96:65:db:52:1e:
32:08:ec:38:b1:a8:96:28:30:ea:ff:45:14:e7:bb:
7f:28:80:7d:11:c4:2b:d1:6b:d2:0d:9c:0b:a0:84:
5b:59:d1:c3:d5:d2:c3:2f:c7:d9:09:a1:03:3f:36:
4d:02:51:7f:ad:37:3f:e2:dc:74:31:d9:6b:99:10:
1f:c9:6f:0d:f4:d6:da:f7:03:89:63:69:9c:8c:2a:
62:cf:6a:9c:9e:d5:a0:71:81:9e:5b:71:49:b1:9b:
90:7d:95:26:5a:72:88:f4:97:55:47:15:d2:4a:30:
37:3b:5b:94:bd:6d:3d:90:94:2a:0d:b8:45:4b:57:
e6:53:77:61:ad:10:92:40:6a:91:6f:fb:f4:08:ac:
55:d6:cd:be:93:00:fc:cb:f5:45:7a:1a:1b:5d:9c:
b5:49:53:d7:6d:3e:d0:59:4f:a8:27:2c:ec:a8:97:
cb:80:54:02:36:a2:13:53:07:3d:d1:9e:0d:98:6d:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F6:65:1E:9F:28:BC:8D:99:92:12:B1:7B:FC:AD:9A:DA:E3:4B:82
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:4e:3f:91:51:03:60:a3:eb:32:4c:bd:ad:b4:06:dc:03:3f:
d3:27:d1:42:7e:a2:a3:a3:0b:5b:ff:ca:ce:39:d8:79:b9:1a:
27:14:d8:50:30:a2:89:02:73:9a:74:b3:16:73:20:75:ca:83:
fa:6b:8c:c7:1b:61:13:8a:4a:e0:c9:76:4f:e6:8b:91:39:25:
19:28:6a:13:b3:55:75:f8:62:5a:36:44:4c:fa:b5:25:e0:21:
3d:d2:65:4b:81:a5:f1:2d:3e:35:86:c6:3b:d2:88:de:e1:78:
8e:a3:62:db:ed:ab:47:f5:44:c1:e3:90:8a:2e:65:89:71:83:
c0:2e:65:23:22:8b:d1:32:55:e6:81:8e:52:66:84:bc:54:3e:
b7:b8:9d:65:27:72:b2:ed:66:40:7b:75:9d:3f:bb:d5:a2:51:
96:9d:c6:5a:e3:39:ff:23:3a:93:c7:2f:af:d0:9f:cb:52:c9:
a9:a0:6e:41:d7:d5:12:03:fd:ce:61:82:45:de:e7:6e:cd:ef:
d2:ba:0d:2c:69:d9:58:76:77:e0:49:18:2b:64:eb:7c:d8:68:
f9:87:d1:a2:12:16:d1:b7:1a:15:2b:6e:c1:98:c4:6e:c7:62:
5f:dc:23:09:0d:2e:09:9d:a8:57:cd:0c:07:b8:3f:2b:a8:ce:
94:6a:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 14:35:37 2026 by rpki-client