Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: nYYw8wOGJ4bQSkqkMpR5tN3ffs/ejz8ONZtLhQzhIRw=
Subject key identifier: D2:1A:DF:22:44:4D:4C:1F:A3:E6:F8:D7:00:91:25:CA:9F:9B:BB:BE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 70C18179BE2304CAAFC2D98570352FB08CB6C3F4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401776.roa
Signing time: Tue 02 Jun 2026 10:06:49 +0000
ROA not before: Tue 02 Jun 2026 10:01:49 +0000
ROA not after: Tue 01 Jun 2027 10:06:49 +0000
asID: 401776
IP address blocks: 2a0a:9a00::/29 maxlen: 48
2a0a:9e00::/29 maxlen: 48
2a0b:8700::/29 maxlen: 48
2a0d:4c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 14:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c1:81:79:be:23:04:ca:af:c2:d9:85:70:35:2f:b0:8c:b6:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 2 10:01:49 2026 GMT
Not After : Jun 1 10:06:49 2027 GMT
Subject: CN=D21ADF22444D4C1FA3E6F8D7009125CA9F9BBBBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:ed:b7:a5:06:26:fc:2a:4e:68:18:c8:a8:
6f:d4:fa:0d:4a:5e:a1:7f:a1:ef:88:46:a4:8a:03:
5b:82:ac:47:ab:97:8a:e1:30:c4:ce:55:60:87:64:
ae:33:56:fd:5d:af:09:d0:61:ff:a2:15:2d:34:d5:
7f:5f:46:53:17:59:f2:f9:1a:65:4a:60:ec:51:7f:
06:ca:03:5f:7c:a6:2e:88:7e:e8:a7:00:c0:a6:4b:
28:f0:e9:ee:52:ce:aa:c4:42:27:aa:0e:1d:d6:e3:
ee:db:a7:cb:eb:97:a0:ee:0f:f4:b8:ea:f6:62:d5:
df:ef:3a:4c:ad:ea:ff:b3:3b:b6:69:fa:1c:be:1c:
08:58:55:16:f4:1c:04:b1:3a:61:26:81:d2:24:b6:
e7:27:fd:39:11:53:6a:c7:93:57:c2:af:cb:9a:30:
3b:66:76:78:af:b4:09:40:52:8f:d5:9f:8f:2c:72:
22:73:4b:44:4f:ba:0d:d7:07:80:50:71:f8:7c:05:
4b:9e:ca:5b:ba:03:ef:56:50:40:22:51:f1:0b:02:
ce:33:3b:7e:04:96:43:dc:de:05:4a:8f:50:6f:30:
9b:17:79:e6:9d:51:11:92:4e:4d:b4:6e:0b:4e:82:
75:86:e4:d1:ca:96:c7:02:1b:ef:be:3e:17:d6:65:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:DF:22:44:4D:4C:1F:A3:E6:F8:D7:00:91:25:CA:9F:9B:BB:BE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:9a00::/29
2a0a:9e00::/29
2a0b:8700::/29
2a0d:4c40::/29
Signature Algorithm: sha256WithRSAEncryption
3a:7c:ca:ab:da:4f:bb:84:36:89:18:26:dd:42:83:06:88:00:
07:68:b6:75:1d:fd:eb:94:c6:c9:60:c9:a3:7e:4e:a2:cc:67:
51:71:c7:71:90:9c:e4:3d:da:86:52:c9:5c:65:cc:82:b9:b4:
98:3b:fa:81:42:36:7a:e7:05:2b:aa:7b:81:d8:72:f1:02:42:
a5:50:68:3f:a6:34:0b:b9:41:8a:05:90:16:fa:c5:77:3c:0c:
43:e9:c5:6a:13:31:6f:96:3b:33:ab:3c:04:f9:57:31:b0:a7:
66:87:f1:6e:ad:bc:92:6c:de:8b:2f:b8:26:de:1d:62:3e:47:
19:89:17:4c:bb:1d:52:81:f3:d3:4c:1b:06:20:04:ad:b4:a9:
db:61:90:14:af:83:cc:4c:ca:cc:6e:32:63:08:a6:66:e7:a4:
8e:7e:a5:4f:61:1d:62:06:e7:75:5c:79:8c:01:8d:77:63:b0:
e2:bd:29:6c:14:33:67:86:69:63:ba:6d:10:70:8a:78:0c:c2:
61:36:1b:2b:28:23:5b:d3:fd:08:d0:31:39:73:8e:cf:97:c2:
56:3a:c1:4a:a0:be:a8:ef:2f:36:38:d1:dc:62:01:41:3c:b7:
76:f4:b1:4c:14:04:c6:17:b5:41:d9:fc:6b:23:3d:4e:ba:df:
2d:9f:5f:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUcMGBeb4jBMqvwtmFcDUvsIy2w/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA2MDIxMDAxNDlaFw0yNzA2MDExMDA2NDlaMDMxMTAvBgNV
BAMTKEQyMUFERjIyNDQ0RDRDMUZBM0U2RjhENzAwOTEyNUNBOUY5QkJCQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjru23pQYm/CpOaBjIqG/U+g1K
XqF/oe+IRqSKA1uCrEerl4rhMMTOVWCHZK4zVv1drwnQYf+iFS001X9fRlMXWfL5
GmVKYOxRfwbKA198pi6IfuinAMCmSyjw6e5SzqrEQieqDh3W4+7bp8vrl6DuD/S4
6vZi1d/vOkyt6v+zO7Zp+hy+HAhYVRb0HASxOmEmgdIktucn/TkRU2rHk1fCr8ua
MDtmdnivtAlAUo/Vn48sciJzS0RPug3XB4BQcfh8BUueylu6A+9WUEAiUfELAs4z
O34ElkPc3gVKj1BvMJsXeeadURGSTk20bgtOgnWG5NHKlscCG+++PhfWZc6tAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQU0hrfIkRNTB+j5vjXAJElyp+bu74wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgqa
AAMFAyoKngADBQMqC4cAAwUDKg1MQDANBgkqhkiG9w0BAQsFAAOCAQEAOnzKq9pP
u4Q2iRgm3UKDBogAB2i2dR3965TGyWDJo35OosxnUXHHcZCc5D3ahlLJXGXMgrm0
mDv6gUI2eucFK6p7gdhy8QJCpVBoP6Y0C7lBigWQFvrFdzwMQ+nFahMxb5Y7M6s8
BPlXMbCnZofxbq28kmzeiy+4Jt4dYj5HGYkXTLsdUoHz00wbBiAErbSp22GQFK+D
zEzKzG4yYwimZuekjn6lT2EdYgbndVx5jAGNd2Ow4r0pbBQzZ4ZpY7ptEHCKeAzC
YTYbKygjW9P9CNAxOXOOz5fCVjrBSqC+qO8vNjjR3GIBQTy3dvSxTBQExhe1Qdn8
ayM9TrrfLZ9fEQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:18 2026 by rpki-client