Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401861.roa
File: AS401861.roa (raw, json)
Hash identifier: pD3AUqZ6q5m2ofea+6zdD6QM+Ofk5p+XxuZojcKcYSQ=
Subject key identifier: C6:A0:CE:5B:1A:19:E4:00:86:C8:12:59:14:9E:E1:97:24:60:3E:3C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5C05F104668F6792573E18A478B804B39A146AE3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401861.roa
Signing time: Thu 05 Mar 2026 08:11:32 +0000
ROA not before: Thu 05 Mar 2026 08:06:32 +0000
ROA not after: Thu 04 Mar 2027 08:11:32 +0000
asID: 401861
IP address blocks: 185.145.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:05:f1:04:66:8f:67:92:57:3e:18:a4:78:b8:04:b3:9a:14:6a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 5 08:06:32 2026 GMT
Not After : Mar 4 08:11:32 2027 GMT
Subject: CN=C6A0CE5B1A19E40086C81259149EE19724603E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:e6:0a:6a:d6:13:80:95:4d:25:58:7f:0b:
04:86:c3:a8:8d:c6:6e:f6:79:7c:40:12:e0:70:90:
88:ac:3e:e2:60:54:02:fa:4b:9b:e1:f6:b2:b6:9f:
2b:f6:27:f0:75:b6:a9:20:40:2e:73:91:ce:dc:59:
1c:47:13:02:a1:15:40:77:73:18:68:f0:dd:94:ba:
5a:27:20:b2:02:13:c4:a1:76:02:c8:4a:0d:fa:1b:
5a:c0:0e:59:44:90:66:da:3c:bf:af:f0:46:f9:42:
bb:a0:29:9d:1b:3b:1f:9e:26:51:47:4f:4b:ac:08:
85:da:4a:f4:34:b3:08:54:34:8f:46:c8:b3:c9:f5:
16:f9:70:cb:2b:c3:f9:e0:87:b3:bb:76:17:99:a7:
81:68:b3:e1:bb:7c:80:7d:51:34:d5:74:a6:92:42:
7d:b7:b8:39:1a:06:53:ec:c6:f8:52:3e:79:19:61:
4b:ab:2c:3c:46:73:9f:c4:ae:6a:d8:9e:fc:6c:18:
94:85:c0:25:70:8b:1c:cf:02:3a:b3:bd:dc:1a:cf:
c5:87:6b:78:f6:12:69:69:2a:f3:25:b0:bd:97:46:
5c:38:fe:37:0e:93:a6:80:f7:87:e5:87:87:b7:7b:
d8:d4:e0:10:77:4e:8c:64:87:d7:69:0e:ba:28:04:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:CE:5B:1A:19:E4:00:86:C8:12:59:14:9E:E1:97:24:60:3E:3C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401861.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fa:39:5f:b4:55:46:df:97:f1:a4:73:54:59:64:13:b0:e6:
b9:73:02:f2:5b:04:53:39:c3:22:66:6b:db:e9:81:9b:ae:aa:
88:8f:20:48:98:93:99:7f:8c:e8:cc:6c:1d:e6:ce:0b:b3:36:
9f:75:2d:b4:b0:26:8e:3e:6c:76:e8:f0:1c:50:6c:39:b0:ad:
b0:96:30:84:1b:e1:6d:f5:63:d7:20:23:cf:a4:2e:73:1e:5e:
cf:0c:ab:bd:fb:75:44:de:1a:9a:b9:99:66:20:dd:bc:a8:95:
2c:4b:4c:19:bc:c1:71:a8:39:05:69:af:2c:95:7a:3d:e3:24:
f3:1d:03:32:70:6a:44:5f:7c:c5:7e:da:d5:95:e2:3f:5a:b0:
0d:c4:4f:87:9a:7c:61:84:ba:27:ad:a5:64:2e:f2:9e:4e:15:
4d:1c:ec:4a:13:bd:29:0b:a5:99:dd:3d:63:35:37:35:d6:9c:
de:30:c3:ff:6b:c5:10:38:c9:f9:71:fc:3d:a4:1a:05:6d:2c:
d9:eb:77:12:69:d8:1a:4f:72:18:7c:03:1c:cb:0b:26:f1:77:
9f:2c:55:27:42:64:21:5f:8b:c7:d7:36:bd:0a:d9:7f:72:14:
65:10:0d:e5:f7:9a:9a:81:37:17:15:e8:48:59:ee:74:08:bc:
47:8f:92:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 19:06:50 2026 by rpki-client