Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402186.roa
File: AS402186.roa (raw, json)
Hash identifier: fvt+Rvi29+UapzESnG6Jbhinjq+Uk92IJHopoW4o3HI=
Subject key identifier: BC:0B:B1:B0:69:45:B2:9D:01:8D:7F:AD:1E:D5:2C:21:19:A2:42:17
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2F3E6DA64CA2C50E8E0CFAB990CD57204BF1A8B3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402186.roa
Signing time: Fri 03 Jul 2026 07:59:54 +0000
ROA not before: Fri 03 Jul 2026 07:54:54 +0000
ROA not after: Fri 02 Jul 2027 07:59:54 +0000
asID: 402186
IP address blocks: 191.96.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3e:6d:a6:4c:a2:c5:0e:8e:0c:fa:b9:90:cd:57:20:4b:f1:a8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 3 07:54:54 2026 GMT
Not After : Jul 2 07:59:54 2027 GMT
Subject: CN=BC0BB1B06945B29D018D7FAD1ED52C2119A24217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:2a:bd:a6:df:3f:b1:56:9a:bb:6d:b0:8b:
f8:62:a1:f1:8b:dc:5b:61:02:3f:3e:75:0a:54:48:
74:47:71:33:50:ac:6b:65:f8:fb:80:5c:4b:4d:fe:
64:54:f0:6e:89:f5:87:f5:8d:ed:f4:79:9a:77:a5:
da:e9:32:f5:9d:6d:97:77:72:e3:67:eb:f5:e5:06:
7f:8d:8a:52:ed:45:53:ca:cf:e9:2c:3b:08:dd:3b:
8e:1f:14:50:45:a8:b8:e9:ea:e7:ec:23:ef:40:a9:
44:a1:cc:0f:b1:6c:a2:e4:1b:93:d2:a5:fb:ba:84:
06:c1:31:ad:52:88:54:75:df:cc:1e:46:96:67:f0:
89:e5:78:24:ae:4b:f4:b2:b0:72:2f:7a:63:7a:e9:
46:60:74:58:c0:0e:eb:20:48:c0:5a:a8:a4:c6:21:
6b:27:e7:48:6e:73:12:96:22:9c:86:f6:27:1c:77:
79:c3:f2:e8:e6:bd:95:81:db:76:0e:e6:8b:7a:2c:
23:55:f9:5e:53:74:c1:b9:c6:3e:44:f7:64:3e:5a:
4f:0d:35:10:7d:8f:17:49:e7:fd:73:a2:c5:db:3d:
9b:6c:08:d3:c5:78:dd:a2:17:aa:0a:9a:75:cd:21:
5b:19:38:42:a5:be:9d:56:d7:99:e8:d2:4b:71:2a:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:B1:B0:69:45:B2:9D:01:8D:7F:AD:1E:D5:2C:21:19:A2:42:17
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.13.0/24
Signature Algorithm: sha256WithRSAEncryption
44:82:aa:71:d3:5c:6a:66:4c:69:80:a2:d8:f0:1f:3c:87:48:
72:72:d4:56:a5:5e:dc:59:a8:07:77:c2:25:ee:b9:3d:fa:79:
76:42:4c:4f:48:6a:05:e3:a2:f2:43:ee:30:e0:78:64:66:29:
2b:82:fc:d9:3e:b5:8c:2e:61:52:50:d4:12:f2:bc:51:48:03:
58:d2:1d:d2:98:78:16:c2:b9:7f:a5:b6:03:1a:43:c3:98:7c:
51:34:59:ef:ae:9c:3a:eb:d0:30:c6:bb:7c:cf:b0:be:3b:51:
d9:3c:05:4f:c0:9d:d3:5c:4a:3d:e8:91:a1:d5:93:0e:49:75:
5a:73:e4:37:3b:c1:17:cf:7b:7d:cc:d3:aa:b7:ae:d0:d8:0a:
4a:cb:0c:7f:23:9d:88:4c:23:74:52:f5:81:fa:a0:09:8c:b5:
40:5e:79:81:d0:f8:fc:47:3f:4b:e2:fd:dc:86:33:ab:6e:a5:
9c:98:c2:0b:95:a0:39:09:72:90:9f:f5:af:83:e9:e3:c5:e7:
84:22:59:5a:82:b7:2c:a7:9e:6d:e5:04:27:1d:9d:d4:96:9d:
3a:a5:a7:9e:3a:e9:e7:ce:e4:92:35:1c:ec:06:d9:1c:03:1e:
f5:21:7b:23:9b:d7:b7:ee:23:60:35:9d:57:11:92:7a:69:d1:
d8:39:47:cb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIULz5tpkyixQ6ODPq5kM1XIEvxqLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA3MDMwNzU0NTRaFw0yNzA3MDIwNzU5NTRaMDMxMTAvBgNV
BAMTKEJDMEJCMUIwNjk0NUIyOUQwMThEN0ZBRDFFRDUyQzIxMTlBMjQyMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmiq9pt8/sVaau22wi/hiofGL
3FthAj8+dQpUSHRHcTNQrGtl+PuAXEtN/mRU8G6J9Yf1je30eZp3pdrpMvWdbZd3
cuNn6/XlBn+NilLtRVPKz+ksOwjdO44fFFBFqLjp6ufsI+9AqUShzA+xbKLkG5PS
pfu6hAbBMa1SiFR138weRpZn8InleCSuS/SysHIvemN66UZgdFjADusgSMBaqKTG
IWsn50hucxKWIpyG9iccd3nD8ujmvZWB23YO5ot6LCNV+V5TdMG5xj5E92Q+Wk8N
NRB9jxdJ5/1zosXbPZtsCNPFeN2iF6oKmnXNIVsZOEKlvp1W15no0ktxKm1hAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUvAuxsGlFsp0BjX+tHtUsIRmiQhcwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAyMTg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2AN
MA0GCSqGSIb3DQEBCwUAA4IBAQBEgqpx01xqZkxpgKLY8B88h0hyctRWpV7cWagH
d8Il7rk9+nl2QkxPSGoF46LyQ+4w4HhkZikrgvzZPrWMLmFSUNQS8rxRSANY0h3S
mHgWwrl/pbYDGkPDmHxRNFnvrpw669Awxrt8z7C+O1HZPAVPwJ3TXEo96JGh1ZMO
SXVac+Q3O8EXz3t9zNOqt67Q2ApKywx/I52ITCN0UvWB+qAJjLVAXnmB0Pj8Rz9L
4v3chjOrbqWcmMILlaA5CXKQn/Wvg+njxeeEIllagrcsp55t5QQnHZ3Ulp06paee
OunnzuSSNRzsBtkcAx71IXsjm9e37iNgNZ1XEZJ6adHYOUfL
-----END CERTIFICATE-----
Generated at Sun Jul 19 16:40:10 2026 by rpki-client